Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File:                     6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier:          eP/ArkaUO2mUe+NWYYJcjfXrLui9UxePFjl678yapgE=
Subject key identifier:   6C:DC:C4:B6:BE:8A:37:99:6F:59:78:9E:4C:86:CB:10:8A:E2:2E:E0
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer:       /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial:       019D9962A7D66F65A88012725FC5CD93943E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number:          0688
Signing time:             Fri 17 Apr 2026 03:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:12 +0000
Files and hashes:         1: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: 5gIZ4/Rg736s0e+h1e7f96sYmjXVPgijX0gglrdEQLE=)
                          2: 6hShQaltRmKUUiWuMSct4TA-Jhs.asa (hash: ypy1FO0omfjXny6KF8F9OxAi1fqYbkKqFEBqvlU2DDU=)
                          3: NN0QHkAo8YjbrqzfVegC-uPDydo.roa (hash: LNKR2uGp+5Bgg5S1vn+NiLyxeC2w80ohFJfAfQHeysY=)
                          4: X-_TS1I4t-DVqUxoc-khUSm_viU.roa (hash: ODLd3VbptYoQMKlYYBjJpRqUDy9+T6ytXSUAIjxuWLg=)
                          5: a--bYgGL-XVIoB4j9s2ZcaOhHQE.roa (hash: Ve3i2f1MUbm0uzhDZGK/VqGiEifq40uI/vozbJbHVjw=)
                          6: k4uRfVLkiFx02imsmzFdIo0Ou9I.roa (hash: 9rPMDuoX5kSVG70I/Za6IhaLgJW41gakMpsQjx7kJlA=)
                          7: rIDOAUoKFwKwGINXnPmMsHQWi5c.roa (hash: NW5RLPV2D9akEYqeNDha9BvwB/AzK2kgHaHsg+BPsU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:a7:d6:6f:65:a8:80:12:72:5f:c5:cd:93:94:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
        Validity
            Not Before: Apr 17 03:01:12 2026 GMT
            Not After : Apr 18 03:01:12 2026 GMT
        Subject: CN=6cdcc4b6be8a37996f59789e4c86cb108ae22ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:fd:81:2f:0e:43:05:00:67:f6:44:ea:cb:
                    c2:7d:66:4c:0f:bf:3f:da:37:76:05:44:fa:45:75:
                    b1:92:1c:57:1b:c3:a1:b6:aa:39:37:5a:f8:0a:5b:
                    1d:34:93:75:0b:f1:f8:e8:34:7d:41:fa:84:fb:3c:
                    ec:2a:f9:65:96:3f:c6:33:78:ef:07:76:4f:ee:85:
                    20:66:4a:7b:b2:51:91:e3:fa:27:3b:36:33:d3:09:
                    4c:d6:c9:c5:2b:fd:e9:fe:e1:a0:f4:78:40:33:46:
                    82:c4:20:00:ea:df:a8:90:13:79:e8:0b:a8:91:5a:
                    b2:0c:09:c6:50:ce:11:a6:36:e5:41:ae:3c:94:65:
                    74:6d:af:2c:3c:5b:d8:6b:7b:05:8d:c5:63:e4:58:
                    2a:ca:f0:ad:b8:ea:1f:6a:c1:37:d3:e4:2b:e1:8c:
                    62:4c:ac:ac:bb:16:11:c3:3b:4b:c2:63:d3:74:0b:
                    d1:d7:92:7d:bf:c9:1d:43:9a:94:4c:54:1a:26:16:
                    f8:72:79:21:a9:bf:07:f2:d1:dc:b5:e0:ee:44:d0:
                    c2:86:2e:bc:5c:9b:94:db:a9:a1:bf:87:43:d2:aa:
                    a8:a5:03:30:48:14:01:11:92:e3:bf:37:d2:4a:bd:
                    b6:9b:ca:d2:5c:72:17:d9:3e:fe:19:a4:ee:48:92:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DC:C4:B6:BE:8A:37:99:6F:59:78:9E:4C:86:CB:10:8A:E2:2E:E0
            X509v3 Authority Key Identifier:
                keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:73:ad:2b:b7:ce:05:d0:2c:c4:c4:54:4a:3b:ff:1a:dc:ae:
         cd:8f:77:5c:7b:a6:3e:a0:54:1d:f5:dc:9e:a1:2e:0c:0f:c3:
         84:f3:5b:70:6c:9b:22:51:41:b0:94:ed:dc:ca:ed:2c:d0:f2:
         b3:67:ac:eb:32:bc:9b:8f:6e:ef:69:8a:fc:2b:2b:a8:da:a7:
         b3:14:ad:42:8a:fa:e3:f1:84:bc:58:43:0e:ce:40:11:5e:ba:
         c1:67:a8:1f:c8:4b:f4:ee:4a:a9:c0:30:fd:b5:a3:fc:68:f8:
         f0:d2:51:7f:d5:e0:f6:70:ec:5d:f0:d5:04:ec:06:f2:b1:a0:
         f4:f6:e5:ee:d3:05:4c:43:63:4a:57:bf:08:63:db:8a:f3:c1:
         4c:b4:22:a3:b3:c3:e9:3c:da:55:9c:6c:b3:73:8f:ec:ec:87:
         af:dc:81:ef:ed:c0:2d:90:26:6d:34:1a:51:92:91:7d:b8:47:
         6b:a4:00:e9:b3:8f:6b:11:67:24:d9:93:14:5e:04:ce:18:05:
         a4:e2:de:0a:43:53:4a:30:ff:b8:4c:cf:22:57:b7:d4:50:74:
         85:0d:c6:ae:0d:62:22:3f:ec:66:33:5d:4c:2c:b4:3c:7e:34:
         31:fc:76:eb:4c:f8:f5:e7:44:10:39:ff:0d:c2:23:44:1b:44:
         81:14:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:48 2026 by rpki-client