Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File:                     Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier:          LXxP/qnivpNh68Y/aTtvp31da0+7zoK/uD1jzruiHgU=
Subject key identifier:   9F:FE:88:37:3E:FB:2A:1A:06:AA:2E:6D:6D:25:79:1E:17:75:ED:28
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer:       /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial:       019DA41CD702BCC5D5EB130060B3C62A9299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number:          6C
Signing time:             Sun 19 Apr 2026 05:00:46 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:46 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:46 +0000
Files and hashes:         1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: EW5vrH7RIuy8eahM57yX/iSnsPUVJWkGgK1tmlC+VKQ=)
                          2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:d7:02:bc:c5:d5:eb:13:00:60:b3:c6:2a:92:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
        Validity
            Not Before: Apr 19 05:00:46 2026 GMT
            Not After : Apr 20 05:00:46 2026 GMT
        Subject: CN=9ffe88373efb2a1a06aa2e6d6d25791e1775ed28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:45:43:ad:74:b5:df:5a:12:e0:ed:34:5a:
                    d8:08:ad:3c:3c:0c:0d:cc:df:93:4a:c7:48:4c:04:
                    38:aa:f1:0a:a1:03:f2:d4:eb:a9:b1:b2:4d:ca:15:
                    f3:2e:6d:d3:a9:f5:ac:d7:67:67:26:b0:2c:d6:1e:
                    aa:ef:6d:8f:dc:ad:ee:bc:7f:cd:52:73:85:13:d3:
                    89:f6:2f:1b:be:dc:98:33:7d:74:6e:89:af:fe:bd:
                    ca:c1:e5:5a:c7:9c:53:ed:77:20:1c:fc:cc:e3:e2:
                    86:3a:5a:11:fc:a8:0a:3d:52:70:6c:1a:9f:c5:83:
                    c0:b4:56:f8:98:04:cb:e3:f2:c8:e5:6a:0a:9f:dc:
                    6d:57:8c:1b:60:14:16:5d:fa:cf:47:ee:78:99:15:
                    44:56:b0:70:b3:35:f1:db:cc:ed:48:7e:4e:3e:3d:
                    bc:af:40:75:7b:eb:bf:54:45:9a:93:c3:a3:99:58:
                    7a:97:0b:c6:81:1a:d8:1b:ee:58:1b:67:3d:1a:c4:
                    eb:cb:04:5b:5f:3b:a9:3d:6d:f4:3e:8b:93:6a:49:
                    81:2e:d4:2b:b6:86:25:40:f2:dd:ed:07:3e:65:aa:
                    ca:c9:b3:12:de:e0:4a:c8:50:ef:8f:62:a2:e3:71:
                    1e:13:0b:ca:db:cf:fb:04:51:72:e5:20:1d:73:d9:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:88:37:3E:FB:2A:1A:06:AA:2E:6D:6D:25:79:1E:17:75:ED:28
            X509v3 Authority Key Identifier:
                keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2b:77:94:b8:f3:88:cc:70:ff:bc:3f:49:5f:b5:21:0e:4d:
         42:c1:e2:92:7d:f4:d7:00:75:5e:a3:e2:22:48:1f:77:03:bc:
         1a:37:e0:38:c6:b0:9d:0e:a1:9e:e8:cd:60:b3:9a:d2:2d:c1:
         1c:79:10:72:38:5d:44:f2:1f:7b:8c:1e:14:db:4f:cb:ec:64:
         97:40:1f:0c:c9:50:5a:83:63:61:71:a4:c4:a4:6b:09:bf:08:
         0a:03:d5:21:68:3e:2e:67:15:c2:b1:6f:ce:7b:1b:2d:fe:cc:
         9a:71:4b:57:ac:48:fa:1d:ba:30:9b:7e:19:9f:81:f8:3a:d5:
         7e:6d:70:d2:e0:f6:ec:b8:b2:b3:81:e9:5e:74:b2:ec:38:3a:
         09:17:f5:35:db:8f:28:15:af:4c:e4:ac:e4:a6:38:0e:34:9d:
         12:73:48:c0:bb:aa:18:61:94:df:01:6e:f2:5d:ba:99:24:5b:
         94:e6:de:7f:36:17:b8:68:c7:e5:16:a5:1d:fe:36:02:4b:28:
         68:40:38:f6:5d:c0:6d:e3:bd:3b:26:ea:66:53:11:df:e9:59:
         c8:d1:f0:4a:d4:24:dd:a0:32:ab:cd:c8:82:99:35:3b:9d:a0:
         10:ab:7a:81:a1:df:6b:46:fa:8a:76:61:5e:62:09:a9:69:79:
         85:aa:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:07 2026 by rpki-client