Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          MZhjcrYGpJx0Y+Jv9sfV9e4AoeXujhI3wlp380rulw4=
Subject key identifier:   AE:4A:C9:7F:A2:2E:6D:37:D9:FB:B0:98:08:D0:C2:2D:38:C9:2E:11
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       019DA453E630F2273F101668C7386008E31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0CD4
Signing time:             Sun 19 Apr 2026 06:00:54 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:54 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:54 +0000
Files and hashes:         1: 3T7apsoCLIRRuPziIRlUEsN-PHk.roa (hash: l4cLFttiGyOfAyk+8L0CJMAKg8dhT7SWDGcyXhUyR1Y=)
                          2: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: iMB9ZhdZgtg7e0djfry5HS0fFgQOmtYxnTcCzuU9GEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:e6:30:f2:27:3f:10:16:68:c7:38:60:08:e3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Apr 19 06:00:54 2026 GMT
            Not After : Apr 20 06:00:54 2026 GMT
        Subject: CN=ae4ac97fa22e6d37d9fbb09808d0c22d38c92e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:3b:25:2c:a4:5c:ee:10:20:19:21:b2:8d:
                    a6:c2:31:8e:ce:8b:60:93:39:96:16:d5:7a:2e:eb:
                    3e:a5:26:bd:46:d8:9a:8a:80:09:38:68:85:3c:3c:
                    2e:89:71:99:e0:be:7d:76:15:b1:84:56:e4:18:06:
                    40:fe:89:a9:d0:6a:52:95:eb:52:01:0b:e9:82:58:
                    ff:c1:4a:d9:48:68:31:9f:7c:55:5d:40:27:fd:7d:
                    79:eb:22:2a:1e:9d:79:ff:ea:87:7f:7b:cd:04:e9:
                    6a:4a:5c:fd:ec:cf:dd:49:bf:d1:9f:35:78:bc:c5:
                    6c:71:87:7b:c9:fc:2f:43:96:f7:64:5d:72:75:e7:
                    77:29:b7:61:bf:d4:23:cc:3b:7f:14:2d:1f:b0:26:
                    07:3d:b4:dc:be:4f:a1:85:19:b0:de:b3:b1:c8:39:
                    3c:f7:30:82:5e:ce:41:78:98:43:4f:ae:bc:04:44:
                    14:ae:af:27:4e:77:9c:12:55:a7:31:86:5a:50:96:
                    52:54:23:08:ac:8c:8d:76:a8:41:ea:c5:ee:c2:9a:
                    b6:e0:d3:2b:bb:7d:63:6a:53:ed:3b:28:35:8c:18:
                    90:71:dd:2a:49:5d:85:44:ad:7a:9d:ed:fd:6a:26:
                    7d:55:92:c0:34:3b:60:e4:ed:22:0c:64:96:11:73:
                    9a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:C9:7F:A2:2E:6D:37:D9:FB:B0:98:08:D0:C2:2D:38:C9:2E:11
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:09:8b:da:76:70:74:9e:57:de:41:0f:83:79:88:cc:fb:
         85:67:ae:96:5b:83:bd:5d:2a:44:0d:b0:4a:4f:f7:e9:d3:19:
         b1:8c:6d:04:42:ff:c3:cf:8c:2e:a3:20:aa:a7:8d:77:fc:d3:
         7b:14:83:65:26:46:ac:85:aa:2b:e5:47:d3:e5:5a:26:bc:96:
         bb:2e:e6:4d:a2:8a:8d:21:5a:38:61:39:ab:50:bc:b6:5e:ad:
         bb:62:a9:18:45:fa:fe:fd:3f:e6:1a:4c:d7:2b:a1:f7:59:65:
         30:61:00:ef:0b:f3:56:ef:5c:8b:5e:42:af:68:65:59:f7:8a:
         c6:56:97:e4:02:e1:ec:f6:ea:3f:7e:59:a6:1f:36:f6:38:76:
         7f:b8:1f:ab:e8:9a:91:83:b5:a5:f8:59:93:90:c3:6e:ea:78:
         d5:01:16:ff:95:1b:21:6f:e9:02:cf:58:8f:96:b6:63:b1:7c:
         7e:62:d8:b4:e9:0a:c4:14:0c:63:c6:90:99:d7:38:db:1d:20:
         dd:36:66:c9:b8:5d:91:e6:e1:32:4e:df:1a:70:57:23:72:6c:
         ae:ad:77:d7:b5:81:fc:42:92:5c:d8:70:3f:af:41:60:51:84:
         1c:02:68:a4:ac:23:98:b7:fc:cc:3b:02:a0:c7:4c:2a:65:22:
         21:90:92:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU+Yw8ic/EBZoxzhgCOMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MmUxNDZhMWU5ZTgzYjM3NTZmMDQ4YjZjMWIzMWUwZmM3
ZDIwN2QwHhcNMjYwNDE5MDYwMDU0WhcNMjYwNDIwMDYwMDU0WjAzMTEwLwYDVQQD
EyhhZTRhYzk3ZmEyMmU2ZDM3ZDlmYmIwOTgwOGQwYzIyZDM4YzkyZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk307JSykXO4QIBkhso2mwjGOzotg
kzmWFtV6Lus+pSa9RtiaioAJOGiFPDwuiXGZ4L59dhWxhFbkGAZA/omp0GpSletS
AQvpglj/wUrZSGgxn3xVXUAn/X156yIqHp15/+qHf3vNBOlqSlz97M/dSb/RnzV4
vMVscYd7yfwvQ5b3ZF1yded3Kbdhv9QjzDt/FC0fsCYHPbTcvk+hhRmw3rOxyDk8
9zCCXs5BeJhDT668BEQUrq8nTnecElWnMYZaUJZSVCMIrIyNdqhB6sXuwpq24NMr
u31jalPtOyg1jBiQcd0qSV2FRK16ne39aiZ9VZLANDtg5O0iDGSWEXOaGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5KyX+iLm032fuwmAjQwi04yS4RMB8GA1UdIwQY
MBaAFOkuFGoenoOzdW8Ei2wbMeD8fSB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmIt
NzRhMzk1YWE1NjA2LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmItNzRhMzk1YWE1NjA2
LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClAJi9p2
cHSeV95BD4N5iMz7hWeulluDvV0qRA2wSk/36dMZsYxtBEL/w8+MLqMgqqeNd/zT
exSDZSZGrIWqK+VH0+VaJryWuy7mTaKKjSFaOGE5q1C8tl6tu2KpGEX6/v0/5hpM
1yuh91llMGEA7wvzVu9ci15Cr2hlWfeKxlaX5ALh7PbqP35Zph829jh2f7gfq+ia
kYO1pfhZk5DDbup41QEW/5UbIW/pAs9Yj5a2Y7F8fmLYtOkKxBQMY8aQmdc42x0g
3TZmybhdkebhMk7fGnBXI3Jsrq1317WB/EKSXNhwP69BYFGEHAJopKwjmLf8zDsC
oMdMKmUiIZCSCg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:48 2026 by rpki-client