Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File:                     6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier:          Nf/Jvjw6xETQ7xrBQbtKtfJeOJ+tR1D8KouvjCjsRvA=
Subject key identifier:   1B:B4:B0:CB:BE:90:18:AB:6F:CB:0E:6C:73:44:7C:DD:E1:99:51:F5
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer:       /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial:       019DD01A2E303C65C3264155EB2D6B42D572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number:          95
Signing time:             Mon 27 Apr 2026 18:01:09 +0000
Manifest this update:     Mon 27 Apr 2026 18:01:09 +0000
Manifest next update:     Tue 28 Apr 2026 18:01:09 +0000
Files and hashes:         1: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: aCIn0wG/AH3guh1GkYpg2RB/GGUiQNvoZfc98S1FO0k=)
                          2: k8zQtdqeD4eCbj4bxGVWhtUSVqQ.roa (hash: mGgxLJKpdU4bJS/C0UsU5pVevvLL/1XTeMzy2EPtfmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:1a:2e:30:3c:65:c3:26:41:55:eb:2d:6b:42:d5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
        Validity
            Not Before: Apr 27 18:01:09 2026 GMT
            Not After : Apr 28 18:01:09 2026 GMT
        Subject: CN=1bb4b0cbbe9018ab6fcb0e6c73447cdde19951f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:c0:be:14:89:83:40:48:92:35:d8:d6:89:
                    88:ed:83:33:69:31:dd:e6:3b:92:df:be:cd:01:6a:
                    85:5e:8d:a9:fe:2c:aa:9a:37:fe:93:24:bd:0a:94:
                    71:dc:08:be:ff:0b:0c:3e:3c:0f:ad:8f:b5:5d:fa:
                    53:e7:c1:77:96:a9:68:78:c1:c4:a0:96:53:4d:81:
                    ae:fd:54:28:65:42:5a:31:86:ca:b6:bb:62:81:78:
                    55:ea:d3:d4:b6:8f:bf:3d:a3:f6:6a:1a:20:c5:40:
                    bf:a3:61:bc:37:fb:99:46:9a:d8:18:cd:37:3f:ee:
                    5c:88:11:d4:78:2e:b9:a1:d2:78:81:2e:7f:6b:92:
                    95:75:58:b1:9f:ed:b3:ab:a7:36:6a:f9:fc:46:74:
                    46:f7:dc:e2:cf:2f:5f:2c:ca:44:61:88:15:77:e6:
                    5c:2c:c3:75:25:5d:79:68:75:c4:47:ca:6f:f1:bf:
                    23:40:e8:f7:4e:03:9b:44:ab:ac:63:b3:58:6a:82:
                    2f:e7:e2:df:66:39:03:c4:d2:1f:5a:6e:4a:a0:cd:
                    af:f7:f0:49:59:c0:e0:64:ad:3e:8d:1f:82:e3:78:
                    8c:ef:b3:1b:b9:b4:91:2c:da:ce:a8:46:87:62:1c:
                    c1:d2:7e:db:91:91:ef:82:26:b5:d6:f2:f8:03:58:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B4:B0:CB:BE:90:18:AB:6F:CB:0E:6C:73:44:7C:DD:E1:99:51:F5
            X509v3 Authority Key Identifier:
                keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:35:6f:1e:de:7e:d2:d4:91:5c:44:f5:a9:20:3a:b5:bf:e4:
         8d:11:ae:8b:07:2c:3d:fe:00:b2:0a:ee:84:6b:a8:95:6c:20:
         f2:5f:76:58:2f:af:72:e7:55:37:02:75:bd:70:6c:e7:2a:1c:
         7d:f9:a8:68:58:b3:12:11:f7:9c:1a:9a:65:95:e5:66:18:9f:
         8e:85:cf:01:09:3d:a4:d7:b0:17:33:b5:61:9f:e4:2b:a5:db:
         0c:d7:9c:96:3c:97:25:5a:bf:2d:82:99:35:c0:e2:1e:3b:c9:
         4e:d1:11:ca:88:78:9a:53:d4:1c:37:fa:0e:64:84:85:51:3d:
         b8:34:74:cf:d6:2a:db:95:af:98:ca:86:c1:34:ce:87:6b:bb:
         de:10:f4:ae:b0:86:8a:2e:22:6d:62:e0:c2:56:b4:fe:04:5b:
         6e:dd:af:71:42:64:54:c7:7a:20:f2:c0:78:e1:d3:20:5c:01:
         d9:ac:3f:29:3a:38:4d:1a:88:d5:ba:2a:d3:fa:e8:10:a9:a1:
         6b:30:30:fe:8b:47:fe:f0:62:33:7d:ba:b2:cf:01:10:d4:f0:
         93:79:38:c7:c6:eb:5b:4f:56:e2:43:14:31:b4:65:b7:5d:c2:
         f8:d1:76:fa:cf:85:51:ca:b4:7d:a8:2d:5f:71:73:60:94:3f:
         6d:9f:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:55 2026 by rpki-client