Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File:                     6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier:          fmQU/SGrvvpRptqm/R2eQ8BHkY2MZe7xa1kb9mWAq/w=
Subject key identifier:   72:5C:58:E9:09:3F:98:0A:AB:D2:11:B7:39:33:FB:0A:A5:ED:D6:E1
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer:       /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial:       019D98188FD9D1F07DAAE821B28599F5BECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number:          064D
Signing time:             Thu 16 Apr 2026 21:00:39 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:39 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:39 +0000
Files and hashes:         1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: Rf9wuKpswPcpJN21a0YDi7G5hw27azn0OkBgZEQBe8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:8f:d9:d1:f0:7d:aa:e8:21:b2:85:99:f5:be:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
        Validity
            Not Before: Apr 16 21:00:39 2026 GMT
            Not After : Apr 17 21:00:39 2026 GMT
        Subject: CN=725c58e9093f980aabd211b73933fb0aa5edd6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:1e:69:e4:04:26:46:e1:7d:bd:c5:7e:57:
                    a8:09:b0:f2:59:7a:1c:97:b7:6f:8d:7a:95:c2:70:
                    4e:81:02:8c:3a:a0:a7:2c:09:18:7d:59:fd:40:54:
                    28:d0:0f:99:1f:72:48:ce:d5:17:92:7c:65:8f:cd:
                    65:90:2c:5c:b8:02:a8:e6:06:6e:4c:34:b9:29:a9:
                    87:c1:d1:ba:12:bc:39:1a:90:54:be:8d:15:29:c5:
                    6e:11:9d:a0:24:67:8b:69:00:9d:b9:85:d4:cb:2e:
                    e5:49:37:69:8b:e2:0d:d8:18:04:bc:be:60:4f:44:
                    40:66:a2:9c:17:d8:eb:b4:b2:1b:0e:aa:89:67:9a:
                    25:ae:6b:c8:07:84:27:8b:f8:96:0a:01:d1:d3:40:
                    b2:dd:6e:21:29:4d:53:2b:e0:df:50:3b:84:80:4c:
                    9a:f2:93:53:08:e8:15:bb:0f:23:d2:89:80:11:81:
                    1c:34:4b:a1:ca:c7:45:a5:92:c8:35:bf:5c:0c:a9:
                    ae:2f:fe:3a:59:8a:71:ea:da:0a:b4:89:24:18:8e:
                    ed:0d:3f:cf:ae:58:5d:ff:1f:d4:d1:0f:2c:2a:5e:
                    c1:b6:51:74:5d:9e:90:5b:be:a6:69:97:f6:47:11:
                    d9:56:aa:f7:2c:e4:ba:34:6b:0f:8a:c3:a7:9b:5e:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:58:E9:09:3F:98:0A:AB:D2:11:B7:39:33:FB:0A:A5:ED:D6:E1
            X509v3 Authority Key Identifier:
                keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:bc:da:a2:8f:6e:80:89:2e:20:22:9e:c2:f4:1c:29:bf:17:
         d0:2a:3f:85:37:fd:2d:aa:f6:12:b2:93:2a:04:99:3f:69:7a:
         6e:42:5d:59:90:4c:de:1c:21:b9:2f:b5:32:bd:6c:44:d4:64:
         87:14:af:d5:57:dc:48:69:4b:51:ca:5a:99:de:01:e5:26:34:
         5d:c3:91:d4:cc:94:ff:b0:ea:11:4e:1f:96:e2:42:e1:88:6a:
         e8:11:61:8c:5d:09:6c:3d:05:00:12:4f:04:89:67:16:27:ac:
         2e:a4:dd:b2:20:a6:90:e6:93:b7:ee:a2:27:15:ef:46:75:b9:
         9d:88:5a:c0:d3:07:85:3e:47:ee:f2:02:66:09:70:25:86:b1:
         f7:5e:85:d7:21:01:fa:20:11:f7:b3:65:04:65:b4:9f:e8:12:
         a7:ec:32:46:41:d6:55:c2:8b:a8:0b:bd:2f:dc:b8:d2:ca:15:
         cb:11:29:7c:63:bb:4b:56:52:91:3f:7f:f5:eb:7e:25:95:37:
         20:20:ae:8d:ee:4b:c8:7d:54:09:16:b6:cd:b9:a2:5b:6c:15:
         99:6d:5d:40:8c:98:c5:b4:5f:32:79:a8:a1:b2:20:55:d0:d2:
         12:c8:7d:ef:e7:f6:56:16:77:0c:4f:57:3f:94:b0:21:71:03:
         e6:b7:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:11:10 2026 by rpki-client