Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          jJvRQ8ALkw6CiMSYeoybAA0fuV9qD/zPWWFzDxvpGY8=
Subject key identifier:   78:E9:11:B1:94:6C:95:2D:E0:FC:E0:DE:47:4E:C9:06:25:80:0B:FF
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       019D98F3FFC0B74AEC2505E1AB715454ED3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          10E8
Signing time:             Fri 17 Apr 2026 01:00:20 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:20 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:20 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: copFpJeZJO0jo5ScG0FbeYhlli9O/bCsVBUgD0WlWxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f3:ff:c0:b7:4a:ec:25:05:e1:ab:71:54:54:ed:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Apr 17 01:00:20 2026 GMT
            Not After : Apr 18 01:00:20 2026 GMT
        Subject: CN=78e911b1946c952de0fce0de474ec90625800bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:ce:03:33:09:16:a5:f6:f0:c6:03:e2:97:
                    3e:93:1f:c7:38:33:9c:fd:38:c6:88:ed:8a:a4:e9:
                    20:52:19:f4:1c:5b:4f:b7:6f:2b:8e:cb:1f:2f:ac:
                    a0:04:f5:ea:5b:91:25:09:01:4f:2d:65:cc:62:1a:
                    2f:1f:64:24:8e:a0:63:83:8a:2e:d5:af:b5:c0:6b:
                    6a:2f:cc:bd:b9:b2:db:7a:8d:1d:f7:15:d9:18:b6:
                    fb:60:13:de:fc:58:24:92:b6:f5:5d:6a:6f:cd:e0:
                    63:8a:ea:82:51:7d:1f:6d:31:ba:b7:09:2b:35:6d:
                    73:09:27:0f:4a:c1:bd:f0:84:44:4c:f2:73:a2:05:
                    0f:43:f8:ef:b9:95:5a:fc:7f:47:ee:cd:9e:23:9c:
                    07:73:62:8c:fe:ac:d5:44:e1:59:f5:94:09:c2:a5:
                    52:b1:ac:7e:36:b7:b0:bb:ec:2b:7c:e1:d4:ff:41:
                    1f:07:aa:11:d8:cb:fe:f8:49:41:45:03:7c:6c:4a:
                    3e:23:fc:fd:48:29:0b:0b:03:76:70:4a:f9:c2:3a:
                    18:37:30:b5:2f:61:60:b3:74:66:4d:23:7e:00:02:
                    92:25:b3:85:44:a7:18:69:ed:f9:eb:01:ec:25:77:
                    53:16:dc:1d:92:15:fc:9e:f4:27:e9:cd:31:b6:2a:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E9:11:B1:94:6C:95:2D:E0:FC:E0:DE:47:4E:C9:06:25:80:0B:FF
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:0d:75:6d:64:79:09:f6:aa:c1:e5:99:0d:d1:6e:4e:40:
         f2:90:ae:7d:30:60:61:e8:ec:c3:bc:3b:64:43:0c:c9:e6:0d:
         af:e9:5e:82:68:82:8b:8e:aa:f3:67:fd:91:5c:a0:8d:07:43:
         4f:05:a0:cb:2d:5e:d1:25:d7:27:af:c1:3c:ac:b8:04:41:ab:
         26:e6:25:57:b6:d5:36:cb:2e:50:ea:8a:76:ff:79:43:f9:6f:
         56:c2:a7:42:46:b9:dc:1f:82:84:03:c2:36:42:28:04:e6:af:
         2e:be:80:cb:78:30:fb:59:55:df:c6:44:33:61:0d:9f:43:a2:
         9a:f1:a2:cd:aa:c1:94:8c:b0:de:7e:6d:6d:5a:63:4f:4e:7b:
         69:53:99:61:3b:ef:a4:49:5b:60:16:d5:eb:c7:ed:45:9e:9c:
         b0:7f:e5:8f:41:96:48:15:b1:0f:0b:2d:52:3f:6d:70:b2:94:
         e7:b1:f0:1e:f6:4a:09:2b:ab:55:59:af:33:71:12:e4:c9:4a:
         cf:85:a4:87:75:2b:df:c8:80:d5:40:39:ba:33:a6:73:f0:fd:
         af:b0:f7:aa:eb:6f:fa:87:a0:68:3b:a3:42:ed:67:5b:12:73:
         3c:c1:97:02:65:c1:6a:c4:b2:f4:df:55:7d:fe:f1:d9:f9:ed:
         ab:5c:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:53 2026 by rpki-client