Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          EqbTS1/ODLk3DInvAQIWe3aEcRT396edRqvj6IAi718=
Subject key identifier:   A6:3A:7C:CB:29:67:45:49:50:FA:9D:E8:A7:D4:2D:19:A2:17:6B:BB
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       019DA4542E1B39101AA430C003660C71E1FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          03DA
Signing time:             Sun 19 Apr 2026 06:01:13 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:13 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:13 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: oBnYgFKVu25PNVo3RFvCK/JJyEgw4QFnJ05JB/qKMGI=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:2e:1b:39:10:1a:a4:30:c0:03:66:0c:71:e1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Apr 19 06:01:13 2026 GMT
            Not After : Apr 20 06:01:13 2026 GMT
        Subject: CN=a63a7ccb2967454950fa9de8a7d42d19a2176bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:38:d5:9b:1d:dc:10:59:df:a1:7c:72:67:
                    ca:8f:47:00:b9:a7:32:ea:02:b6:44:64:e9:ef:55:
                    ad:75:df:db:63:f0:b3:c3:da:8c:91:55:18:eb:93:
                    fd:7a:a3:4f:07:04:97:1c:5a:8e:a3:de:67:e5:b3:
                    3d:cd:7c:f4:37:cc:a9:42:65:ab:87:4c:22:1b:99:
                    e7:a9:fd:c1:d1:9a:f0:29:79:e4:d9:67:83:38:d3:
                    cc:bc:79:91:df:d2:79:3a:dd:13:17:0c:c5:3d:24:
                    1b:38:75:7a:94:a8:4f:30:86:74:ff:67:81:38:a9:
                    a7:03:b1:81:72:d8:37:a1:19:6a:5e:0e:81:24:00:
                    3a:e6:9b:63:07:68:dd:4e:c4:d5:08:0a:d1:31:89:
                    f2:00:e3:53:7e:1e:ed:2f:36:1d:0d:ff:2c:f6:7f:
                    b0:63:59:f1:ac:7a:21:25:42:ee:b8:8a:68:af:7c:
                    ae:0c:6a:59:9b:e5:20:b4:db:2a:32:93:e6:33:4d:
                    bf:6e:71:e3:e0:b2:20:e1:9b:b1:2f:6a:be:f0:fb:
                    fa:cf:29:53:b8:91:34:ef:fa:23:92:3d:7d:f6:3e:
                    98:32:4a:33:00:b5:e3:43:81:a1:46:4f:4f:3b:5a:
                    45:89:f9:0e:06:fd:7e:8a:fd:89:e4:6e:91:73:b8:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3A:7C:CB:29:67:45:49:50:FA:9D:E8:A7:D4:2D:19:A2:17:6B:BB
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9f:70:07:ad:99:2c:7d:0c:3c:80:ac:63:6d:28:ec:72:1d:
         4e:3e:59:a7:9e:fc:93:8b:e2:5b:80:ce:74:71:31:a7:84:21:
         c1:65:01:01:9a:1e:8b:3c:7f:85:16:f4:14:15:b1:4b:ea:b6:
         01:f9:03:dd:d3:e7:73:86:d7:c9:cb:41:aa:7e:e2:43:e4:c8:
         dc:77:d7:ad:15:e9:e9:d4:87:5d:d0:82:53:62:33:57:64:66:
         88:52:1c:be:8c:d4:48:6e:cb:d2:ab:76:34:b6:ac:1a:7b:2f:
         a4:28:fe:96:98:e4:ce:cb:22:dd:d5:04:df:12:16:4e:d0:73:
         ef:5e:79:dc:b7:88:21:e3:0f:09:c6:d9:d9:5e:15:45:36:bd:
         1c:6a:5d:4c:78:89:57:07:1d:a5:b7:74:d3:0c:89:fb:1e:24:
         17:8c:d9:06:0d:9e:2c:88:0f:24:2e:22:ff:6b:8f:18:f7:52:
         d2:73:39:05:d6:db:15:b3:bb:01:5c:82:9c:6d:44:6f:65:27:
         d8:a3:68:ab:71:8b:6c:0e:82:fb:3e:d0:13:cf:ac:c2:b3:3c:
         26:1e:f4:b3:7e:4f:66:53:ba:40:3e:35:52:04:ea:bd:93:63:
         7d:90:1c:48:4b:2a:8f:dd:d3:1f:da:95:4d:f1:b6:a3:ae:61:
         e9:98:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:39:23 2026 by rpki-client