Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier:          +JYKd/iftyig2eyzhNP5dxh4LluviD2TZGt1v6K/KkE=
Subject key identifier:   97:98:96:21:43:83:36:D6:A2:AE:52:CA:02:38:3B:F5:D8:6C:2B:B6
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       019D9B875E0FFEE3C9EF0F4904573D133A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number:          1890
Signing time:             Fri 17 Apr 2026 13:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:33 +0000
Files and hashes:         1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: F/+DeDdlQfZecGnzcXkdYaC1cTb5QI+cyUOpjP/OIvo=)
                          2: p1kohFb8KaXP2aXevlAW3obI0Mk.roa (hash: MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:5e:0f:fe:e3:c9:ef:0f:49:04:57:3d:13:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: Apr 17 13:00:33 2026 GMT
            Not After : Apr 18 13:00:33 2026 GMT
        Subject: CN=97989621438336d6a2ae52ca02383bf5d86c2bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:f0:df:52:9c:72:4b:4f:8d:a3:5e:e2:8e:
                    3b:f0:95:e8:8f:61:88:53:ae:c8:4f:f6:11:cf:46:
                    d0:e6:85:00:ca:32:3d:82:e3:25:32:14:db:07:3a:
                    b8:20:b2:20:04:b8:07:03:e6:40:ff:19:12:07:5a:
                    11:de:e1:d7:61:80:47:1e:a9:62:33:1d:b1:ec:9e:
                    aa:99:42:5d:30:ff:e1:bb:26:a2:22:08:f9:5a:06:
                    ea:c8:9e:32:c0:8b:4c:ff:7d:88:60:d9:1d:26:bd:
                    77:ad:22:fc:47:16:9e:ef:fa:38:ae:ec:95:0d:91:
                    f6:82:62:33:bf:ac:a4:35:cb:53:f8:79:db:5b:43:
                    56:90:92:71:50:6d:d4:6d:1e:bf:34:53:b7:ff:1e:
                    0c:f9:ce:ab:2c:6e:30:95:ec:9d:35:93:a7:2b:9d:
                    e6:af:72:60:fe:7c:e3:46:d2:30:79:5c:e2:ea:60:
                    84:76:84:b4:eb:ec:f0:14:3d:2e:87:54:76:eb:25:
                    59:6c:16:67:f1:26:5b:57:b8:ce:57:d6:77:15:4a:
                    96:fe:65:2c:1f:ea:8c:84:72:40:e1:9c:dc:fe:31:
                    2c:c3:8c:ba:8f:00:7b:e3:4c:da:f0:9d:56:3f:e7:
                    74:33:80:5b:c9:cb:85:b2:6c:c9:85:ff:d6:c5:63:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:96:21:43:83:36:D6:A2:AE:52:CA:02:38:3B:F5:D8:6C:2B:B6
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:66:f0:69:35:44:82:28:29:ad:72:71:59:a5:97:fd:46:a0:
         78:e0:dc:f0:74:5c:40:86:90:02:23:2f:85:2a:0f:26:25:91:
         32:66:71:c2:d0:03:e3:4f:22:c4:63:54:07:cc:9d:a8:1e:d6:
         0a:82:f9:be:03:6e:54:ad:2a:eb:13:a5:cb:1e:9a:bb:a6:34:
         a9:6d:4b:2d:2a:1c:9d:7d:e6:24:f9:bd:da:c3:82:d4:28:63:
         ca:51:c1:c6:68:70:d9:3a:e7:ef:2d:78:e3:74:a1:78:59:1f:
         7a:09:88:86:5e:31:5c:b3:61:56:f3:13:24:3a:17:97:3b:fb:
         67:fc:09:2c:8f:5b:a2:6f:28:1c:8d:42:ae:97:76:a7:f5:86:
         6d:2f:ea:34:bd:da:d5:ea:2e:62:6e:f7:2e:60:ba:16:b1:59:
         f0:19:a9:62:08:f4:ca:b1:fc:65:83:b7:93:fe:10:a9:4f:a7:
         37:28:bd:22:f0:34:02:88:b6:49:2d:7a:30:a5:56:46:bd:9d:
         26:0a:d3:25:99:91:fc:71:48:f3:04:84:87:49:6e:8d:ec:e2:
         67:e6:bb:95:9a:e6:c2:80:34:05:6d:29:3f:a9:f4:be:48:16:
         7d:6b:b4:6e:4f:da:87:ea:da:83:88:dc:ad:d9:a4:d6:46:13:
         83:ab:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:31 2026 by rpki-client