Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
File:                     V3M6_ezSmOg9Af9O0hxiwaCuq90.mft (raw, json)
Hash identifier:          DAWr3fuHGxxPPZ7IYqnQ8O9CGncOEAFLPao6nCKJBrs=
Subject key identifier:   2F:2C:BF:A8:C6:CA:6F:07:14:08:A4:F2:8F:D1:A6:4D:D7:B7:1B:09
Authority key identifier: 57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD
Certificate issuer:       /CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
Certificate serial:       019D9B50E3B9F36F2307D661CB615DA50E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 12:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:02 +0000
Files and hashes:         1: V3M6_ezSmOg9Af9O0hxiwaCuq90.crl (hash: fUlbTsAHwS+owRaqXpWPk5TIFRcNgjPg3Oy6rgYzf2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:e3:b9:f3:6f:23:07:d6:61:cb:61:5d:a5:0e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
        Validity
            Not Before: Apr 17 12:01:02 2026 GMT
            Not After : Apr 18 12:01:02 2026 GMT
        Subject: CN=2f2cbfa8c6ca6f071408a4f28fd1a64dd7b71b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:94:68:ac:2b:2e:59:22:f4:7d:bc:ad:ff:
                    7a:f1:0e:76:3a:19:af:a5:31:0e:ad:dc:55:8e:d9:
                    bd:e4:c6:7b:5c:86:52:ac:22:ec:24:98:52:a7:cc:
                    8e:37:c5:c9:59:e3:ce:16:71:b8:ef:22:ed:0d:00:
                    c1:92:22:ff:5c:f8:a6:d8:8e:9e:cc:34:00:5e:32:
                    01:f1:39:19:64:87:51:1b:6f:4f:3d:b1:56:fb:c8:
                    6e:e7:2f:0a:1f:8d:a9:6b:7d:ae:36:60:13:e9:d0:
                    e2:3f:13:89:ae:5c:41:e1:7d:cc:3b:c3:63:37:01:
                    4c:7e:c3:f7:6a:e4:4d:ca:ae:3b:43:af:db:dd:26:
                    cc:e9:2d:4c:4c:ab:25:1f:d2:11:1e:75:cc:f4:d4:
                    be:47:ad:85:bb:ba:a0:fc:5f:17:36:86:b7:a3:af:
                    57:26:41:51:29:81:bf:02:eb:cd:86:41:d9:e9:2a:
                    09:80:ad:c2:ca:93:47:84:ed:a9:49:78:f5:15:8a:
                    a4:ed:32:26:7d:2d:33:97:a2:36:c7:48:4a:7f:bd:
                    43:74:fc:df:39:61:b7:d2:74:47:a7:e3:ad:ad:49:
                    2e:da:bb:39:11:77:84:6a:17:4b:2e:06:7b:24:ad:
                    64:c8:c0:1e:b6:e3:f4:01:7f:3d:da:ea:25:93:55:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2C:BF:A8:C6:CA:6F:07:14:08:A4:F2:8F:D1:A6:4D:D7:B7:1B:09
            X509v3 Authority Key Identifier:
                keyid:57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:32:7b:f6:dd:47:95:d6:8e:4d:d5:c6:32:9e:53:2f:a8:e0:
         e8:f6:04:36:dc:33:86:7c:b1:45:e5:53:83:96:52:13:b7:6f:
         61:2d:14:de:0c:bb:99:d6:30:73:97:6a:5a:65:a2:dd:06:a6:
         eb:3f:48:df:c5:cb:07:02:2e:01:9b:9d:29:40:b9:c5:69:ec:
         ba:b2:fc:ed:0f:a6:fe:b6:0d:a5:62:25:27:75:24:42:6a:0b:
         43:55:63:9e:48:4a:08:d0:56:82:8e:b5:ba:ec:1c:f9:19:c6:
         d5:93:88:41:be:f2:5f:1f:e1:10:41:12:b3:bb:f2:44:ba:36:
         a7:e8:68:ba:b1:9a:aa:d7:5e:64:e2:2d:ac:50:6a:40:7d:48:
         74:ae:8e:72:4c:2b:89:cd:3e:bb:f2:39:c0:31:14:76:b7:c4:
         ed:c0:f7:c7:df:d2:ff:98:cf:83:f6:0b:bb:a6:e4:b5:b7:e6:
         ad:33:17:de:dd:36:82:eb:0d:b5:9e:13:d4:5b:91:fb:c7:0f:
         3b:46:d0:b9:01:69:eb:55:34:50:fe:9b:6b:f5:d5:9d:6f:7d:
         00:20:f4:e4:a2:71:0e:ae:92:3c:3e:dc:82:d4:67:fe:83:27:
         01:db:38:d7:a3:be:8a:3c:8d:60:61:dc:f1:0b:39:34:c0:8b:
         ab:9b:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:54 2026 by rpki-client