Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File:                     6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier:          R/7gKgUAlTGnJXST2N08sn787PVuJgPo6rE+prkvjvE=
Subject key identifier:   69:1A:1D:8E:F2:64:84:D1:3C:C6:0A:DA:8D:3B:0C:A6:BC:28:2E:52
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer:       /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial:       019D9D082F274D24B7F4C746FAB5EA9B629F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number:          038D
Signing time:             Fri 17 Apr 2026 20:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:52 +0000
Files and hashes:         1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: gD677qvtNA0fdma7AFCwTaukcoQphKBOchTQ9hwQ7tg=)
                          2: hkxJH8qDns81hHO_TEwuH8z_Eac.roa (hash: WI/ahDUF+5IzjpWVPH44VyOD7TChtaZ1JW84a/hYGec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:2f:27:4d:24:b7:f4:c7:46:fa:b5:ea:9b:62:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
        Validity
            Not Before: Apr 17 20:00:52 2026 GMT
            Not After : Apr 18 20:00:52 2026 GMT
        Subject: CN=691a1d8ef26484d13cc60ada8d3b0ca6bc282e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e5:5b:12:91:cf:64:db:43:e7:d0:65:81:df:
                    af:bb:97:12:89:24:b4:fe:3c:9d:2b:13:91:e1:fc:
                    15:b0:4c:67:8b:37:e2:3b:78:39:94:a5:5f:6c:a9:
                    5c:68:54:7a:a3:c8:f3:1d:06:7f:d9:f4:b7:4c:77:
                    89:bf:4d:85:5f:aa:43:75:41:82:1b:60:c1:82:b0:
                    db:35:a4:42:19:c8:c7:ba:fc:32:e5:a0:61:6b:8a:
                    09:00:05:ff:b7:0d:15:c8:71:d4:1f:c6:ad:4f:57:
                    40:c2:d5:1c:83:1b:f8:ab:08:cd:5b:68:c1:67:32:
                    a4:08:09:28:b1:b2:c7:41:b1:20:66:3b:66:d0:ad:
                    78:52:48:54:e8:83:b1:1e:c3:0f:81:62:62:6a:80:
                    15:a3:0b:33:57:6a:f3:f9:16:09:64:31:de:ac:cb:
                    55:4d:35:03:74:d7:eb:0f:2b:d1:59:64:f1:99:39:
                    84:d6:d1:62:3d:c8:14:22:57:9c:43:a1:87:40:95:
                    4e:9e:ab:47:c0:37:61:60:0b:00:82:e7:99:6b:d2:
                    54:8b:fe:ec:36:b1:ca:64:db:35:ea:d4:3a:8f:b8:
                    ae:63:bc:6a:be:57:02:cc:1f:3b:e0:a5:3d:11:d0:
                    1a:1c:cf:29:d5:3f:6d:f5:f0:e5:37:27:82:de:f7:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:1D:8E:F2:64:84:D1:3C:C6:0A:DA:8D:3B:0C:A6:BC:28:2E:52
            X509v3 Authority Key Identifier:
                keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cc:93:ac:13:bf:4f:62:98:83:75:f5:d3:ca:0d:69:f9:48:
         a4:da:14:c6:da:b7:c4:ba:76:37:ef:df:ae:ba:22:a4:f9:4e:
         aa:1e:85:50:e8:2c:5f:09:9d:01:03:d0:ab:23:71:9f:18:16:
         8d:23:84:26:16:42:b4:68:66:20:f6:6a:62:74:62:fa:d3:c7:
         ee:5d:c7:ef:ca:21:35:e9:1d:cb:f9:15:20:32:f8:0c:9f:0d:
         8e:27:bb:15:74:91:5d:15:73:64:c7:31:ab:bb:5e:4f:77:25:
         18:12:33:66:f8:21:fb:ae:60:46:2d:7e:e2:99:0b:ad:72:f7:
         64:2f:81:aa:4a:e4:6e:ca:c2:63:2a:e2:d2:75:03:1e:ec:03:
         a5:51:ef:da:7f:c0:c8:b9:46:c1:5a:a1:37:9c:c7:ff:51:3b:
         99:b2:71:6c:98:75:71:22:a1:50:d3:77:47:d2:2e:95:e2:6d:
         4e:fe:c4:18:7b:a8:25:85:2e:59:e7:74:b7:3b:87:55:ab:19:
         a3:34:93:93:3a:43:87:7f:08:41:46:c1:38:e8:b9:0d:f9:80:
         04:fb:35:e5:89:25:45:7e:1a:85:bd:76:b7:e5:b6:93:50:37:
         0c:6b:5e:9f:eb:0d:ae:1e:d9:67:89:d0:4d:35:a0:5a:6b:da:
         ef:28:c9:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCC8nTSS39MdG+rXqm2KfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5
MjExYzgwHhcNMjYwNDE3MjAwMDUyWhcNMjYwNDE4MjAwMDUyWjAzMTEwLwYDVQQD
Eyg2OTFhMWQ4ZWYyNjQ4NGQxM2NjNjBhZGE4ZDNiMGNhNmJjMjgyZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eVbEpHPZNtD59Blgd+vu5cSiSS0
/jydKxOR4fwVsExnizfiO3g5lKVfbKlcaFR6o8jzHQZ/2fS3THeJv02FX6pDdUGC
G2DBgrDbNaRCGcjHuvwy5aBha4oJAAX/tw0VyHHUH8atT1dAwtUcgxv4qwjNW2jB
ZzKkCAkosbLHQbEgZjtm0K14UkhU6IOxHsMPgWJiaoAVowszV2rz+RYJZDHerMtV
TTUDdNfrDyvRWWTxmTmE1tFiPcgUIlecQ6GHQJVOnqtHwDdhYAsAgueZa9JUi/7s
NrHKZNs16tQ6j7iuY7xqvlcCzB874KU9EdAaHM8p1T9t9fDlNyeC3vfE9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkaHY7yZITRPMYK2o07DKa8KC5SMB8GA1UdIwQY
MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt
NzA1MjJkODE0ZTBjLzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj
LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMyTrBO/
T2KYg3X108oNaflIpNoUxtq3xLp2N+/frroipPlOqh6FUOgsXwmdAQPQqyNxnxgW
jSOEJhZCtGhmIPZqYnRi+tPH7l3H78ohNekdy/kVIDL4DJ8Njie7FXSRXRVzZMcx
q7teT3clGBIzZvgh+65gRi1+4pkLrXL3ZC+BqkrkbsrCYyri0nUDHuwDpVHv2n/A
yLlGwVqhN5zH/1E7mbJxbJh1cSKhUNN3R9IuleJtTv7EGHuoJYUuWed0tzuHVasZ
ozSTkzpDh38IQUbBOOi5DfmABPs15YklRX4ahb12t+W2k1A3DGten+sNrh7ZZ4nQ
TTWgWmva7yjJoQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:14 2026 by rpki-client