Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File:                     6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier:          QtHyRL2ljfGmssiyGBpKJ3h2YgkC/6/MaBwmanElyGY=
Subject key identifier:   1E:0A:73:EB:FB:97:27:17:3B:7A:77:43:0E:02:93:28:72:42:DE:42
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer:       /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial:       019D98189A5E356035215506D5165B614863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number:          0583
Signing time:             Thu 16 Apr 2026 21:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:42 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:42 +0000
Files and hashes:         1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: NtoewWLecIWv5PC1ckM81L6Ix5yfCZFz6001clqqcPQ=)
                          2: IPh_6iVNx496xq8P78NbeC5ann4.roa (hash: p/kpws4dnlRTMpuyDTof3NBBpdQNG/GFmv/G6ZFNtHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:9a:5e:35:60:35:21:55:06:d5:16:5b:61:48:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
        Validity
            Not Before: Apr 16 21:00:42 2026 GMT
            Not After : Apr 17 21:00:42 2026 GMT
        Subject: CN=1e0a73ebfb9727173b7a77430e0293287242de42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:17:51:39:0f:0c:af:b4:eb:09:55:88:e1:
                    59:12:4f:ad:33:f9:dc:cb:48:7b:bc:c7:34:da:a5:
                    d3:e2:25:30:af:bd:b9:99:19:03:db:45:a3:5e:0c:
                    1b:da:6c:18:d5:76:e7:82:4c:76:56:7a:39:77:bd:
                    76:14:5b:e5:91:02:ee:88:fb:77:3b:af:f7:82:6e:
                    78:c5:87:93:5d:45:9e:bd:83:49:c2:18:1c:c6:8d:
                    0c:c9:50:12:4e:a3:bb:56:b3:3c:7e:b4:dd:bd:5d:
                    90:b3:13:83:9c:76:b9:b0:62:ea:4a:90:7e:94:72:
                    78:7f:56:5f:b5:35:2c:e7:ea:69:6a:08:20:5c:12:
                    11:f6:3c:52:c5:7d:50:2d:56:ff:89:28:57:e0:12:
                    eb:61:fc:64:68:86:fc:77:98:30:b6:6e:13:bc:44:
                    96:fc:65:3a:1f:f2:09:e9:7f:77:a9:35:4c:59:e9:
                    dc:95:21:82:1d:79:ea:3f:a6:c8:56:55:3a:7d:d7:
                    6b:4b:22:83:88:5a:7b:b6:5d:c1:88:27:8f:57:7f:
                    73:55:68:7b:c8:a8:4b:fd:76:96:07:74:75:cd:e4:
                    36:e9:fa:de:83:35:70:a7:94:ce:91:42:79:27:5f:
                    fc:03:bb:62:79:41:10:59:44:9d:85:ec:dc:10:60:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0A:73:EB:FB:97:27:17:3B:7A:77:43:0E:02:93:28:72:42:DE:42
            X509v3 Authority Key Identifier:
                keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c5:92:5d:fe:5e:fc:32:0d:c0:0d:54:3f:5b:b4:d5:67:38:
         0c:05:f4:76:76:6b:db:0b:d6:ef:e3:01:de:4f:57:e9:a9:83:
         0d:83:18:cc:ad:69:e7:bc:15:c5:45:99:5f:20:ef:a1:6c:e2:
         20:6a:42:fc:31:4f:8a:15:19:43:be:d6:67:ae:3f:e0:9c:49:
         23:09:ba:30:e8:8d:2f:6f:24:6e:66:6c:75:f1:63:cd:f8:e8:
         3b:31:7e:af:c1:4f:26:c8:88:2b:ca:ac:0b:0f:c8:65:9a:44:
         a1:be:cd:21:8d:76:9f:e7:fd:b6:38:83:ec:e4:91:94:1d:79:
         8b:e6:d2:b3:15:6e:ad:df:81:ad:7b:3d:56:91:7a:d7:9d:50:
         57:7f:73:68:f4:74:f1:89:64:dd:3c:64:56:35:a1:76:ed:4a:
         07:4a:46:97:7c:d8:51:13:52:4e:19:ab:77:61:1b:60:8a:14:
         0d:a5:89:7c:de:6c:7f:0e:3b:41:de:79:aa:ae:c8:87:e4:d2:
         84:f9:63:be:75:e5:d4:99:17:e4:b3:59:b6:ae:a2:cd:8a:e6:
         c3:50:93:f8:c1:df:18:68:ac:87:68:e3:35:b8:2d:7a:17:0c:
         1b:f8:b2:3e:6e:27:78:d2:01:40:43:98:35:82:bd:84:0d:ad:
         4f:10:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:11 2026 by rpki-client