Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File:                     6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier:          nDw6fA2YMYp7SSuOVrTu76PMux4NQgSLqys4TSfcyfA=
Subject key identifier:   7E:6D:FC:AB:1B:7D:8C:EA:DB:F4:07:7E:02:6E:33:A9:B2:83:1C:BD
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer:       /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial:       019D9773E3961921FB394B53A7827C6D5CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number:          12F2
Signing time:             Thu 16 Apr 2026 18:00:47 +0000
Manifest this update:     Thu 16 Apr 2026 18:00:47 +0000
Manifest next update:     Fri 17 Apr 2026 18:00:47 +0000
Files and hashes:         1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: Mm4nVUTM3lR8pXc+u6yjXNGWrljBwTv2Qlhg1wa2q7w=)
                          2: wgAilhNk_JB54zRjveL96EA9LP8.roa (hash: 5g3uDJFZLAanJ1siT+5xFo3dY/KZA0bidkW5vxOC84c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:73:e3:96:19:21:fb:39:4b:53:a7:82:7c:6d:5c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
        Validity
            Not Before: Apr 16 18:00:47 2026 GMT
            Not After : Apr 17 18:00:47 2026 GMT
        Subject: CN=7e6dfcab1b7d8ceadbf4077e026e33a9b2831cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:c0:ba:93:a1:0b:18:13:23:d1:66:4f:cf:
                    cc:1d:42:dc:45:21:e0:fd:65:08:60:9f:a4:74:b6:
                    c0:c4:d1:28:90:54:35:19:a4:f4:85:b0:8c:2d:f7:
                    30:0f:f7:cf:93:f2:0a:70:1f:47:8a:bd:70:ad:fb:
                    bd:1f:93:70:96:fd:f7:28:b8:fb:71:17:28:55:7e:
                    59:23:a7:a2:e0:b3:1f:56:a8:0b:c7:12:c5:91:81:
                    a0:33:94:9b:49:2c:d2:86:44:f1:73:c3:0d:57:e9:
                    8d:a7:62:8d:89:ae:1a:0b:ad:7d:16:cb:9e:fa:6a:
                    4b:b1:d4:16:e2:df:76:1a:07:f2:34:f0:4b:e1:fe:
                    9f:6a:2a:23:4f:30:ac:9a:cc:45:9b:81:87:0e:15:
                    c3:28:df:60:36:c8:ef:59:0b:11:9b:52:da:f1:45:
                    3f:d8:f6:63:77:8b:4e:4d:44:40:33:5b:ff:6f:55:
                    37:c4:90:ab:51:b2:7e:f3:ab:67:1d:a1:60:82:29:
                    f9:17:6e:e0:26:72:74:2a:17:70:e1:ee:50:60:79:
                    08:7d:70:90:89:5b:93:67:75:49:46:1d:02:a9:c9:
                    2e:d2:85:bb:35:15:30:36:88:e7:0a:48:eb:41:71:
                    e2:2e:7e:6e:f6:42:b2:28:3b:5f:3e:a4:47:cd:e9:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:FC:AB:1B:7D:8C:EA:DB:F4:07:7E:02:6E:33:A9:B2:83:1C:BD
            X509v3 Authority Key Identifier:
                keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:be:67:fa:a5:b9:04:e7:d5:ed:26:82:2a:bc:38:e3:ea:6c:
         0f:59:fb:84:59:f5:4f:f1:d6:d4:46:3a:c0:5a:9f:de:0c:3e:
         6a:24:5c:e3:c9:89:f7:c3:a4:04:37:aa:a5:e7:6b:4e:8f:4d:
         64:5a:51:7d:6c:93:e8:85:25:c9:4b:1f:71:7f:d4:50:13:12:
         8e:b6:b5:f5:4b:48:ce:ae:9a:66:26:95:9c:fa:b8:a4:30:ef:
         f7:7c:5b:59:a4:4b:f3:8c:d6:16:d7:27:0f:6f:06:25:f7:8d:
         2b:88:48:c0:52:96:9f:02:ea:3e:a1:15:89:f7:70:f1:3f:ed:
         e9:a4:9f:63:de:a6:78:39:bc:70:25:b3:c5:c6:08:ab:eb:01:
         7b:32:c2:02:13:3d:a1:fd:44:64:7d:36:d8:22:22:dd:ff:bf:
         93:88:28:11:de:ed:6c:db:07:ed:49:b1:b1:9f:2c:16:7a:8e:
         91:6d:cc:a8:8e:81:24:68:4e:f2:ac:6c:d5:24:89:22:87:f8:
         e3:63:1d:aa:c9:c9:64:62:7b:79:a7:00:92:e2:5e:e5:8a:0b:
         9f:82:8c:40:76:57:de:cf:3d:77:ce:a8:41:2b:e6:96:02:6f:
         f9:af:49:51:e5:9a:00:9e:99:1f:54:3d:21:38:22:c1:e5:5c:
         d6:55:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:15 2026 by rpki-client