Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
File:                     6p_5HGsceo7QKEKyXJsNBjipBCQ.mft (raw, json)
Hash identifier:          2hl04LHgEkqqSmj7WpMZcwwjEd26zYksPqz+i3YH5LI=
Subject key identifier:   9D:ED:14:21:A5:8F:92:D1:9B:FB:95:65:66:10:5F:64:33:A9:D4:04
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Certificate issuer:       /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial:       019DD12CC16703A277F8C215CBD16C57572E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
Manifest number:          12B1
Signing time:             Mon 27 Apr 2026 23:01:04 +0000
Manifest this update:     Mon 27 Apr 2026 23:01:04 +0000
Manifest next update:     Tue 28 Apr 2026 23:01:04 +0000
Files and hashes:         1: 6p_5HGsceo7QKEKyXJsNBjipBCQ.crl (hash: 1pmbMpaxBGaEXcJvlNkLqK3Pmy0qgVm+m/G+jWPW6UE=)
                          2: DDzoLugVKHUosG6LnSil1zPyskM.roa (hash: JyTfSK96wfTfZYA0hAe3wAK9JdqgYlzHq8L5Cr8t14Y=)
                          3: bLtqLTgyo3jayEk8nrvrKrCEoZ0.roa (hash: NexaJDA35Gn2YwrlEltRLjOpLBsw+HT7zXIl0vhUiEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 23:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:2c:c1:67:03:a2:77:f8:c2:15:cb:d1:6c:57:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
        Validity
            Not Before: Apr 27 23:01:04 2026 GMT
            Not After : Apr 28 23:01:04 2026 GMT
        Subject: CN=9ded1421a58f92d19bfb956566105f6433a9d404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:a9:8f:35:0d:08:ad:5a:c1:3e:09:66:c3:
                    c0:9e:ce:f6:a6:b5:35:32:7a:12:83:23:fa:78:05:
                    30:9b:0f:4f:15:10:21:14:55:79:39:dd:13:f6:69:
                    74:63:ac:f2:a4:57:af:72:7b:fe:a0:06:0f:ce:9b:
                    d5:2f:f0:26:c5:3b:04:e6:01:9f:b9:cc:65:af:58:
                    10:42:9d:ea:29:ec:08:55:33:37:e6:fe:db:a9:49:
                    47:7c:6a:94:f0:4c:7d:52:ee:15:ec:43:24:3f:51:
                    89:16:a2:6d:63:e1:38:30:b8:04:cd:e6:11:92:66:
                    26:6a:4d:ff:f8:6d:df:65:01:5b:ab:d9:9a:c1:f2:
                    83:20:af:c7:f1:63:fb:18:2b:7e:3b:53:30:f6:c8:
                    f7:c8:ab:7b:e0:cf:e9:26:8a:30:ba:d6:84:82:d7:
                    01:5a:06:f8:46:40:d4:7d:99:ab:ef:ec:42:06:57:
                    a0:b9:47:34:b6:4d:0f:04:54:6d:50:ae:a2:a5:99:
                    08:58:6b:bc:fe:ce:a2:60:47:ef:67:16:f2:15:55:
                    af:9a:6c:76:3b:b7:6f:bc:37:2d:c2:a5:e3:ae:f1:
                    99:42:8a:35:02:8a:cd:a2:20:7d:ca:f0:59:8e:0c:
                    2c:84:ea:3a:0f:61:83:fc:cb:13:35:98:e0:3f:7e:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:14:21:A5:8F:92:D1:9B:FB:95:65:66:10:5F:64:33:A9:D4:04
            X509v3 Authority Key Identifier:
                keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:54:99:2f:b3:d8:8b:8c:9b:7b:75:de:f9:34:30:c8:1f:10:
         cf:79:5c:1c:aa:41:7a:f4:9d:92:7d:b1:5b:a0:18:57:3c:87:
         6a:23:f3:4a:0d:51:22:c0:7c:87:76:23:18:84:08:79:cb:7f:
         69:b8:77:e4:03:ca:2f:9b:07:e8:12:50:49:90:9b:2a:42:c6:
         b5:a3:82:3c:5e:f3:7f:02:ea:4a:2c:7e:e4:ad:3e:cb:34:c0:
         5f:24:24:a8:6e:27:da:87:ca:b2:db:1d:0b:28:14:e4:e5:e2:
         66:21:37:cc:9e:be:be:87:1a:8d:ad:35:67:3a:c5:3a:b9:04:
         03:96:23:a1:9c:c9:43:94:77:3e:16:ad:11:63:bb:cb:eb:21:
         53:5e:da:dd:4e:05:56:65:a7:d2:f1:de:8a:fa:d9:ea:14:67:
         db:d8:ca:7d:29:a2:2c:f6:95:0c:2a:42:22:48:81:fa:7f:fa:
         7a:43:4c:f4:7b:e6:89:68:9c:8c:b0:dd:0f:49:3d:c5:ce:55:
         a9:a4:ff:71:04:12:ac:7d:d9:f3:70:a8:c2:da:b6:c1:94:d5:
         99:5e:0d:b8:03:e3:9b:6a:63:4d:1a:5f:74:32:18:45:62:65:
         95:15:b4:d3:04:d6:4c:cd:11:0a:e2:e9:b0:49:76:df:bd:d8:
         28:7e:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:23:06 2026 by rpki-client