Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
File:                     6diA6IcHf62Ct0yZgBD6myU-Dqg.mft (raw, json)
Hash identifier:          ipq8EDTLRZWuIoOsOO0RLbPwy8A8M1p4lwruqdaW4SE=
Subject key identifier:   D3:42:A8:C0:22:E9:5B:D8:AF:92:29:77:D4:D5:06:65:8B:1E:43:D8
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Certificate issuer:       /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial:       019D99D0CF623448EB21A41721F6AA5A6B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:31 +0000
Files and hashes:         1: 1RM4oPNA5zV8gpBFXwkv_ja9FiQ.roa (hash: CPN5leskj6WSt3dvfwwAxdnUjDWOGaEyTKMTxOxmgto=)
                          2: 6diA6IcHf62Ct0yZgBD6myU-Dqg.crl (hash: fBbZf9egW7laa7/gNxDQur0LbdO+J8286Ps+jZ7zGDs=)
                          3: WtgMSRP5OEmkxWvX-DhuOQDwMBk.roa (hash: l1AreQt6W2uLe+jTGiT0wGfZWGbfEdoV2rC3OiVwsTw=)
                          4: kjq1O54rStRLxuBF-ybXt7bPUso.roa (hash: d7NKhTPVVN8Gxf/3FcrZ3uTAuZLWMskRPFJRqlThNnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:cf:62:34:48:eb:21:a4:17:21:f6:aa:5a:6b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
        Validity
            Not Before: Apr 17 05:01:31 2026 GMT
            Not After : Apr 18 05:01:31 2026 GMT
        Subject: CN=d342a8c022e95bd8af922977d4d506658b1e43d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:1a:0a:49:c2:7c:7f:6b:c6:1e:93:81:fe:
                    59:d3:67:c3:0f:25:2b:69:e4:35:19:15:d7:4f:eb:
                    28:c6:c8:41:42:42:83:ab:a0:0e:50:f2:66:97:3b:
                    e6:c6:22:eb:b8:9b:70:cf:81:65:d3:97:b7:92:d6:
                    af:c0:09:16:1c:56:e3:bb:4a:18:57:ab:5a:46:42:
                    80:13:0e:80:db:17:0a:75:8c:9c:7a:6b:ad:45:d1:
                    c2:60:bd:89:f6:59:a4:f9:5e:d3:1e:66:15:a2:26:
                    a0:77:7b:b5:59:5b:83:57:f9:97:af:1a:35:1a:4c:
                    f2:3f:aa:1a:00:39:11:25:1a:8d:74:0e:65:c8:24:
                    01:da:af:26:f6:04:b5:57:fb:e4:43:2c:4f:31:17:
                    71:af:e1:6d:ab:81:b5:41:81:bf:f6:d1:b6:90:12:
                    c8:61:81:26:cb:85:bb:9e:44:4a:2f:80:cf:9b:9e:
                    ea:aa:9e:27:32:f7:f8:3c:e1:70:e8:39:e3:1d:0b:
                    a2:f0:e3:3a:0d:0e:b8:3c:70:6d:09:6d:59:31:76:
                    be:91:80:a1:ec:61:34:ef:f8:0b:d2:a2:d3:22:25:
                    76:1f:85:37:36:1c:90:fd:86:e8:8f:a7:b3:06:bd:
                    03:05:51:f9:2a:37:47:d5:f6:fb:1a:3e:25:ed:8e:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:42:A8:C0:22:E9:5B:D8:AF:92:29:77:D4:D5:06:65:8B:1E:43:D8
            X509v3 Authority Key Identifier:
                keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:a8:63:94:d2:57:0d:cc:07:16:d4:5e:da:7c:7d:96:a1:
         64:b4:5d:59:eb:9e:00:ab:11:04:5f:fb:b8:ab:b6:e6:cd:fc:
         8b:99:63:58:e3:88:c5:5a:ff:d4:32:f7:b4:10:12:59:f3:79:
         a4:04:35:4a:55:19:dc:62:37:aa:95:0f:d6:c8:c8:52:d7:46:
         4d:1d:9b:be:e0:21:96:64:b4:60:a8:92:a2:3a:8b:c8:f3:72:
         ab:a6:08:00:05:42:96:4f:73:a2:95:2d:db:4b:55:f0:c9:21:
         75:90:11:30:2e:2f:cc:79:f4:fc:dd:bd:36:0d:69:18:ee:e0:
         28:96:42:16:85:12:36:a5:67:7b:a0:45:43:ad:b0:87:63:b9:
         73:bf:ab:c6:fa:d3:e5:c3:39:3d:a8:a3:1e:89:96:f1:59:be:
         fa:bd:09:a3:1c:04:6c:24:91:6c:f8:1d:b7:e5:2a:44:35:f5:
         20:6a:12:68:25:2b:bf:e9:6c:97:12:dc:87:55:53:5e:70:56:
         dc:49:29:6e:29:4b:b0:6d:a4:93:9a:b8:c9:bf:e2:d0:9a:9c:
         7b:58:7c:45:bc:5c:95:c0:15:e8:6f:d6:c3:3e:0b:b2:56:ec:
         28:7d:b0:22:6f:2b:03:06:f0:e2:69:17:c0:18:1f:92:ad:6e:
         b3:48:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:38 2026 by rpki-client