Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File:                     F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier:          udyc7eHijNCJcmmhSZJsYVnzeEDfKmf2Tt2asLOshZ0=
Subject key identifier:   E4:AF:51:B6:CA:D1:39:F7:0E:80:5F:A0:B2:F4:E4:D6:86:CF:9B:11
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer:       /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial:       019DCE628AB341EE1259ACC9F4F5C4F02F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number:          0655
Signing time:             Mon 27 Apr 2026 10:00:57 +0000
Manifest this update:     Mon 27 Apr 2026 10:00:57 +0000
Manifest next update:     Tue 28 Apr 2026 10:00:57 +0000
Files and hashes:         1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: Eh47din/Ba2fZQGLO/NKafdIaK7w7I3vHOay0OeRJSY=)
                          2: iQGTd2WXoLVwRsQ_8nC_udEAF7E.roa (hash: Xe100ccFvMhNIhN2VUssDCNyo4J+LE95jPp43mX4rJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:62:8a:b3:41:ee:12:59:ac:c9:f4:f5:c4:f0:2f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
        Validity
            Not Before: Apr 27 10:00:57 2026 GMT
            Not After : Apr 28 10:00:57 2026 GMT
        Subject: CN=e4af51b6cad139f70e805fa0b2f4e4d686cf9b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:0e:5d:12:2a:00:41:b0:d4:30:ec:f1:94:
                    c1:52:81:aa:92:23:76:90:a6:7f:c5:a9:23:83:37:
                    4b:5e:c3:58:4e:9d:22:90:a7:07:3e:3a:93:e1:89:
                    64:b6:03:5e:fe:56:fb:0b:2a:b6:80:0b:80:6a:ca:
                    28:ba:ba:3d:43:55:2c:e5:c0:ff:9a:cc:91:31:9c:
                    24:8e:58:22:d2:e8:74:ed:c6:69:d9:38:79:6c:7e:
                    dc:03:e6:71:78:e0:28:5f:fe:52:17:98:99:7f:8c:
                    52:e2:d1:56:2f:8d:6f:ec:c6:57:21:6a:1f:ca:5a:
                    9f:12:40:a1:52:70:1a:54:e9:d1:30:b0:99:0b:3a:
                    d7:3e:71:18:16:fd:7c:3b:fb:af:b8:4d:cb:56:b5:
                    75:57:a4:a0:2a:9e:17:ac:4f:2e:30:fa:71:2e:cc:
                    09:41:1f:83:17:a2:c6:d4:3b:40:42:f0:5d:d7:97:
                    88:2a:d6:56:d3:c5:bd:7b:3b:e8:54:c1:a5:c7:33:
                    59:ae:e3:6b:80:81:ca:86:7f:50:23:f7:b5:dd:93:
                    13:2b:4f:3f:8e:b8:83:b8:c4:3c:51:ad:cc:8a:4a:
                    f1:e0:32:02:b5:5d:ae:ce:ec:38:8e:e0:00:4b:13:
                    3c:bb:bb:77:49:ec:ad:3f:cb:c1:d1:d4:2b:69:f8:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AF:51:B6:CA:D1:39:F7:0E:80:5F:A0:B2:F4:E4:D6:86:CF:9B:11
            X509v3 Authority Key Identifier:
                keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:de:cc:dd:c8:44:9d:2f:48:3c:2a:bc:d1:62:c3:08:78:
         c1:ee:d7:1a:d9:9c:03:22:f9:c4:97:98:62:55:c2:eb:6d:e5:
         ca:ae:fa:97:5a:9f:58:d1:cc:b2:35:9f:54:e4:b2:c9:dc:90:
         e3:42:00:21:59:52:60:bc:de:96:16:b4:90:69:83:78:40:13:
         7c:4f:03:d5:f6:2d:5e:80:c1:c1:d9:5b:27:ce:74:34:c9:69:
         72:fc:bd:87:63:a4:67:5e:25:9b:9e:19:dd:83:86:39:90:a8:
         cf:fd:ff:f2:4f:75:d7:b9:d9:6f:9d:43:51:2d:31:90:ae:ab:
         a7:7b:4f:24:c4:d1:e7:21:c2:01:76:c5:2d:d0:e7:28:91:92:
         7f:e6:0d:79:dd:a4:ae:03:dc:7b:bd:df:2c:c9:6d:48:83:e4:
         ab:97:21:9a:0c:66:58:2f:4e:a9:40:0a:d4:9b:0b:e6:8c:dd:
         f8:fe:c5:09:fb:2f:2a:92:6c:0c:ce:93:16:00:7c:7b:6e:c0:
         9d:93:61:50:4f:2d:0b:c5:81:07:1f:34:10:9d:e2:3e:23:8e:
         17:0f:cf:9b:bd:ff:16:0a:69:01:dc:b6:a9:4e:1c:29:7b:7b:
         60:f9:74:2b:15:3b:12:68:8f:17:28:bf:8e:71:e8:70:77:97:
         80:df:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:11:29 2026 by rpki-client