Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          VITWJfdtnCh3q8b8zlkFUK/kKYqLiRiGWXQxqd1llS8=
Subject key identifier:   A6:0D:57:95:5A:A4:B0:9C:93:A8:63:57:1B:E2:E2:0D:D5:B0:CE:01
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       019D98F50BFC40EC21FA8FC22036B491E959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 01:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:29 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: vzIe/3hdvcPqmhlBc7YP7lFclMpgWz3JkKO0yUKss8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:0b:fc:40:ec:21:fa:8f:c2:20:36:b4:91:e9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Apr 17 01:01:29 2026 GMT
            Not After : Apr 18 01:01:29 2026 GMT
        Subject: CN=a60d57955aa4b09c93a863571be2e20dd5b0ce01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:30:59:06:ca:b3:b2:72:66:cc:8c:14:de:
                    82:11:0c:00:1b:9d:0f:0b:95:28:fa:1d:aa:40:d7:
                    21:15:ec:d1:90:9b:7b:45:06:6e:68:6b:88:5a:6e:
                    a3:0b:c6:60:ff:0a:ba:de:7a:d1:33:6e:60:bc:02:
                    12:aa:d2:35:a1:fe:fb:e1:25:83:e5:bd:95:1b:80:
                    c1:79:11:77:89:c2:47:0a:3f:b8:42:52:fa:77:2d:
                    54:2d:90:5b:7e:3e:17:4a:12:6c:28:82:f4:11:73:
                    3e:2c:48:05:cb:3e:55:ab:57:cf:d5:cf:5e:dc:74:
                    5d:4f:f5:e2:25:97:69:93:4c:9d:7c:61:42:af:a7:
                    ce:7d:31:c2:18:ab:c8:f7:48:62:f6:b0:11:57:d6:
                    35:87:d1:67:ee:67:58:89:b7:11:12:54:9e:81:f4:
                    8d:1c:8b:b8:de:cd:1b:4c:87:a6:85:7e:8e:09:aa:
                    55:4a:1d:9e:51:8b:e4:48:62:3e:b6:97:51:f7:e2:
                    4d:42:e4:9b:5b:20:a0:ab:6e:6e:32:ee:fe:9d:33:
                    d8:01:db:03:e1:0f:1c:5f:7b:2b:fb:e4:9f:f0:9d:
                    9a:75:37:da:d7:cc:96:b3:f1:b1:e8:01:b3:39:44:
                    dc:3a:80:4a:e2:22:d7:dd:5d:68:cb:33:24:24:89:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:57:95:5A:A4:B0:9C:93:A8:63:57:1B:E2:E2:0D:D5:B0:CE:01
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0e:d9:f6:aa:df:ac:48:3d:74:b1:5e:71:a9:ba:ae:9e:d0:
         3a:32:f3:16:f2:e8:1e:ba:c7:4b:f1:3d:a2:f0:1e:fc:c9:1b:
         52:22:28:b9:73:27:3e:a9:6f:32:9f:a6:d5:ce:23:3c:33:d7:
         a8:0f:c1:e5:4a:b6:5c:dc:ab:59:89:8f:2d:6e:28:94:40:7a:
         f0:b1:57:b2:52:5b:b0:49:be:15:e6:eb:ed:b0:6f:04:a2:ab:
         2c:7e:2d:fe:a1:0f:d3:a6:19:e0:e3:78:58:46:41:3b:92:b5:
         06:21:49:ec:d4:e5:2a:48:86:5c:51:1f:32:5b:c6:50:19:af:
         50:b0:d9:41:b3:a3:45:fd:0d:b3:a8:c4:01:69:bf:64:dd:e6:
         58:6d:d7:e3:8b:8a:71:16:93:23:b5:d7:08:19:e1:88:bd:d1:
         b6:43:4e:15:1a:ae:22:24:93:ea:24:d9:3d:0f:5e:1a:42:42:
         03:20:51:30:59:d1:79:27:72:ef:85:5f:2a:f0:cf:ab:87:ba:
         be:2f:2c:f8:cb:93:b1:a6:1c:23:7d:3b:01:16:1f:9a:98:49:
         6f:75:27:cc:1e:4b:9a:63:82:20:f9:01:41:07:76:90:33:9e:
         66:80:5f:02:d7:c2:6d:02:7c:de:b0:09:6c:76:f4:a2:75:ab:
         b7:e8:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:25 2026 by rpki-client