Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          kewfGNBWCa7SoYaFCyt1re9LOK3R1tL+jd7ZQZKCefo=
Subject key identifier:   71:30:45:C6:D6:BC:8F:1F:B7:8C:57:D6:97:E2:D7:6E:BE:35:BE:36
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       019DA3E6DD653134153382268EA31FC48478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          15D0
Signing time:             Sun 19 Apr 2026 04:01:49 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:49 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:49 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: jKkcDeKZ93K5ZMOLg0rOYMEAISwiUfIbDHrlL4GQeic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:dd:65:31:34:15:33:82:26:8e:a3:1f:c4:84:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: Apr 19 04:01:49 2026 GMT
            Not After : Apr 20 04:01:49 2026 GMT
        Subject: CN=713045c6d6bc8f1fb78c57d697e2d76ebe35be36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:c3:6d:33:5f:21:8f:e8:83:80:36:5a:49:
                    a8:4f:5f:0b:54:22:8d:8d:5c:79:4d:c6:86:49:bd:
                    b6:48:35:3c:77:29:e0:38:52:9d:46:0c:07:83:5a:
                    dc:bd:8f:ca:79:d7:9f:1c:f1:7d:28:cb:c0:7b:a2:
                    74:38:93:d0:6c:97:85:d3:18:3e:9b:fb:6e:32:67:
                    6b:96:d6:ca:0e:87:10:5f:e1:23:a9:df:0b:71:86:
                    b6:57:5a:57:47:a8:e5:e7:06:bb:c5:32:8e:fa:83:
                    ef:18:5c:3f:e6:54:7b:52:d2:15:7b:85:8e:d8:b7:
                    3e:99:a7:eb:d6:56:1c:1d:a5:92:d9:a5:f3:16:6a:
                    bc:f5:5f:43:e1:bf:74:f8:10:d6:61:ef:bb:13:f2:
                    e4:ba:d5:0b:9e:8d:7b:9a:c6:f1:f8:0f:ff:65:11:
                    39:a7:ca:ce:3d:c1:97:1c:29:36:e6:03:57:a9:cd:
                    56:1c:cb:64:63:4c:f9:be:72:4c:47:2a:76:6f:c9:
                    22:a3:a3:64:92:6d:4f:c9:81:92:76:ce:9b:78:28:
                    a5:f1:35:6e:7e:74:b6:d5:59:2a:24:fc:d0:c3:c1:
                    fb:d3:24:b4:ff:12:1b:01:35:08:1e:5e:bd:68:d2:
                    4c:4d:1c:4b:db:da:5f:6d:63:70:08:20:d1:71:c6:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:45:C6:D6:BC:8F:1F:B7:8C:57:D6:97:E2:D7:6E:BE:35:BE:36
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:1b:21:c0:b7:20:6f:38:a1:39:5e:5a:18:08:b6:2a:21:
         a2:25:64:64:af:3c:6d:19:ba:38:fa:2a:30:66:63:33:9e:23:
         50:17:b6:eb:67:5d:5d:80:90:23:bc:0d:0e:bb:77:8a:47:6c:
         dc:4c:44:d3:fb:78:72:dd:04:55:68:6b:05:48:59:39:c2:91:
         ec:db:a8:26:3c:c7:6b:ce:82:53:fc:73:be:af:2a:fa:0c:0c:
         cb:71:54:43:94:bb:28:f5:b0:64:6b:72:d4:ea:fc:d9:ca:34:
         e0:75:14:eb:81:00:86:aa:49:32:28:c8:db:b7:03:b3:86:2d:
         10:2d:86:c8:e5:7b:fd:ae:ac:f4:38:f5:81:d3:34:4c:d3:c0:
         ef:23:53:76:88:36:38:b0:23:97:76:f0:a5:2b:ac:02:3a:cd:
         a8:b8:70:8f:bf:99:c5:37:c8:e9:3e:8d:7c:30:87:58:9f:d3:
         2c:4c:1b:96:1b:f8:e7:f2:1b:28:cb:bd:9a:90:16:df:f4:4f:
         df:3a:f1:b5:92:38:f6:f5:46:18:14:36:ee:49:a3:85:2f:b5:
         95:59:2a:31:78:eb:a6:9f:21:21:0e:b3:04:15:79:66:f5:97:
         75:40:ed:dc:61:6a:2e:79:ed:fc:bc:75:54:50:74:5e:a7:3a:
         21:ed:a6:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5t1lMTQVM4ImjqMfxIR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTJkMjNjM2Q3NGUyMzdkZTRlMzFmNzEyZTQxNGI1ZDRl
ZjVjODYwHhcNMjYwNDE5MDQwMTQ5WhcNMjYwNDIwMDQwMTQ5WjAzMTEwLwYDVQQD
Eyg3MTMwNDVjNmQ2YmM4ZjFmYjc4YzU3ZDY5N2UyZDc2ZWJlMzViZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mLDbTNfIY/og4A2WkmoT18LVCKN
jVx5TcaGSb22SDU8dyngOFKdRgwHg1rcvY/KedefHPF9KMvAe6J0OJPQbJeF0xg+
m/tuMmdrltbKDocQX+Ejqd8LcYa2V1pXR6jl5wa7xTKO+oPvGFw/5lR7UtIVe4WO
2Lc+mafr1lYcHaWS2aXzFmq89V9D4b90+BDWYe+7E/LkutULno17msbx+A//ZRE5
p8rOPcGXHCk25gNXqc1WHMtkY0z5vnJMRyp2b8kio6Nkkm1PyYGSds6beCil8TVu
fnS21VkqJPzQw8H70yS0/xIbATUIHl69aNJMTRxL29pfbWNwCCDRccZCSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEwRcbWvI8ft4xX1pfi126+Nb42MB8GA1UdIwQY
MBaAFOii0jw9dOI33k4x9xLkFLXU71yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktMU1BEMTA0amZlVGpIM0V1UVV0ZFR2WElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMDY2MzItY2E1YS00MjlkLTlhZDQt
ODFjYzkwODI2ZThlLzEvNktMU1BEMTA0amZlVGpIM0V1UVV0ZFR2WElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMDY2MzItY2E1YS00MjlkLTlhZDQtODFjYzkwODI2ZThl
LzEvNktMU1BEMTA0amZlVGpIM0V1UVV0ZFR2WElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLsbIcC3
IG84oTleWhgItiohoiVkZK88bRm6OPoqMGZjM54jUBe262ddXYCQI7wNDrt3ikds
3ExE0/t4ct0EVWhrBUhZOcKR7NuoJjzHa86CU/xzvq8q+gwMy3FUQ5S7KPWwZGty
1Or82co04HUU64EAhqpJMijI27cDs4YtEC2GyOV7/a6s9Dj1gdM0TNPA7yNTdog2
OLAjl3bwpSusAjrNqLhwj7+ZxTfI6T6NfDCHWJ/TLEwblhv45/IbKMu9mpAW3/RP
3zrxtZI49vVGGBQ27kmjhS+1lVkqMXjrpp8hIQ6zBBV5ZvWXdUDt3GFqLnnt/Lx1
VFB0Xqc6Ie2mFA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:48 2026 by rpki-client