Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          IrSNcbug2Gf0GIgyr0gREmNA+epUBoCkjG6a4akYeI0=
Subject key identifier:   13:D8:47:AE:20:C8:EA:FD:7C:38:BE:68:B3:6D:D0:C8:28:A7:E6:FA
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       019D9999B36184E488DEC79CDFD1E7727478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          12BD
Signing time:             Fri 17 Apr 2026 04:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:20 +0000
Files and hashes:         1: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: IxGEMHqEloK3ctRd8wCNFgDEiQRY1exUS2wiiDsM6a0=)
                          2: Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa (hash: a/DGW0i/X4m/ikPJX+oJ6qAZ0udts75Z/BZGzVsUAJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:b3:61:84:e4:88:de:c7:9c:df:d1:e7:72:74:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Apr 17 04:01:20 2026 GMT
            Not After : Apr 18 04:01:20 2026 GMT
        Subject: CN=13d847ae20c8eafd7c38be68b36dd0c828a7e6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:5e:06:a6:8f:88:4a:51:34:d1:69:de:41:
                    3c:17:6b:af:a2:11:a2:81:8e:17:4a:34:cf:74:ee:
                    5b:90:cf:3b:3d:ea:1c:6d:e4:86:1f:8b:4c:88:75:
                    78:78:5a:e9:6f:8b:4a:74:ac:5e:b4:93:af:17:c5:
                    da:4c:17:52:27:0c:d5:e8:b8:27:85:23:cf:2d:22:
                    03:62:48:40:7c:93:f2:55:e3:19:f9:42:86:3c:67:
                    bf:5f:71:ba:cf:fa:e6:47:39:f7:c7:7e:69:0b:4c:
                    80:2c:2a:c6:26:0d:2e:c3:48:14:21:39:73:9b:6e:
                    c5:b1:c2:b3:b6:7a:df:c0:20:4f:cf:4a:95:ee:04:
                    1a:be:91:cc:f8:ba:51:7f:01:f0:36:4c:30:c1:c7:
                    b8:2e:88:e0:b1:1c:2f:3f:8a:7d:12:b7:63:79:f7:
                    05:d7:a3:d5:7d:a3:11:b9:c6:b0:d7:07:db:eb:c0:
                    d8:56:6c:a2:d6:a2:39:eb:e2:0e:d4:e7:fe:24:05:
                    4e:7e:4c:96:84:a7:f3:24:51:cd:e3:d5:dc:9a:8c:
                    84:ea:da:d9:3f:c0:af:fe:fc:0d:4b:be:1f:e0:63:
                    b2:94:f2:11:52:2e:8d:0f:59:d5:1f:39:e6:23:dd:
                    65:1f:53:a5:40:ea:54:70:2d:f1:f4:8f:fb:15:45:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D8:47:AE:20:C8:EA:FD:7C:38:BE:68:B3:6D:D0:C8:28:A7:E6:FA
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:54:f4:9c:02:2b:e3:0e:11:f9:83:ad:34:c8:4d:eb:7d:
         a7:6a:66:42:31:33:fc:80:e7:b8:b3:dd:49:0a:73:91:7e:21:
         ee:cc:df:c2:64:ee:79:0a:13:ed:7a:14:0a:28:bd:1f:e9:32:
         11:ef:3d:c4:c6:e5:58:ef:cb:ba:30:69:29:54:34:68:0b:bb:
         81:0d:3a:b3:1d:53:ff:fb:99:b5:4b:dd:e5:51:03:dc:d5:9b:
         0c:e6:b0:39:59:20:5e:30:7b:17:99:5f:16:42:f8:29:2c:17:
         f9:20:d5:96:25:cd:7b:60:43:3a:9b:81:41:69:0d:cd:0f:f8:
         bb:2f:92:8f:2d:0f:7d:96:45:3f:ca:96:24:1e:f8:43:c6:6a:
         a7:af:55:ef:c6:4b:aa:09:42:24:bf:55:93:3b:00:b2:9e:ba:
         c1:fa:24:66:95:86:3d:af:06:b3:90:24:74:45:a0:cb:f4:2f:
         97:66:38:a6:3f:68:5e:9c:e3:eb:c8:86:d1:53:92:d7:65:90:
         76:30:e5:02:3f:65:d5:fa:a1:5b:20:0a:19:11:b6:58:43:83:
         2a:df:f8:cc:bd:f2:2f:24:ca:d9:09:b3:e3:22:d9:01:0b:a4:
         2f:02:84:62:98:c1:84:5d:c9:4c:bd:bf:46:9a:75:8d:35:dc:
         97:63:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:51 2026 by rpki-client