Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File:                     0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier:          KX3Tv1iULL3gBgzVL/NbwslXdjSjRPpsgkf1A2JmIxA=
Subject key identifier:   F7:67:14:19:B9:C4:D0:15:E1:B4:07:08:29:2A:B5:36:2F:24:BA:E4
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       019DCD5026CB46044FDA2F37B29131FE9542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number:          0156
Signing time:             Mon 27 Apr 2026 05:01:15 +0000
Manifest this update:     Mon 27 Apr 2026 05:01:15 +0000
Manifest next update:     Tue 28 Apr 2026 05:01:15 +0000
Files and hashes:         1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: ZbupOQOHanvK0s7Ve9XCrX16wojugkuY//gX1/2F0Jk=)
                          2: IepspGCwPLMLBPzsExkQzO4QbNY.asa (hash: 8W3LBKMDCnMT8UFQAj2NhlyNWtdNB7dBnh/RCWdde2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:50:26:cb:46:04:4f:da:2f:37:b2:91:31:fe:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Apr 27 05:01:15 2026 GMT
            Not After : Apr 28 05:01:15 2026 GMT
        Subject: CN=f7671419b9c4d015e1b40708292ab5362f24bae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:fe:bc:ca:3d:db:86:f0:04:82:b2:05:61:
                    b4:bd:9b:50:e8:b6:6d:db:ec:f9:01:d3:77:eb:06:
                    97:f3:67:b8:ea:f0:49:0d:c4:eb:b9:bf:30:ae:9f:
                    2a:75:c1:43:c4:dc:e2:a6:a4:b1:8e:96:86:13:a9:
                    e1:32:ad:e1:7b:42:04:03:d3:ba:54:d4:a9:dd:5a:
                    78:f7:48:43:d5:af:ef:22:e6:f3:81:7f:14:91:83:
                    3d:8c:79:6b:58:db:ed:58:48:62:78:da:58:c2:c0:
                    38:22:ef:22:6b:a5:0e:89:8a:c7:a1:f4:0e:99:0f:
                    e1:75:fe:69:cd:d7:7d:c5:a2:0b:e1:84:45:3c:81:
                    af:75:88:ec:1f:27:b6:77:92:af:d3:d6:5d:e4:e9:
                    a9:2f:9a:13:ec:b4:97:9b:41:a0:9d:ba:4a:4e:14:
                    f8:b9:2a:24:b8:23:88:d6:f8:bd:e2:94:28:62:f6:
                    63:11:1c:77:25:30:2b:44:62:5f:83:c1:f8:b2:18:
                    f4:28:13:08:c2:99:46:e5:11:0d:35:c9:6f:d9:c9:
                    65:e0:33:8e:75:ea:fa:c7:1a:15:e9:63:26:c3:57:
                    50:c5:b9:36:74:d7:b9:16:cb:b5:ef:be:0a:1c:41:
                    79:00:87:a9:36:05:05:93:b9:71:72:c1:62:ca:41:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:14:19:B9:C4:D0:15:E1:B4:07:08:29:2A:B5:36:2F:24:BA:E4
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:87:40:2b:b8:fe:23:56:c1:08:25:2c:0a:01:55:ea:f2:
         4d:02:c5:a2:3e:31:89:5b:78:38:f9:4f:20:a8:76:90:47:65:
         c9:64:5c:5c:5d:7c:5f:dd:7a:d4:e6:0e:fe:2b:b6:0a:3c:c6:
         ea:7e:2d:03:e1:0e:2f:68:0a:31:f2:33:e5:18:ac:dd:54:55:
         30:ba:40:b1:37:78:b3:62:94:45:80:bd:cb:06:2e:4c:03:6a:
         ed:72:dd:f1:5e:88:bc:92:b4:8f:6f:1a:fe:f0:21:2b:92:fd:
         6b:2a:31:40:9e:18:92:f4:4c:ef:bc:42:9a:aa:f5:6a:90:fa:
         78:39:e5:da:0a:27:77:1a:cb:80:d8:18:83:61:56:ab:3d:15:
         b4:06:11:95:8e:0f:2a:8e:6f:9d:c3:be:b5:14:c5:b9:07:fa:
         63:16:b2:8e:9d:4a:9f:6f:76:49:d9:5e:f5:77:07:23:48:1b:
         d8:2a:df:27:a7:64:dd:e3:78:2e:ae:04:7a:80:7a:28:94:48:
         b9:2e:c1:3f:84:a1:c6:8f:81:ba:01:7e:cb:d9:45:2f:39:4e:
         b4:0f:79:77:a1:f2:fb:65:14:e5:ea:3e:d0:90:ba:d2:2e:a6:
         a7:b4:e0:0c:88:ad:50:c4:cf:1c:47:42:cd:d2:68:d3:ef:41:
         c9:a0:4e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:53:22 2026 by rpki-client