Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File:                     X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier:          l5i9cCDBgG4j2hFh9sA4KdZ2cIcSkrOBuyL/RcxR51U=
Subject key identifier:   64:D9:34:BB:B2:47:2F:72:E1:77:9C:20:43:01:DF:B6:EC:CB:04:A0
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer:       /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial:       019D9AAC3042969DC834B7842627E9838639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number:          06E8
Signing time:             Fri 17 Apr 2026 09:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:08 +0000
Files and hashes:         1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: EF5HmlqWNfUIFNzkPluVAdfhVYAb0QelFsGO/jOyi8o=)
                          2: hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa (hash: s7Q9n6FVyTwioyvvcuH0Je0WpF9fajbCSSnTwOxPywE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:30:42:96:9d:c8:34:b7:84:26:27:e9:83:86:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
        Validity
            Not Before: Apr 17 09:01:08 2026 GMT
            Not After : Apr 18 09:01:08 2026 GMT
        Subject: CN=64d934bbb2472f72e1779c204301dfb6eccb04a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:78:92:eb:2a:d3:da:69:aa:50:4d:88:82:
                    9a:23:7f:f1:c1:18:0c:7b:f9:a9:c0:f1:e1:b6:d4:
                    20:5d:8b:ed:87:29:bc:24:3a:ff:6b:9c:ba:e0:ae:
                    bb:1d:6f:af:21:f1:a4:03:a4:2e:94:06:43:c9:68:
                    aa:15:1f:c5:4d:86:f4:fb:28:ca:b3:91:73:d9:97:
                    ab:08:00:28:38:f2:b3:3b:f6:d8:08:53:9d:fd:8d:
                    43:1d:80:83:d5:f6:57:a8:dd:c0:cb:31:3e:bc:9f:
                    a2:93:a5:84:0a:a4:77:e9:48:11:cd:32:1c:76:b6:
                    f3:3c:7f:2f:af:db:97:70:91:2e:4c:84:25:6c:95:
                    6a:88:70:e0:cb:79:55:1b:c5:36:ff:01:a9:ce:a2:
                    fc:33:96:de:9f:9a:92:71:77:db:c1:68:bd:e0:6b:
                    95:ea:d9:e1:95:97:40:6c:78:a1:32:be:bc:98:2d:
                    f2:3d:6e:e0:b3:d8:6c:1a:fa:81:1e:74:81:5f:3f:
                    dc:86:1b:55:fd:21:6a:bd:56:7c:34:d0:fe:66:de:
                    68:2f:1c:f2:9e:aa:e2:c2:b3:a8:0d:07:2b:1e:07:
                    47:e8:ae:54:88:7f:00:53:39:d2:4d:88:5e:91:ea:
                    c3:06:5c:66:07:1c:7d:58:46:de:26:d2:3b:8f:7d:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:34:BB:B2:47:2F:72:E1:77:9C:20:43:01:DF:B6:EC:CB:04:A0
            X509v3 Authority Key Identifier:
                keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:76:80:15:2e:69:61:cf:24:68:91:d0:de:36:f1:a3:21:54:
         0b:6e:9b:fb:60:b4:8e:d8:5a:3c:b9:0c:f6:85:50:17:1d:3a:
         38:73:92:69:33:f6:0b:ec:ce:e3:bb:cc:01:f8:8e:63:54:36:
         e4:f7:7b:73:63:40:72:12:a5:07:f0:99:f8:32:33:98:d1:a3:
         70:87:1f:92:5b:33:e2:69:6b:e4:e4:ee:05:54:83:d4:47:68:
         78:ae:34:ca:1f:4c:cd:32:36:d3:5e:00:a4:8e:b9:11:96:07:
         f9:84:f0:e1:be:94:0a:79:40:bc:46:a0:c8:8b:a9:94:92:e1:
         a3:4a:e4:a0:31:80:27:39:19:53:a4:69:a0:0d:ca:e2:2d:cb:
         0c:1c:b9:df:98:6a:fa:55:d8:f1:ca:02:90:7b:a2:48:ee:1d:
         ab:73:7a:58:f4:28:2a:37:bf:e2:cb:52:e2:6e:3b:1a:3f:d5:
         f7:0f:5e:71:02:61:23:87:dd:9b:f0:b7:b5:ac:40:f4:88:ce:
         64:66:63:56:f1:6d:e8:a4:9b:d9:b6:92:33:56:f9:d5:89:4e:
         37:73:74:4a:0a:59:b7:e9:15:ff:99:82:8f:8c:5e:79:d3:00:
         80:cd:3f:22:f7:94:d2:e2:03:36:e3:c5:f4:74:52:85:93:35:
         65:2f:7a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arDBClp3INLeEJifpg4Y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYWIwMTlkOThiODhjNTg1ZDVmMDE2MjA0MTEzYzgzOWFl
MDY3ZDEwHhcNMjYwNDE3MDkwMTA4WhcNMjYwNDE4MDkwMTA4WjAzMTEwLwYDVQQD
Eyg2NGQ5MzRiYmIyNDcyZjcyZTE3NzljMjA0MzAxZGZiNmVjY2IwNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYB4kusq09ppqlBNiIKaI3/xwRgM
e/mpwPHhttQgXYvthym8JDr/a5y64K67HW+vIfGkA6QulAZDyWiqFR/FTYb0+yjK
s5Fz2ZerCAAoOPKzO/bYCFOd/Y1DHYCD1fZXqN3AyzE+vJ+ik6WECqR36UgRzTIc
drbzPH8vr9uXcJEuTIQlbJVqiHDgy3lVG8U2/wGpzqL8M5ben5qScXfbwWi94GuV
6tnhlZdAbHihMr68mC3yPW7gs9hsGvqBHnSBXz/chhtV/SFqvVZ8NND+Zt5oLxzy
nqriwrOoDQcrHgdH6K5UiH8AUznSTYhekerDBlxmBxx9WEbeJtI7j32vKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTZNLuyRy9y4XecIEMB37bsywSgMB8GA1UdIwQY
MBaAFF+rAZ2YuIxYXV8BYgQRPIOa4GfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTct
Yzk1M2E4OGJiZmEzLzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTctYzk1M2E4OGJiZmEz
LzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXaAFS5p
Yc8kaJHQ3jbxoyFUC26b+2C0jthaPLkM9oVQFx06OHOSaTP2C+zO47vMAfiOY1Q2
5Pd7c2NAchKlB/CZ+DIzmNGjcIcfklsz4mlr5OTuBVSD1EdoeK40yh9MzTI2014A
pI65EZYH+YTw4b6UCnlAvEagyIuplJLho0rkoDGAJzkZU6RpoA3K4i3LDBy535hq
+lXY8coCkHuiSO4dq3N6WPQoKje/4stS4m47Gj/V9w9ecQJhI4fdm/C3taxA9IjO
ZGZjVvFt6KSb2baSM1b51YlON3N0SgpZt+kV/5mCj4xeedMAgM0/IveU0uIDNuPF
9HRShZM1ZS96Xw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:15 2026 by rpki-client