Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
File:                     J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json)
Hash identifier:          R2ISJCz1IkADW2dPoE26XejloleglTeTx2KWwKjaLb4=
Subject key identifier:   42:51:1F:CC:DA:3B:FD:99:D9:E4:D1:28:9B:9B:A7:D1:16:C3:53:B0
Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
Certificate issuer:       /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Certificate serial:       019D98F405E1FF49E1C0EEFABB0581EDADE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
Manifest number:          06D3
Signing time:             Fri 17 Apr 2026 01:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:22 +0000
Files and hashes:         1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: J0NpyJWjnEHUMPQypG9Z119ocl6lMj1zDR1qivnw4ZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:05:e1:ff:49:e1:c0:ee:fa:bb:05:81:ed:ad:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
        Validity
            Not Before: Apr 17 01:00:22 2026 GMT
            Not After : Apr 18 01:00:22 2026 GMT
        Subject: CN=42511fccda3bfd99d9e4d1289b9ba7d116c353b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:86:f4:d0:cf:ad:7b:b7:31:b4:06:a1:a0:
                    50:19:13:1a:8d:60:4f:89:48:ba:11:ef:f4:76:71:
                    81:10:e7:b5:4a:d9:fc:71:c0:9b:4e:60:b7:f3:8e:
                    18:c5:05:07:77:65:dc:cb:bf:f4:2d:a7:0d:6b:05:
                    05:75:b5:68:ca:62:e4:c4:5d:0d:8f:5d:aa:b5:ee:
                    4c:4a:1b:39:a1:6c:65:d7:9f:19:d0:26:23:76:31:
                    46:e0:e0:fb:bf:51:65:a9:ba:ac:3d:48:46:ef:f9:
                    1b:e1:93:92:90:0a:7e:d3:ac:a2:c2:94:7c:c5:32:
                    52:dc:db:b8:a5:63:1a:7f:b9:da:6c:3d:87:7c:00:
                    79:22:f8:f6:ab:61:a9:ef:a7:97:48:ff:64:17:b4:
                    01:ce:fb:ee:c3:13:67:2e:b1:cc:61:7e:84:26:bc:
                    65:74:37:6b:b4:45:e9:5e:1d:6c:a9:8f:5b:4b:80:
                    ba:81:08:dd:ef:11:98:68:2c:0e:b1:75:cd:e5:1b:
                    07:62:a2:57:28:f7:61:95:38:2a:2a:ea:c0:d1:71:
                    c9:fd:4f:0c:69:19:8c:d1:91:fc:03:bc:34:9b:ea:
                    fb:64:e8:8f:af:8a:97:0c:db:85:6d:c2:63:b7:8c:
                    ea:03:92:fb:54:c0:e9:6b:ba:a1:ef:47:de:8a:f8:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:1F:CC:DA:3B:FD:99:D9:E4:D1:28:9B:9B:A7:D1:16:C3:53:B0
            X509v3 Authority Key Identifier:
                keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:06:81:1a:18:e9:37:1d:9e:d6:e3:a9:f1:64:e3:7d:5f:76:
         f7:d6:35:7b:fa:2c:c9:d5:9e:ab:08:f6:de:f6:ba:d9:96:f5:
         94:60:9d:87:35:e1:d0:4b:85:2b:d4:3f:15:a7:5f:49:22:fe:
         9c:f2:f9:1b:d0:36:d4:a2:9c:17:fc:c0:78:4a:26:62:5c:2a:
         bd:a0:59:d9:a8:e1:3c:4d:89:11:de:db:f6:fa:d2:f4:5f:65:
         94:07:cc:8b:a5:fe:28:90:b5:e9:0d:21:cd:ed:93:ee:e4:94:
         af:c2:17:dd:5f:91:f6:4a:42:7a:b6:c2:b1:aa:bb:46:cb:42:
         55:de:26:d7:e4:00:71:17:a9:d2:16:22:15:86:28:77:d3:f2:
         de:93:40:f7:2f:ca:67:f1:9e:94:9e:3a:07:7b:ca:75:7e:e5:
         d2:fe:77:56:84:fb:b7:3f:a3:69:02:19:eb:83:77:c0:49:38:
         51:46:53:31:2a:76:33:9d:66:33:bd:8f:22:dc:c8:06:05:99:
         c2:38:c8:27:bd:72:0b:d8:71:71:78:f6:a7:59:42:2a:ea:55:
         62:58:29:32:6a:31:98:1a:88:2a:bf:09:fe:8e:ec:e7:0d:4c:
         66:25:d5:0b:59:0a:59:7d:cd:7e:35:21:58:97:3f:44:ff:1d:
         ba:fe:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:36:24 2026 by rpki-client