Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File:                     n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier:          luqh3e6tidTusqXdGjCngVENdqPJ8rYUd7FT9YXCFOk=
Subject key identifier:   F5:9A:0F:BA:EB:45:91:98:82:B3:A6:40:44:F7:C6:9F:45:BE:E7:33
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer:       /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial:       019E1F47FD33E80E67E36375BFAFB7B5175B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number:          14FC
Signing time:             Wed 13 May 2026 03:01:11 +0000
Manifest this update:     Wed 13 May 2026 03:01:11 +0000
Manifest next update:     Thu 14 May 2026 03:01:11 +0000
Files and hashes:         1: XF1Nc0TElShdxgSlTTRramDytfo.roa (hash: 2x0djNsK99Aex80NEk4TpsPuhlZgzcphXHvm3HIeB7I=)
                          2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: ADY/303q1rn++vn9NoI7quzoZpSjzMr5OAUcGne7+p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:fd:33:e8:0e:67:e3:63:75:bf:af:b7:b5:17:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
        Validity
            Not Before: May 13 03:01:11 2026 GMT
            Not After : May 14 03:01:11 2026 GMT
        Subject: CN=f59a0fbaeb45919882b3a64044f7c69f45bee733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:c0:ef:27:56:8f:6e:54:75:ba:d1:fd:61:
                    14:05:dc:5a:74:9f:68:33:f2:91:94:0a:97:77:69:
                    d2:f6:47:f3:eb:c5:48:d9:07:36:e4:60:de:b1:5e:
                    0d:0d:b3:71:b3:ac:d0:2b:fd:5e:8d:60:67:68:31:
                    07:7f:0a:82:02:8e:06:42:64:3d:0e:71:46:21:ec:
                    6c:40:e1:5e:e7:8d:15:4f:91:ea:1d:18:ac:25:1a:
                    a5:25:33:38:3e:6b:4b:9e:75:c8:4a:3e:08:8e:5b:
                    59:a8:81:d3:82:a0:c7:f2:3d:fe:35:28:47:a8:83:
                    c6:a5:b9:de:f6:c8:05:40:14:b6:c8:92:93:a5:af:
                    29:8d:df:7a:31:e5:16:9e:10:1c:6b:d4:8d:eb:03:
                    93:7c:f3:4b:a9:2d:96:85:ba:82:7b:62:bb:8d:78:
                    48:90:59:46:a2:73:fc:d3:62:db:69:e8:c9:37:d5:
                    04:96:3c:c7:d4:b2:b2:24:71:2d:c3:f5:c2:0f:02:
                    e1:68:5e:ef:f5:ec:e2:cf:e8:e7:da:8c:e8:e4:05:
                    fa:74:eb:32:6f:95:68:07:ea:bf:47:2b:26:91:e1:
                    ff:0c:61:b9:cf:95:b0:4a:fe:76:c3:1e:8d:77:c1:
                    71:a7:ba:4b:f6:57:8d:e3:60:2e:d1:17:15:88:f5:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9A:0F:BA:EB:45:91:98:82:B3:A6:40:44:F7:C6:9F:45:BE:E7:33
            X509v3 Authority Key Identifier:
                keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:5b:a8:62:49:e2:ab:d3:e9:96:fe:d4:38:88:a6:ed:20:32:
         d4:39:e6:e3:a4:d0:f7:ef:b3:9c:76:e5:d2:35:89:8f:9d:1e:
         c9:70:b5:af:cb:76:8e:23:c2:50:b3:c4:d2:40:d2:34:32:de:
         07:4a:37:68:0f:e8:72:36:18:d1:7b:89:e8:b3:16:d1:e0:ee:
         72:24:4a:22:79:e1:42:91:d0:e0:14:19:aa:26:bd:30:0e:b7:
         78:8c:e2:8f:b1:05:1b:5f:fe:09:61:76:2b:7c:3a:78:96:1b:
         7f:28:29:19:70:55:43:58:a2:69:6d:86:70:91:dd:8f:4f:76:
         1a:56:cf:25:b4:3b:a4:4d:83:3c:48:8d:aa:2f:ab:b2:15:4b:
         97:55:fb:9c:7a:e5:11:bb:a3:14:34:dd:39:40:d5:3c:05:1c:
         a9:b8:75:42:1f:94:b8:c1:09:70:ed:a7:cf:97:40:e7:3d:78:
         9f:04:3c:17:85:1e:6f:3b:7f:36:89:3c:6b:07:f5:23:fa:81:
         83:ca:0c:29:5e:7a:3a:26:79:89:24:a3:6d:f8:46:8e:d0:5a:
         e9:2d:01:d8:0a:8d:fa:a7:ae:88:b6:08:b7:ff:02:ac:b9:ac:
         0c:d5:96:dd:d0:12:4e:b8:f3:79:72:6f:84:a3:c1:a9:b0:51:
         24:3b:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:05 2026 by rpki-client