Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          GyxPToUnrEv8IuKTGfP4f1sX6zTeDmPrxZZOBLfSiUI=
Subject key identifier:   06:94:8F:8F:03:F2:4F:CD:2C:8B:1B:8A:E9:3A:61:83:48:55:8A:C7
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       019DDA673F1DF028C584A94D43B2302B11B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          0937
Signing time:             Wed 29 Apr 2026 18:01:32 +0000
Manifest this update:     Wed 29 Apr 2026 18:01:32 +0000
Manifest next update:     Thu 30 Apr 2026 18:01:32 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: RxTss0SUGWhBkuoAZDfQOFWpnHxjYLRS3hXh7z1Vy7Q=)
                          2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 18:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:da:67:3f:1d:f0:28:c5:84:a9:4d:43:b2:30:2b:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Apr 29 18:01:32 2026 GMT
            Not After : Apr 30 18:01:32 2026 GMT
        Subject: CN=06948f8f03f24fcd2c8b1b8ae93a618348558ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:df:f6:9e:2f:b9:c1:62:53:39:ce:25:9a:
                    26:13:31:b2:4c:d0:0d:9e:3d:bd:e6:09:58:ca:41:
                    a9:6a:20:4d:c6:c8:d6:8d:9f:67:a1:82:93:9d:71:
                    52:34:0c:d3:da:7a:7a:a3:69:7f:51:33:58:7e:cf:
                    db:73:ec:b8:4c:dc:7a:cf:ce:49:71:03:15:1e:c6:
                    bb:74:d1:0b:99:1e:b2:94:3a:17:18:1c:ae:e3:03:
                    de:bd:ff:07:1e:66:2d:f0:19:68:c1:38:d1:3c:05:
                    2d:48:8b:86:8e:32:b6:30:9d:70:5d:56:31:4a:4f:
                    ac:68:84:b9:8e:3e:87:86:2d:e3:ce:e6:3c:37:3d:
                    49:a9:19:3d:64:b1:61:c4:b3:b8:73:a3:77:9e:6d:
                    d3:ca:7f:2a:99:e9:7a:ea:cb:eb:1c:89:18:d9:de:
                    7a:d7:af:44:b5:8e:d8:e8:fe:78:d0:fa:12:e8:b7:
                    df:e3:80:a9:c8:2e:9b:97:f9:03:9a:fd:dd:8c:fe:
                    4d:72:a2:2e:e3:01:ee:a1:a1:fb:49:b5:94:55:23:
                    19:81:2e:94:34:7d:dd:4a:65:dc:c4:5b:52:95:b4:
                    dc:30:f1:ec:9d:f9:49:e1:ec:58:1c:5d:cc:87:e1:
                    b6:81:3d:eb:70:d7:2f:53:59:2c:75:4f:f4:be:d7:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:94:8F:8F:03:F2:4F:CD:2C:8B:1B:8A:E9:3A:61:83:48:55:8A:C7
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:19:f3:fe:52:bc:1b:37:f9:63:23:58:5c:31:63:5d:76:
         71:ef:86:4e:ad:a3:67:aa:bd:27:aa:e2:21:41:cd:f1:39:1f:
         f0:d9:bf:e7:72:c3:b0:81:f3:16:99:41:a7:a3:70:40:26:d2:
         46:f1:57:27:e2:71:82:e3:3e:d7:b1:33:6c:fa:63:2e:e5:79:
         97:54:f9:27:68:4a:5c:a8:72:b7:26:70:b3:5d:56:f8:1f:50:
         f1:1c:1b:e7:12:0b:7c:f9:cd:dd:6d:ad:62:a0:3c:b9:85:13:
         6a:5e:6e:c2:e0:4e:75:48:c5:c8:8a:06:1b:1a:1b:b1:fa:9f:
         bb:d4:81:30:e1:0b:77:e2:95:84:cf:6e:c2:6d:0f:f3:90:17:
         47:49:ac:a2:c2:b4:a9:32:be:54:89:17:39:44:d5:fb:b9:8b:
         a1:ac:df:bd:63:56:54:65:1f:bb:44:b3:b4:49:c7:0d:a3:7e:
         1b:6c:73:8f:6b:9b:1f:f1:d5:09:f0:b2:05:7c:2d:bc:f4:16:
         3e:5e:6f:c4:0e:f5:45:15:ea:b1:a7:e4:2f:75:44:75:45:ff:
         7f:de:a0:71:70:68:13:0a:a6:dc:73:24:d1:e5:83:95:1f:ac:
         fb:07:ea:49:99:18:71:85:5a:03:e6:23:bc:49:15:59:a7:5f:
         00:89:76:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3aZz8d8CjFhKlNQ7IwKxGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx
OGZkMDAwHhcNMjYwNDI5MTgwMTMyWhcNMjYwNDMwMTgwMTMyWjAzMTEwLwYDVQQD
EygwNjk0OGY4ZjAzZjI0ZmNkMmM4YjFiOGFlOTNhNjE4MzQ4NTU4YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG3f9p4vucFiUznOJZomEzGyTNAN
nj295glYykGpaiBNxsjWjZ9noYKTnXFSNAzT2np6o2l/UTNYfs/bc+y4TNx6z85J
cQMVHsa7dNELmR6ylDoXGByu4wPevf8HHmYt8BlowTjRPAUtSIuGjjK2MJ1wXVYx
Sk+saIS5jj6Hhi3jzuY8Nz1JqRk9ZLFhxLO4c6N3nm3Tyn8qmel66svrHIkY2d56
169EtY7Y6P540PoS6Lff44CpyC6bl/kDmv3djP5NcqIu4wHuoaH7SbWUVSMZgS6U
NH3dSmXcxFtSlbTcMPHsnflJ4exYHF3Mh+G2gT3rcNcvU1ksdU/0vtfKYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaUj48D8k/NLIsbiuk6YYNIVYrHMB8GA1UdIwQY
MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct
Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh
LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH0Z8/5S
vBs3+WMjWFwxY112ce+GTq2jZ6q9J6riIUHN8Tkf8Nm/53LDsIHzFplBp6NwQCbS
RvFXJ+JxguM+17EzbPpjLuV5l1T5J2hKXKhytyZws11W+B9Q8Rwb5xILfPnN3W2t
YqA8uYUTal5uwuBOdUjFyIoGGxobsfqfu9SBMOELd+KVhM9uwm0P85AXR0msosK0
qTK+VIkXOUTV+7mLoazfvWNWVGUfu0SztEnHDaN+G2xzj2ubH/HVCfCyBXwtvPQW
Pl5vxA71RRXqsafkL3VEdUX/f96gcXBoEwqm3HMk0eWDlR+s+wfqSZkYcYVaA+Yj
vEkVWadfAIl2NQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 03:24:56 2026 by rpki-client