Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          8T8q+A7FROZNqzUqSsqu4iheMSZY9kpQt8ZsxEczXUU=
Subject key identifier:   B7:E8:27:B1:91:94:06:51:C5:77:DB:F4:BC:1C:F4:2C:99:84:74:01
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       019DA52F54DC0783367412E798D47A4B3613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          15E5
Signing time:             Sun 19 Apr 2026 10:00:35 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:35 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:35 +0000
Files and hashes:         1: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: W0ZF9qm2j5WcaUdLopih/sRrFvBSHOQsNupYyxDxySA=)
                          2: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (hash: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:54:dc:07:83:36:74:12:e7:98:d4:7a:4b:36:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Apr 19 10:00:35 2026 GMT
            Not After : Apr 20 10:00:35 2026 GMT
        Subject: CN=b7e827b191940651c577dbf4bc1cf42c99847401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:ad:33:13:1b:86:0b:44:26:44:b2:61:ca:
                    52:c6:38:f9:15:4c:57:61:d5:c6:55:a6:4f:6e:98:
                    4d:38:6d:ad:4d:bb:d0:3f:e1:3a:36:8b:01:45:42:
                    3e:d2:45:71:46:aa:fa:58:a3:9d:a0:f5:ea:9b:5b:
                    e7:ed:de:23:7f:6d:30:ec:8d:71:d8:b8:3e:02:95:
                    8e:79:62:38:9a:67:fb:c4:fc:b4:08:24:33:f0:1b:
                    37:b9:5f:50:b5:fc:20:25:1a:92:d8:5c:e9:f7:ae:
                    5a:35:44:8d:27:ac:b3:48:66:f3:cb:cb:57:b8:eb:
                    0a:67:b4:9b:1d:45:db:9b:c9:da:5a:4d:c1:ff:9f:
                    f9:45:61:89:88:da:78:be:90:d5:fb:c0:6b:0d:ba:
                    2b:33:74:dd:82:0f:ca:f0:3b:73:09:21:85:09:b3:
                    bf:51:f6:09:e1:00:56:b8:5f:93:e5:71:1c:e6:ef:
                    96:ec:a6:43:0c:a7:14:60:c5:4f:8e:7d:60:a2:65:
                    f9:5b:7f:e8:6f:7a:24:3e:58:c8:31:4f:98:e5:16:
                    ba:e7:67:8e:c2:d0:d6:53:11:f2:93:c7:39:e6:67:
                    99:93:a3:2a:8f:de:53:26:b1:e6:94:c5:9a:17:1d:
                    bd:10:ff:fa:23:75:d9:1f:30:f0:57:76:65:95:03:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E8:27:B1:91:94:06:51:C5:77:DB:F4:BC:1C:F4:2C:99:84:74:01
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:fa:e6:2a:96:29:2b:3f:11:c9:e6:ab:da:24:ee:36:d4:
         70:17:00:ce:f5:03:0c:c5:24:14:8d:84:16:a1:c7:87:14:9f:
         f6:3a:d4:c7:be:78:f2:e9:31:fe:7b:f7:e5:b2:8e:15:6a:7d:
         63:e9:63:3d:49:e0:bd:2f:8a:e5:2e:06:ea:36:e7:85:42:7a:
         a4:45:d8:1b:ea:17:92:05:f7:f9:1c:87:86:9e:38:41:b4:09:
         c6:9f:5b:01:37:94:c9:31:d8:2f:d4:eb:7d:a0:bb:86:e4:5f:
         35:24:e8:90:f7:0c:29:9f:da:75:2e:93:66:ab:16:9c:57:2b:
         3b:5c:dd:1c:fb:06:5d:da:72:c5:17:d3:70:d0:18:7d:a5:c7:
         a9:02:5c:51:60:3f:22:e3:fe:52:a7:d0:69:97:c2:07:97:80:
         84:96:87:2b:14:0f:90:9f:45:a1:20:53:a0:75:47:b0:0c:2a:
         b3:39:11:a6:f2:d8:7f:b3:ca:f2:cb:7d:fc:25:7b:82:80:f5:
         98:2d:e3:1b:28:cb:bb:54:33:55:6a:af:15:2a:cf:02:90:c3:
         f5:58:69:27:8f:2f:83:94:82:6c:8a:2f:37:56:c0:5d:54:e8:
         7f:04:63:ba:81:c1:22:5f:4e:bb:30:2c:ae:8f:47:3a:8e:89:
         e7:f7:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:20:18 2026 by rpki-client