Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          SAspnxS46wqFsC+j8po3TktqHm3UTwj55b/NIe2PWBU=
Subject key identifier:   9E:FA:F3:CE:9E:C1:04:52:91:8C:3D:0B:C2:DF:EC:93:67:30:5F:F6
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       019D98F4AEDC67F0FF94C4E8722F3704D974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          05FB
Signing time:             Fri 17 Apr 2026 01:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:05 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: qrcprLWVJcVA04VWypzh/i4DgWkCLak9dstY2M7Fh84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:ae:dc:67:f0:ff:94:c4:e8:72:2f:37:04:d9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Apr 17 01:01:05 2026 GMT
            Not After : Apr 18 01:01:05 2026 GMT
        Subject: CN=9efaf3ce9ec10452918c3d0bc2dfec9367305ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b1:40:e4:42:fd:ab:ec:42:9c:b6:58:b2:b5:
                    01:08:1d:cb:88:2b:19:c9:e2:89:db:47:5e:cc:54:
                    c2:99:94:d7:2f:25:78:ca:5e:4f:00:d3:30:a8:43:
                    40:98:bc:e9:89:b6:62:80:de:e6:31:f0:ef:16:73:
                    32:96:33:2e:03:da:4a:59:c6:a7:4e:dd:aa:68:d2:
                    7b:21:b2:86:08:d4:d7:72:40:ce:4b:d5:60:db:75:
                    19:89:e5:be:e1:e1:a1:7d:28:88:e6:99:22:e7:b1:
                    d8:27:5f:00:17:05:0b:eb:55:1d:d1:2e:64:d3:1f:
                    83:68:aa:07:c3:8c:52:48:81:62:d8:d4:ba:16:9a:
                    f1:e4:57:0f:84:e0:7e:22:29:29:0f:c0:9b:aa:53:
                    f1:0a:f0:d4:71:3f:9a:a5:88:75:a4:35:35:cc:0e:
                    56:9b:cb:26:81:a4:e3:c6:d7:eb:d6:2e:b4:55:dd:
                    56:84:1e:f3:f1:14:b8:c4:3e:21:d6:62:4e:9b:5f:
                    9f:c0:4a:01:4b:fe:b5:13:c9:f9:96:6d:c0:b4:44:
                    47:99:57:c6:2e:c8:1f:7d:10:98:2d:39:d9:b6:92:
                    30:e9:bb:29:9f:3a:68:60:1f:b4:70:7c:16:e5:13:
                    a8:17:41:ca:b8:9c:b2:e9:f7:9c:28:4a:38:16:35:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FA:F3:CE:9E:C1:04:52:91:8C:3D:0B:C2:DF:EC:93:67:30:5F:F6
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:28:de:73:98:47:41:35:de:e5:65:55:ee:c4:53:21:46:
         63:b7:04:49:e1:56:37:17:0a:12:03:44:a4:65:e0:06:4f:03:
         b8:bf:12:07:73:de:a8:64:0c:1b:7b:17:3b:5c:88:bf:e0:17:
         5c:3a:f9:18:1a:27:52:2c:c2:78:7e:f2:c6:9d:e7:74:3d:86:
         b7:2e:ad:40:01:f5:bc:44:42:92:d9:68:1d:e1:8d:99:5d:75:
         88:46:e1:61:aa:a4:42:be:7c:93:25:fd:2b:61:77:8f:db:8f:
         0f:53:d0:b4:cf:e0:2f:ca:9e:ed:0e:6b:b3:d1:b2:27:a7:63:
         dc:5a:a8:bc:3c:14:74:f3:54:17:44:91:ff:11:21:11:f1:93:
         d5:7f:83:da:a8:2e:32:5b:38:b3:d2:0c:cf:1a:46:27:88:97:
         5f:e0:64:32:69:66:7d:f4:b7:a3:08:ae:af:56:db:14:bd:c2:
         6b:db:bd:3f:bf:c7:62:d8:30:e6:9d:b5:f4:1a:9f:64:d5:32:
         0e:c1:21:d6:53:4d:e3:b2:7b:7a:1b:af:d4:84:b3:49:b9:5b:
         20:b4:6f:63:cd:de:6d:67:ff:4b:3d:44:92:59:5c:e6:fb:18:
         5b:7c:ab:e5:05:80:bc:10:6c:d2:53:49:97:73:e2:4a:96:9d:
         a9:93:81:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9K7cZ/D/lMToci83BNl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjYwNDE3MDEwMTA1WhcNMjYwNDE4MDEwMTA1WjAzMTEwLwYDVQQD
Eyg5ZWZhZjNjZTllYzEwNDUyOTE4YzNkMGJjMmRmZWM5MzY3MzA1ZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87FA5EL9q+xCnLZYsrUBCB3LiCsZ
yeKJ20dezFTCmZTXLyV4yl5PANMwqENAmLzpibZigN7mMfDvFnMyljMuA9pKWcan
Tt2qaNJ7IbKGCNTXckDOS9Vg23UZieW+4eGhfSiI5pki57HYJ18AFwUL61Ud0S5k
0x+DaKoHw4xSSIFi2NS6Fprx5FcPhOB+IikpD8CbqlPxCvDUcT+apYh1pDU1zA5W
m8smgaTjxtfr1i60Vd1WhB7z8RS4xD4h1mJOm1+fwEoBS/61E8n5lm3AtERHmVfG
LsgffRCYLTnZtpIw6bspnzpoYB+0cHwW5ROoF0HKuJyy6fecKEo4FjUrwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ76886ewQRSkYw9C8Lf7JNnMF/2MB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafko3nOY
R0E13uVlVe7EUyFGY7cESeFWNxcKEgNEpGXgBk8DuL8SB3PeqGQMG3sXO1yIv+AX
XDr5GBonUizCeH7yxp3ndD2Gty6tQAH1vERCktloHeGNmV11iEbhYaqkQr58kyX9
K2F3j9uPD1PQtM/gL8qe7Q5rs9GyJ6dj3FqovDwUdPNUF0SR/xEhEfGT1X+D2qgu
Mls4s9IMzxpGJ4iXX+BkMmlmffS3owiur1bbFL3Ca9u9P7/HYtgw5p219BqfZNUy
DsEh1lNN47J7ehuv1ISzSblbILRvY83ebWf/Sz1Ekllc5vsYW3yr5QWAvBBs0lNJ
l3PiSpadqZOB/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:29 2026 by rpki-client