Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          m7AZ8rV6x7amcmFe7MkyfGAdnB0DhSObMNpjGK9k/GU=
Subject key identifier:   6D:0C:3F:32:5B:EC:F9:E9:EB:F8:6A:1C:18:20:F9:CB:C3:34:BF:25
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       019DD5AF35C76A6238095B83C4C008E428B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          093B
Signing time:             Tue 28 Apr 2026 20:02:02 +0000
Manifest this update:     Tue 28 Apr 2026 20:02:02 +0000
Manifest next update:     Wed 29 Apr 2026 20:02:02 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: SM97GLmk06KUgU3VKtoDejAkVWfOEdKG/KsdY1dfFCw=)
                          2: 4uQBWkALISvD6y91tLrUckXc3Og.roa (hash: onT9wzStJ0yxe/DG9p0SCT14FtXKok1QUI7Daf8dWqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d5:af:35:c7:6a:62:38:09:5b:83:c4:c0:08:e4:28:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Apr 28 20:02:02 2026 GMT
            Not After : Apr 29 20:02:02 2026 GMT
        Subject: CN=6d0c3f325becf9e9ebf86a1c1820f9cbc334bf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:72:86:5c:06:f0:e9:30:91:43:e9:50:10:
                    45:52:1f:c9:fc:ef:92:43:ac:f1:a6:e2:0a:a8:bb:
                    00:b5:f7:10:89:8c:bb:35:6a:40:72:1e:78:8a:cc:
                    ce:d9:47:ef:eb:df:79:f4:f5:96:54:21:84:94:6b:
                    ee:7e:d3:77:48:8d:60:9e:b8:23:8e:fd:df:95:f7:
                    1a:84:60:94:b0:6c:f4:e6:10:c5:97:8a:da:13:ad:
                    2a:ac:6b:c2:84:ec:6a:57:29:5a:f3:c3:f4:06:45:
                    7f:98:e4:d5:04:57:e7:c9:a3:18:c2:5d:52:1c:27:
                    37:9a:cf:50:c5:33:02:40:e9:02:82:79:21:62:b8:
                    3d:67:51:6e:0b:fa:9b:27:bc:d6:da:f4:18:62:7d:
                    27:a4:d8:e6:a6:ce:1e:3e:16:f7:30:97:8a:27:be:
                    99:2d:7f:fa:59:dc:46:19:8e:a2:8b:b4:8c:45:1b:
                    76:16:4a:57:da:90:a4:77:b5:48:4f:cd:c1:b9:95:
                    04:38:42:90:89:07:e8:ac:31:5a:2f:74:b5:b4:22:
                    29:c2:ed:a8:ee:a4:a2:0f:94:96:64:31:5b:c2:2c:
                    35:a6:cc:9b:df:35:10:82:17:a7:b2:b3:22:f4:ea:
                    04:c4:8c:35:ea:a1:0d:73:8c:1e:f5:f5:85:ba:e8:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0C:3F:32:5B:EC:F9:E9:EB:F8:6A:1C:18:20:F9:CB:C3:34:BF:25
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:b5:52:f5:ef:bf:43:d4:4d:19:db:9c:1c:aa:6f:e2:59:
         68:f3:7e:da:fd:72:99:24:ca:d3:44:e0:9a:8d:fb:b9:1b:bb:
         e6:71:c0:48:cc:64:70:f8:e4:55:23:f3:e2:e8:12:82:60:79:
         ab:e5:3d:e5:76:2c:1a:dc:63:58:2a:e5:0e:0a:ea:26:29:fd:
         76:e0:bb:da:9e:75:2c:55:e0:b8:9a:b2:04:95:99:be:b5:51:
         34:ca:25:30:00:d8:77:f0:6e:3d:83:bb:ed:bc:63:97:82:a5:
         3b:3c:66:44:6e:32:8d:0d:f1:73:f4:0e:08:3f:60:d8:83:80:
         98:54:b1:d3:6c:19:4e:3a:3c:ed:5d:21:a9:d5:2f:a3:4c:9f:
         67:ec:7c:d9:8b:48:d0:4a:4d:0b:1d:b6:03:40:04:16:0e:69:
         2b:49:cd:3c:0f:6a:93:d7:29:16:d7:e2:17:df:36:e7:d1:00:
         af:97:3d:38:b7:08:06:f9:13:77:aa:74:18:6f:b5:ea:89:0d:
         90:6f:79:07:cf:db:86:4c:01:ff:e5:0c:3f:bd:e6:f9:7d:80:
         c2:bb:50:d5:41:fa:9d:9c:aa:bd:20:9e:fc:5a:e8:81:b5:40:
         8d:83:20:48:8c:99:e7:91:0e:80:c6:c9:3f:92:d2:58:fc:c1:
         a4:d8:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:01:25 2026 by rpki-client