Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          uCIpuwQA3QR39jqe6iQBYicKrFGcv5E5aD+xDNy2pbo=
Subject key identifier:   F4:B7:63:1C:98:92:FD:DE:99:E2:E6:78:AF:D2:49:A3:9B:CC:58:EC
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       019D9A07083A7DCE157B560130E0F5204A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          06F9
Signing time:             Fri 17 Apr 2026 06:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:45 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: kay8J/FCN6SRCfdHg8SAiHLq8iG693dApzlZbVhzMss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:08:3a:7d:ce:15:7b:56:01:30:e0:f5:20:4a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: Apr 17 06:00:45 2026 GMT
            Not After : Apr 18 06:00:45 2026 GMT
        Subject: CN=f4b7631c9892fdde99e2e678afd249a39bcc58ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:81:18:9b:64:2e:27:fb:1f:1c:c7:69:29:
                    ad:48:4e:11:5c:25:21:2c:e9:85:9a:9b:d1:e3:a8:
                    0c:be:81:14:7f:59:68:de:e7:15:cd:cc:e4:14:b2:
                    34:06:71:f6:e3:63:a6:1d:a3:ae:dc:29:8f:9e:75:
                    7b:44:22:3e:b8:27:df:a5:31:cb:b1:e6:fd:66:b6:
                    02:e1:5c:49:9f:f9:f6:e0:6d:ed:ea:88:ab:df:f9:
                    9a:74:ba:1d:95:5f:b1:f1:0a:e6:04:f4:0c:10:b7:
                    6a:ee:92:5c:1d:ce:33:78:15:65:9c:54:b8:36:97:
                    54:32:09:96:c3:9a:07:32:f1:cf:77:f6:f6:c0:bc:
                    82:10:14:8d:1c:77:29:52:89:54:95:7a:ba:18:94:
                    fd:38:32:52:bc:a2:ac:9a:7e:20:85:f6:8e:9e:d9:
                    43:aa:b1:a4:86:d9:8f:d0:58:32:9e:c6:77:13:9b:
                    3f:0e:2e:8a:3d:1a:3e:33:0f:8e:a9:04:ac:f8:ac:
                    e3:7c:12:f6:a7:a8:f5:9f:56:8e:d6:23:c4:48:37:
                    0c:f3:7c:d1:70:e0:6f:d5:39:bb:71:b2:1a:a3:51:
                    8e:7b:30:2b:4d:28:f8:bc:97:ef:e8:88:ba:40:09:
                    93:d1:d4:f4:80:02:8e:40:b5:f5:5e:8a:e5:16:77:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B7:63:1C:98:92:FD:DE:99:E2:E6:78:AF:D2:49:A3:9B:CC:58:EC
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:32:8a:10:ca:ec:e4:8a:12:0f:70:2f:ac:30:09:a6:21:
         b8:3b:1d:cf:4d:60:41:fd:c9:c5:70:af:75:de:35:49:08:72:
         11:36:bb:03:c5:7e:8b:13:b0:d8:6d:bc:48:9b:98:ee:4e:28:
         1f:ea:6f:99:1d:bf:c2:75:97:24:78:50:80:aa:95:41:48:0d:
         4f:13:78:bf:60:16:26:87:99:f7:c6:26:74:71:65:57:f5:b7:
         ee:96:85:53:1f:1d:b6:2c:93:d8:2b:75:15:6a:d5:cd:6c:04:
         e2:68:c0:59:ea:b2:7b:31:b5:7c:6d:de:f6:e7:e7:be:c4:b0:
         75:45:4b:4e:56:36:3f:87:d7:7b:75:7a:ac:43:44:0b:04:a2:
         69:66:5c:d0:a7:d4:00:d3:c4:a9:a6:65:db:bf:1f:59:33:ed:
         70:30:3a:26:0b:7b:bc:de:7a:ee:6d:b6:fb:34:74:73:c6:af:
         35:55:ad:78:9d:5f:b3:63:b3:f4:3f:c4:b7:2a:7b:00:56:c8:
         fe:57:c4:f2:0d:1b:7e:ae:44:a2:d2:40:aa:fc:50:83:bd:57:
         54:9a:7a:86:e6:cf:e6:64:ad:17:60:f5:51:74:6d:56:9d:24:
         de:60:88:97:dc:d8:ca:cd:12:a0:fa:10:6b:0c:a5:f5:84:9a:
         d3:18:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:54 2026 by rpki-client