Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          +PxvSWlwxvwlypvCjq77SrlJvwQYlM+jt1vEK+Yn9gc=
Subject key identifier:   27:A7:DF:D5:9A:04:D1:8C:02:E4:92:72:54:47:DC:AD:B0:5A:F8:05
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       019D99993E920984086C1EE2B4B523ED9C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          1338
Signing time:             Fri 17 Apr 2026 04:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:50 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: oa25hwY8kZ6LaJcH33jIVgXv/YjiveEi2Qe8Qzi8nEs=)
                          2: UpgEGqcu1GJuaf10KzAyz7aDr-8.roa (hash: FafcYCab2MaXN/I3JHkDEUMkIjEyTMvrCthzIZARBZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:3e:92:09:84:08:6c:1e:e2:b4:b5:23:ed:9c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Apr 17 04:00:50 2026 GMT
            Not After : Apr 18 04:00:50 2026 GMT
        Subject: CN=27a7dfd59a04d18c02e492725447dcadb05af805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:88:f5:07:03:0e:43:d5:73:23:f0:4a:fb:
                    0f:8d:8b:60:6c:51:31:53:b4:a3:04:d8:83:83:be:
                    1b:7b:28:9e:d0:c8:29:8b:a0:14:8c:fb:92:e1:97:
                    d4:6c:9d:4b:96:aa:25:76:4a:c2:c8:ad:cc:e2:f4:
                    09:7a:2e:80:fe:7f:6b:c4:27:16:47:39:99:77:92:
                    d8:2f:92:5d:1e:77:75:61:eb:b9:f9:bc:48:1e:e3:
                    fb:7f:81:82:e0:5c:c3:d0:af:51:f9:f7:0a:55:fd:
                    37:53:3d:31:73:68:e3:38:2e:ae:f6:7e:12:d4:f8:
                    5e:bf:77:ed:ea:af:1f:74:3b:37:7f:de:e0:07:0b:
                    d9:c9:ac:41:e3:e6:9b:6d:f0:4e:9a:73:b2:a2:5c:
                    ec:61:7c:85:26:6a:46:76:7d:8a:b8:55:87:35:ae:
                    12:95:10:c7:4f:a2:69:3c:bc:77:4f:3a:8c:f5:9b:
                    72:aa:13:3e:20:59:81:3c:6c:95:b5:2a:2a:0a:05:
                    f0:6f:a9:14:4b:53:01:3c:d9:38:49:58:99:1c:01:
                    f6:3d:58:61:b4:7f:b4:05:50:18:df:30:5d:c1:dd:
                    1a:d4:6f:44:94:66:ef:32:1b:b5:f2:52:ef:12:5c:
                    22:ce:df:3c:8c:bd:ea:96:82:44:f8:db:19:6e:3a:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A7:DF:D5:9A:04:D1:8C:02:E4:92:72:54:47:DC:AD:B0:5A:F8:05
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:a0:0a:34:19:8a:73:f8:20:22:40:b0:7b:0b:6f:41:d0:
         e3:19:14:cc:eb:54:1e:5d:bc:e6:02:07:6f:38:1d:57:bf:2b:
         9f:0f:1c:27:fd:69:94:95:6f:e4:b6:6c:8f:b9:45:2f:d9:d8:
         df:36:4b:e6:82:c2:0d:51:ee:78:97:25:8e:f8:48:a9:5d:f9:
         b5:46:33:25:40:0d:80:f0:34:6e:1f:c1:4b:e5:c1:3b:0a:1e:
         e8:5d:30:4a:a2:87:3c:f8:70:4d:0b:e7:12:f4:54:6d:a2:fa:
         93:59:39:95:c9:b8:66:1e:25:1b:50:3c:36:5f:ca:44:3c:1e:
         03:32:a8:d9:97:e6:41:f6:8c:00:93:e5:cb:89:00:64:ea:64:
         54:d3:fc:e2:87:a2:f8:01:12:82:50:b3:8b:2a:cd:74:31:d3:
         f9:75:8f:62:64:74:d3:b8:59:25:01:6a:37:c8:30:79:60:a6:
         5e:b0:13:8a:e9:49:6d:85:28:ba:a8:a3:6f:5c:cb:65:98:bf:
         e5:c8:17:31:28:1d:b0:16:9a:4b:86:19:b5:45:99:7d:1c:7c:
         fa:7a:5d:0f:be:e4:61:7c:5b:e2:af:8b:ad:2b:2f:91:c3:3a:
         60:14:89:05:17:d7:c8:9f:66:89:10:c7:dc:d5:68:ec:f1:b2:
         37:16:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:07 2026 by rpki-client