Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File:                     6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier:          /rP7HiSUlvOqtVFxSJ/+panrUxqgm8Wet/Cecyqtf+0=
Subject key identifier:   4D:0E:8D:21:67:52:33:15:DB:07:7F:CD:17:09:57:8A:6E:DD:AE:AF
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer:       /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial:       019D99CFF1112EC9D6EC705C494264C6E9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number:          12BC
Signing time:             Fri 17 Apr 2026 05:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:34 +0000
Files and hashes:         1: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: mhJCAQd0idQJ1UGBT2ASWMpVApy9DONAZsi3FaOalsg=)
                          2: SjzLfenUX4kznR2y8ruZeOnFvmw.roa (hash: vzCbx03F8+rxM1liQuyxsAk6fpt98wQC2kvOe4mhFm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:f1:11:2e:c9:d6:ec:70:5c:49:42:64:c6:e9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
        Validity
            Not Before: Apr 17 05:00:34 2026 GMT
            Not After : Apr 18 05:00:34 2026 GMT
        Subject: CN=4d0e8d2167523315db077fcd1709578a6eddaeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7d:18:3d:d4:41:ef:94:e8:f5:54:de:5b:e0:
                    f9:54:58:8e:49:69:de:51:e7:e9:62:d8:bb:d5:26:
                    b8:99:ee:10:c8:00:55:8c:a7:00:26:fb:44:64:f8:
                    e5:ca:11:fb:6b:0d:df:ed:9c:a0:9c:12:fd:52:8c:
                    40:c5:d1:e9:0a:9e:7a:52:aa:6e:3b:7b:30:8e:e2:
                    4b:9b:9d:bb:96:9d:8d:27:99:da:a2:64:d3:64:1e:
                    49:d4:26:16:d4:74:8e:93:c4:19:b5:4a:e2:23:c2:
                    b5:5b:06:46:56:61:39:cb:f3:bf:b4:b9:0f:06:67:
                    6d:53:12:13:7a:7f:0a:e1:13:38:61:bb:6b:6d:ee:
                    12:4d:09:43:b9:95:98:1c:54:85:f0:0f:1f:79:cf:
                    10:84:ba:cc:bb:3d:5f:24:67:45:53:00:c0:0b:98:
                    49:73:57:99:a1:45:e4:94:0c:0c:c2:fc:89:b5:91:
                    82:3c:98:f1:fb:a6:b6:6b:63:c5:14:9f:4d:07:75:
                    33:a5:5d:42:fc:49:43:22:c9:f3:f2:6a:6c:f0:bc:
                    24:3d:f4:4e:92:f3:26:15:ac:2d:e7:13:ac:57:7b:
                    c8:c3:03:fd:32:69:4a:09:e8:68:36:df:40:d2:65:
                    91:7d:a3:48:68:01:80:ba:fc:f4:22:d6:4f:ea:b9:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0E:8D:21:67:52:33:15:DB:07:7F:CD:17:09:57:8A:6E:DD:AE:AF
            X509v3 Authority Key Identifier:
                keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:de:27:01:1d:55:ba:81:d5:15:a1:56:3f:63:a0:56:74:26:
         6a:ad:a4:01:2c:dd:9b:45:9c:22:77:d5:97:7b:55:67:23:9a:
         ed:5b:f3:9e:dd:52:7b:a4:4b:d8:1c:28:e2:fc:01:2e:a4:0f:
         4b:93:d1:f2:f9:87:ca:28:0f:c8:d9:57:80:26:8c:ba:85:c5:
         07:9c:a7:84:bd:17:02:8a:44:45:47:dc:a8:c6:3f:d0:12:1e:
         f3:0f:73:d4:16:89:67:86:60:7f:f2:3c:00:48:f8:fb:6d:f0:
         e7:dd:8b:ee:23:de:0f:4d:e9:f0:74:b2:ca:a9:c9:80:93:d4:
         7b:35:33:35:82:60:1c:b0:86:db:7f:27:2c:53:da:82:2b:ea:
         93:32:12:40:3a:65:af:d8:64:e9:57:71:d0:3a:45:e9:21:20:
         a3:47:3c:61:e8:68:91:99:e0:17:0a:fb:13:fd:4c:a4:6d:a4:
         98:3c:4d:c9:bb:3b:9b:13:a7:98:33:4d:70:e3:52:bc:19:d4:
         51:be:7d:22:13:bd:95:c3:58:c9:4c:76:e8:54:21:b1:df:54:
         a0:82:ed:d6:37:f3:9f:22:3d:cd:eb:db:f5:43:d2:4e:74:8f:
         0e:02:d6:82:ba:3e:00:3b:f5:ea:7c:d4:d9:f3:2c:70:93:04:
         a8:6b:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:44 2026 by rpki-client