Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
File:                     6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft (raw, json)
Hash identifier:          n89NQn+3Bj5o3Ggzy3/StUjwJAW0DFsZxNFdVtj8sdA=
Subject key identifier:   3C:ED:68:65:D0:05:94:22:25:C5:2A:C1:D5:3F:C2:46:9F:A4:3E:0A
Authority key identifier: E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C
Certificate issuer:       /CN=e81ceffa7305fa6678897aedbbbd2164df008a9c
Certificate serial:       019D9BBF4110904B28F0C6C78E0B67E06E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
Manifest number:          01C9
Signing time:             Fri 17 Apr 2026 14:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:35 +0000
Files and hashes:         1: 6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl (hash: ZYtnCATF/laOqyxS0s0IU4kjt4a/41mpQTiY7Dp5KiM=)
                          2: z0UfyMAo_7LR-LH3Jw8zf8UbLD0.asa (hash: QGDgWeH1kEe3DX+Xml/09V0FNXz92WKITaFTUaHDCkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:41:10:90:4b:28:f0:c6:c7:8e:0b:67:e0:6e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81ceffa7305fa6678897aedbbbd2164df008a9c
        Validity
            Not Before: Apr 17 14:01:35 2026 GMT
            Not After : Apr 18 14:01:35 2026 GMT
        Subject: CN=3ced6865d005942225c52ac1d53fc2469fa43e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:1e:ad:82:00:6b:46:2a:72:5a:48:eb:1f:
                    66:eb:17:ff:88:0b:46:df:42:1a:49:56:61:72:b9:
                    2d:a0:34:79:6a:b8:d5:d1:74:7b:9e:4d:df:dc:2d:
                    c1:75:c3:db:03:1a:b9:66:a2:d0:33:0a:73:40:e1:
                    e0:ce:9d:21:dd:4c:58:07:24:12:a7:96:32:de:54:
                    e1:8c:a8:70:55:6f:06:63:73:ce:27:0e:cd:7a:3f:
                    b4:32:41:bd:0c:37:6b:f9:09:38:c6:45:67:40:bb:
                    db:ea:bc:0b:1a:94:19:8e:20:c0:03:94:85:be:72:
                    57:61:83:91:8d:b6:e6:de:b4:6a:53:3d:3c:ea:c8:
                    3e:0d:e2:1e:8e:5c:ba:c2:78:ef:b0:ca:e5:7d:70:
                    c2:17:86:61:f3:15:48:3d:09:b3:06:1e:e1:2e:01:
                    1d:5b:06:49:32:35:12:bc:99:c7:76:5f:e3:81:65:
                    ce:81:ff:0e:9d:dd:80:c3:34:e2:77:63:56:d9:4f:
                    13:ec:89:83:30:74:42:5b:07:bb:44:e1:d2:8b:21:
                    e6:7d:eb:02:5c:73:af:72:b2:cb:cd:aa:ea:bf:d2:
                    7d:e3:e1:26:c6:d6:8a:8b:40:c4:8c:60:9f:70:74:
                    cf:8e:15:06:eb:22:c3:63:c2:30:de:11:88:53:bc:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:ED:68:65:D0:05:94:22:25:C5:2A:C1:D5:3F:C2:46:9F:A4:3E:0A
            X509v3 Authority Key Identifier:
                keyid:E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:36:3d:6f:78:cc:af:0c:b0:6d:df:60:d5:a0:c5:7c:93:d7:
         46:86:62:f3:43:08:85:78:d4:48:34:7b:bf:98:66:cb:8e:13:
         c4:ce:4b:4c:2c:2c:5f:e2:f3:8f:5f:0e:9f:b4:22:7d:cc:29:
         39:0b:01:63:ec:c1:20:e5:ee:11:83:21:3d:d8:c7:cf:62:2c:
         86:e1:22:9b:ec:64:6d:d0:42:e9:4c:bd:af:0f:2e:98:bd:61:
         94:7e:65:11:b8:d4:27:84:9b:02:bb:24:d6:a8:3f:05:25:61:
         fa:c9:90:a2:40:4f:68:14:3a:34:b0:4c:02:30:06:dd:67:d7:
         25:7d:1b:07:fd:9e:06:df:b3:35:84:ec:41:a6:9c:b1:80:a1:
         97:c1:5f:7e:51:c3:34:e3:53:08:67:77:1e:15:51:de:55:77:
         45:23:83:35:89:94:12:75:81:86:6f:34:23:af:57:bd:39:80:
         b0:1a:6f:52:1d:85:b0:f1:5b:63:47:94:23:70:04:0b:61:da:
         16:a9:a4:31:0d:11:b3:35:c3:41:53:aa:75:74:9e:42:f1:39:
         5c:61:88:2a:6b:a4:2f:44:56:9c:8d:2b:34:69:d5:85:e1:d0:
         f4:0c:9b:87:56:c3:6a:94:ef:d6:1e:6f:3c:a9:2e:92:9d:3b:
         78:68:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:06 2026 by rpki-client