Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          ZkGBzV2ytDkZolfZVJG0mdIAQf+0SU0Dlu4Dpj5QmdU=
Subject key identifier:   DF:49:44:AF:34:A0:D9:D9:F5:B6:18:D6:69:1D:7E:3F:1F:DC:CC:43
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       019D9B1997CABA8A4B3A9E81B858FBD0A2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0BDC
Signing time:             Fri 17 Apr 2026 11:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:38 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: xYhsq8xHcmGDAi4HWUbJXslwkRxKeyFVUOuAAocBydI=)
                          2: H6-FSC2W-7MZwFLducWzxTiTk1Q.roa (hash: M01qYjr1lkeGo2Zh4TnE75ep6vS7RdnFiFA27dCWb7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:97:ca:ba:8a:4b:3a:9e:81:b8:58:fb:d0:a2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Apr 17 11:00:38 2026 GMT
            Not After : Apr 18 11:00:38 2026 GMT
        Subject: CN=df4944af34a0d9d9f5b618d6691d7e3f1fdccc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d2:6a:dc:bc:cc:5d:58:dd:66:25:ae:b2:b1:
                    ac:1c:fb:76:aa:7a:80:27:26:53:09:a4:80:b6:a9:
                    03:0e:cd:f0:72:e1:f9:b5:8e:9d:1e:ea:f6:c8:a5:
                    85:d9:08:52:2c:31:36:d7:21:fa:35:bb:19:83:07:
                    01:3a:13:fe:42:8e:42:21:bf:02:4a:e2:a2:2c:6b:
                    0e:48:12:7d:d0:c9:8b:2b:c1:fd:78:2a:ff:5c:11:
                    08:c4:75:81:0d:8b:03:0a:a8:f1:06:ec:4a:84:6c:
                    6b:34:88:10:2d:3a:25:2c:31:d3:07:3f:1c:d3:c4:
                    d9:ab:96:86:6a:43:49:ab:d4:10:90:1d:00:eb:e3:
                    54:73:e2:3b:81:86:19:74:fd:a0:d3:bb:c6:ec:4c:
                    21:39:2f:43:6f:af:92:d3:db:7f:79:77:f8:77:65:
                    a2:21:99:4a:0f:12:24:39:fd:5b:4b:94:c3:a0:bc:
                    e3:20:5a:b4:83:f0:26:bd:09:d0:9e:6b:ed:b2:48:
                    57:76:08:da:cf:3e:10:72:f8:44:45:52:f6:e2:d0:
                    b0:5e:be:28:69:94:5d:4e:64:29:ad:f8:26:ef:ac:
                    1e:a7:42:27:ac:d4:e4:4d:52:9c:0c:15:94:4e:7f:
                    da:09:22:00:34:19:cd:92:63:0e:d8:a0:b7:4e:a6:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:44:AF:34:A0:D9:D9:F5:B6:18:D6:69:1D:7E:3F:1F:DC:CC:43
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:80:60:a8:61:cd:ea:3d:d5:f5:80:31:63:b5:4c:0a:92:42:
         b0:03:a8:65:76:0b:7c:a3:38:f1:8f:43:fd:bd:87:e6:23:9b:
         7a:95:dc:7a:4e:79:d7:88:b4:91:f0:b3:ba:0d:b2:1a:fe:a1:
         9b:23:41:7f:77:3b:0e:78:df:2b:8f:3b:62:3c:b8:40:00:1a:
         8e:c0:6f:31:ae:78:ff:33:22:2a:86:89:08:54:a0:69:f1:45:
         dc:f6:e2:88:7e:05:9c:98:87:a0:f9:f1:41:59:07:65:34:26:
         97:89:0e:86:43:2e:60:99:59:4d:28:14:cb:0b:33:80:0c:74:
         0d:f1:5d:55:36:4f:87:2a:af:e7:25:64:55:c7:61:63:2f:3a:
         0a:53:81:a0:1c:8f:2b:2a:59:91:41:4d:e1:1c:8d:3d:99:a5:
         e9:c5:83:7b:a0:fa:3c:a0:26:a2:c9:98:c1:1b:0e:4d:61:db:
         81:9b:34:4b:84:8e:66:1a:e1:fc:26:a9:12:29:11:6d:24:8b:
         c5:0b:e3:b3:0c:3b:59:ac:cd:bf:37:84:d4:2b:ef:ba:4d:bf:
         8d:0b:ab:75:c8:74:8d:f9:04:6b:bd:20:81:59:7a:a1:43:7e:
         c9:b4:73:72:40:4e:54:a7:2e:ce:96:94:f9:ad:d7:b7:af:19:
         25:52:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:18 2026 by rpki-client