Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File:                     6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier:          jLvTUlo8ZUy/5NSd6t0sroDbVgfeEMyN2jmHL33Am74=
Subject key identifier:   24:CE:74:49:8B:7D:7A:88:1C:FE:AF:D9:EF:82:C5:3B:36:FF:F3:58
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer:       /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial:       019D9AE3236F53AFC01D0504FE63F69ACD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 10:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:10 +0000
Files and hashes:         1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: Wk/mNjF26F97vke/JgNF7iLpANWfKCHDJ+oI/R5liF4=)
                          2: zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa (hash: AJBQtpRLkRSZKhdaLX+ia9/jPSSmkNLT+zLAkaVXhn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:23:6f:53:af:c0:1d:05:04:fe:63:f6:9a:cd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
        Validity
            Not Before: Apr 17 10:01:10 2026 GMT
            Not After : Apr 18 10:01:10 2026 GMT
        Subject: CN=24ce74498b7d7a881cfeafd9ef82c53b36fff358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:b0:1c:a5:b9:50:45:fd:5e:c5:70:40:49:
                    4c:31:0c:0c:e4:d2:c9:4c:e2:a1:7a:da:ff:fa:87:
                    cc:1c:4a:a6:68:4b:79:88:53:9f:92:8b:a0:99:c6:
                    3c:58:d7:20:34:43:ce:0a:12:ae:49:ec:ff:8e:5e:
                    9e:ca:76:db:12:83:b8:c3:7a:e3:d8:f2:4b:34:b3:
                    a6:fc:53:45:6c:8c:24:ce:dc:62:f6:c7:76:94:68:
                    de:e8:40:a7:cb:2b:5b:0a:97:8a:ba:7e:e9:0e:2d:
                    2b:59:77:92:3a:ae:cd:eb:1a:bc:1c:75:5c:19:a5:
                    53:a4:53:16:70:f1:01:17:1f:d0:fa:2b:4d:48:7e:
                    b6:2d:42:a5:bd:c0:62:a0:c2:38:d8:25:66:01:ac:
                    bd:21:e3:1e:7e:a1:28:19:3e:0e:29:74:46:6b:24:
                    6a:6b:18:8d:92:49:1a:0b:8b:7f:06:d7:bb:80:8f:
                    86:7d:67:0e:c4:74:f7:58:69:4b:20:45:e4:d2:ff:
                    d9:bb:8c:e9:ff:db:78:14:3b:2c:71:40:98:c1:d6:
                    f5:07:21:f0:f2:96:65:11:b7:83:02:bc:9b:65:d4:
                    83:b4:4a:ca:fa:6a:c1:01:0e:36:65:b7:92:bf:2a:
                    64:ea:b1:5d:9c:38:04:50:1d:5d:6b:19:41:66:89:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:74:49:8B:7D:7A:88:1C:FE:AF:D9:EF:82:C5:3B:36:FF:F3:58
            X509v3 Authority Key Identifier:
                keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d1:2c:12:a6:8d:83:f5:4d:2e:c2:2c:9f:4f:b2:91:09:62:
         15:f9:35:ea:e1:a3:1d:07:0d:11:d7:39:51:60:30:6d:3d:87:
         83:86:5d:31:a9:19:a8:4f:9c:a2:2a:47:85:a5:f1:99:49:9c:
         d1:d2:82:5d:7a:e4:3f:88:bf:48:31:89:ea:4f:52:81:db:e6:
         e9:45:9f:88:c1:38:4a:fb:74:36:4d:30:38:92:2b:a5:f5:39:
         7e:12:ab:23:38:b0:93:18:d3:f9:52:d3:98:bb:1a:60:eb:f0:
         24:df:a8:78:2f:55:fd:6e:06:57:3e:4a:34:66:63:a7:9e:a5:
         b0:9d:c0:5f:76:a5:17:e8:a1:bb:a5:60:51:e9:3b:dd:c8:c1:
         03:15:9e:b5:90:f2:c0:ae:ff:17:91:b7:f3:18:f0:e3:3b:be:
         84:42:81:aa:ce:9b:b8:91:d7:68:b0:36:72:5f:e0:bf:80:51:
         89:5a:34:fd:05:38:2e:61:fe:a6:91:cb:c6:40:a8:63:e9:96:
         68:46:48:44:8a:69:70:fa:ce:0c:22:8d:36:e5:ad:31:40:3c:
         bd:5c:44:ee:88:a5:62:6f:05:1e:1e:5f:57:bc:97:7d:9b:72:
         56:fa:85:b8:c5:37:31:06:99:bf:66:f9:90:a5:2e:72:e5:43:
         fc:67:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:14 2026 by rpki-client