Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File:                     6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier:          olVVIzUTkOB/C1FtS7/sf4RjRIoIcKI9IlSulBcU3VA=
Subject key identifier:   EC:9F:C5:09:9F:37:06:31:D5:BD:61:A7:0A:1A:A3:54:06:8B:2C:14
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer:       /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial:       019D7632467F5032ED1CE903BBBE6AE7ABA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number:          1255
Signing time:             Fri 10 Apr 2026 07:01:39 +0000
Manifest this update:     Fri 10 Apr 2026 07:01:39 +0000
Manifest next update:     Sat 11 Apr 2026 07:01:39 +0000
Files and hashes:         1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: TqJCVH8G8HEyxPVzorWGQoNCWGOMhRf96HL+sLLZpOk=)
                          2: FCkS32niDqTieJEg273lZaADBO4.asa (hash: X7OKZkohiCA52OimXwo3Rcigub3BUOIbW9Q5dXYSznI=)
                          3: q0LlzmM8E8pM2I1fVThdkBbhcsc.asa (hash: KUK6/Ec9nAX5NcTnuxJ3vbPAN4QtO/b7t3p4IVGMuRU=)
                          4: upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa (hash: 2Rk/P9oSpdtf8edjp9QJY+dBNX8kPTP7ILwi67bXY+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 07:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:32:46:7f:50:32:ed:1c:e9:03:bb:be:6a:e7:ab:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
        Validity
            Not Before: Apr 10 07:01:39 2026 GMT
            Not After : Apr 11 07:01:39 2026 GMT
        Subject: CN=ec9fc5099f370631d5bd61a70a1aa354068b2c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:02:0c:f3:fe:fa:a7:69:f4:34:97:3c:4c:
                    64:a9:fb:d0:e0:1c:e7:fa:83:dc:e4:fc:58:01:12:
                    d4:69:05:d3:36:fa:2d:5c:cc:bf:1f:3e:b5:d9:ea:
                    8f:28:91:d9:0b:7a:23:b5:13:8b:b9:f5:0d:aa:7c:
                    fa:21:d9:35:66:7b:d9:ea:4f:79:5c:4a:0f:a1:89:
                    0d:d4:f9:a7:bc:d2:64:89:07:76:4a:91:c3:f1:06:
                    5a:ed:29:37:01:d2:08:99:c6:2a:e4:a3:fd:b2:f2:
                    9e:ed:7a:5e:db:2c:6e:58:7c:cc:79:4a:74:0b:01:
                    74:5b:4b:b9:61:24:63:1f:35:e5:20:0d:97:fe:91:
                    dd:a1:bc:5a:56:97:66:4c:0a:ea:3d:ac:ec:cd:b1:
                    4e:39:1b:84:4c:53:a4:ec:68:7c:1b:a7:8a:46:da:
                    26:5e:81:69:c9:14:65:b0:cb:88:97:b9:90:d5:74:
                    8a:a8:8a:c2:a5:50:e4:10:b1:8e:f6:91:bd:76:47:
                    0e:df:25:4d:9c:8d:b4:11:68:04:19:51:8e:f1:39:
                    8c:69:07:76:71:3d:f7:6c:3e:ff:eb:46:12:ab:68:
                    73:f4:aa:ac:92:81:dd:64:8f:6e:08:1b:45:d1:82:
                    2b:cd:6f:a0:53:9a:84:db:1f:10:d7:56:67:ea:4c:
                    31:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:C5:09:9F:37:06:31:D5:BD:61:A7:0A:1A:A3:54:06:8B:2C:14
            X509v3 Authority Key Identifier:
                keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:82:3a:cb:fc:ef:49:42:c3:8d:fd:0b:33:ae:23:d3:bc:44:
         e9:d8:49:1a:31:2a:8c:2d:e8:78:cc:2c:82:9e:62:ca:4d:6d:
         89:31:48:45:0b:43:62:9c:38:b1:b3:30:d6:80:77:c5:0d:0c:
         08:cf:09:98:3f:ec:43:3f:46:03:2e:ca:3a:f6:18:a9:21:b5:
         55:58:12:0c:53:b4:02:2e:a2:07:e4:4b:1b:02:ca:57:c9:70:
         13:fd:07:03:ce:cc:98:e2:0d:2e:01:8d:e8:3a:9f:05:77:d7:
         6a:6b:d7:7c:27:b4:6e:cb:e7:e2:70:e7:05:58:d5:da:f9:f3:
         ab:5f:be:80:88:c4:f0:7f:cd:fc:ba:55:1a:4c:75:41:b9:a1:
         cd:56:d7:42:09:34:69:58:97:f5:e6:60:5b:28:ca:13:63:f2:
         57:c8:79:3c:09:bc:13:03:40:60:66:61:77:12:e1:6e:f3:be:
         0c:bd:6e:a3:45:dc:6d:c4:4c:78:02:0d:ba:3e:a2:50:7b:e1:
         de:05:db:1a:f1:44:c1:1d:4a:21:35:ce:07:9c:29:fd:41:cc:
         d6:c6:fb:04:fa:b9:1d:4f:a1:8d:43:37:82:bf:e5:45:9a:3d:
         f9:c0:fb:6c:69:3f:ce:be:39:2f:7e:2f:4d:1e:d9:f5:03:14:
         56:cb:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 15:08:29 2026 by rpki-client