Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File:                     mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier:          g6vw3y08rOk6qugVelBu03g5yYu6G9L2aV5TryLWy/M=
Subject key identifier:   6E:19:83:EC:6A:0E:A7:90:19:24:50:3A:1A:E6:ED:81:13:8F:53:F0
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer:       /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial:       019D9CD0C5FFFAB1E0C75D57B11EC856FC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number:          B3
Signing time:             Fri 17 Apr 2026 19:00:20 +0000
Manifest this update:     Fri 17 Apr 2026 19:00:20 +0000
Manifest next update:     Sat 18 Apr 2026 19:00:20 +0000
Files and hashes:         1: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: dtjaLl8mCMAM8ygl5ZHAPRoRW9IDark8ErIlZeie/QA=)
                          2: vQIQ0hujisLLaE0FdKyN-US-jgc.roa (hash: HcBf/lSh/0W+uCeeNUF1qjopHzD07ezacPSk6j+nXRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d0:c5:ff:fa:b1:e0:c7:5d:57:b1:1e:c8:56:fc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
        Validity
            Not Before: Apr 17 19:00:20 2026 GMT
            Not After : Apr 18 19:00:20 2026 GMT
        Subject: CN=6e1983ec6a0ea7901924503a1ae6ed81138f53f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:58:fa:15:d5:61:66:7b:66:81:4a:45:58:cf:
                    d2:24:2b:1e:b7:19:49:82:31:55:5f:28:b5:4c:3a:
                    39:6c:5d:16:94:0a:22:9b:4e:1c:62:7c:34:f3:f1:
                    39:fd:8d:00:8f:b4:96:2f:40:29:5a:ed:77:1b:f1:
                    5f:e2:7e:83:61:b3:67:64:ae:70:93:a0:dd:69:78:
                    83:1e:92:fe:82:bc:2f:31:d6:d3:45:11:41:ad:e7:
                    5f:50:b9:51:e4:4e:fd:14:03:66:95:9b:9a:2e:88:
                    6a:c3:fc:19:f9:6e:2a:c0:8a:ba:bc:2b:45:72:db:
                    12:89:63:8a:3a:42:2c:8d:8e:8f:df:a3:c5:3f:a6:
                    c4:3f:98:91:ac:32:4e:c5:4f:eb:1d:80:df:f3:31:
                    20:8c:61:86:cd:eb:9c:5c:ab:45:5a:27:0d:70:75:
                    ed:11:20:c0:67:1c:51:ce:45:d1:5a:a8:f4:8e:44:
                    a1:b5:cf:a8:d4:66:83:aa:0c:f1:1c:7d:00:3a:d1:
                    74:5f:5c:d6:2a:39:7b:b7:12:b1:a3:5b:6b:83:b7:
                    82:99:f5:b6:33:bd:8c:79:34:bf:cb:01:f4:e9:ac:
                    62:ae:70:ef:81:5d:6b:6c:ce:ec:31:d2:ba:61:50:
                    6b:35:01:ee:0a:4a:e9:57:0b:7f:22:8a:01:39:7f:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:83:EC:6A:0E:A7:90:19:24:50:3A:1A:E6:ED:81:13:8F:53:F0
            X509v3 Authority Key Identifier:
                keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:81:51:75:b7:3a:9b:0f:2d:28:86:6e:2f:34:84:4c:3d:8b:
         85:9f:d2:8a:45:df:9b:e1:78:d8:c8:ba:7c:ff:07:ec:4f:3b:
         96:ef:54:95:d1:12:c7:bc:30:f2:fc:40:b7:92:b4:99:e2:e9:
         40:16:94:79:67:45:87:f1:c5:1a:48:ab:82:d3:56:47:4c:44:
         8f:1e:be:ce:53:d1:3d:b3:cd:70:4b:b9:c8:0e:a8:81:06:be:
         2c:2c:50:5d:72:69:53:ea:ed:af:97:5e:71:53:13:45:31:ce:
         ea:e2:d3:f9:79:93:6f:8c:be:6e:a3:f1:7e:94:07:db:7f:f1:
         8b:7c:98:2e:4f:8e:fa:06:12:96:12:c6:ab:09:a9:1a:88:4c:
         fb:58:e7:5b:51:06:e7:dd:71:81:41:02:e3:d5:f2:89:04:31:
         7c:68:b1:d6:3a:45:d6:94:cb:59:64:a6:88:00:d9:11:67:78:
         86:2f:55:59:d1:ec:5a:10:9e:2f:82:45:e6:63:88:8f:aa:fa:
         3b:9e:e5:05:b3:03:cc:ca:ca:fa:48:97:0a:36:11:12:b9:68:
         cd:05:f0:1c:a2:49:a4:9b:27:6d:81:52:bb:64:3c:e5:62:bd:
         93:c5:c1:e3:8a:89:cc:5d:d8:43:c2:37:8a:f5:37:4b:77:0f:
         d7:73:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:25 2026 by rpki-client