Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          fHrLQfTDkOdxTkerAQ4Xkn/4FWxEUMB6m8pkRK9cQNA=
Subject key identifier:   FC:56:E3:FE:11:E0:62:0A:58:7F:9F:6C:AB:F6:25:5E:41:9D:55:23
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       019D9C2CC94724A07359A5389F9BC3AB92DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          0616
Signing time:             Fri 17 Apr 2026 16:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:13 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: Jdl2TEY8Igp6TB/9nkZGDuLzXNGqm271nILkIhsH6IM=)
                          2: oGx7JfYX53D__g9_5hLujNutUzE.roa (hash: lRBSZN0vcGbFXwTasrFrwyAWF1DzSBb5tPanlgAqXJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:c9:47:24:a0:73:59:a5:38:9f:9b:c3:ab:92:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Apr 17 16:01:13 2026 GMT
            Not After : Apr 18 16:01:13 2026 GMT
        Subject: CN=fc56e3fe11e0620a587f9f6cabf6255e419d5523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:08:46:0a:8f:af:84:4c:ef:e4:13:0a:da:
                    7a:d0:56:b0:2e:38:bb:d0:8d:06:2d:19:eb:47:21:
                    58:3a:1f:95:c8:53:2f:c1:e8:ad:8b:21:d3:9a:a8:
                    e3:c5:7e:95:5e:cc:73:2c:9c:69:d7:81:13:62:90:
                    11:8a:6b:f7:a9:40:ea:24:53:84:f1:0b:8d:34:e9:
                    1d:01:e9:73:4f:45:26:a1:b9:8a:4a:1a:8d:86:1f:
                    fc:ba:76:a8:70:35:17:6e:6e:1e:70:64:79:1e:01:
                    f4:e7:1c:f5:70:77:91:94:36:6b:35:1f:4b:be:ba:
                    9c:5e:08:d4:a8:76:d2:fe:cc:c7:25:8b:45:52:0d:
                    89:f3:a0:40:d5:ee:9b:77:01:db:9d:56:36:e7:a7:
                    72:22:6b:e1:fd:31:4f:d4:05:1d:46:fb:ce:6d:c5:
                    cf:24:d6:6f:83:b9:72:d5:46:a7:11:bf:2d:c3:7d:
                    8d:95:54:a1:91:0a:90:5b:02:2c:5c:30:af:db:57:
                    90:26:18:5e:e0:be:c3:d0:1d:0a:39:49:9f:cb:f2:
                    a0:a7:5a:06:92:ab:ce:44:a9:d9:74:50:d4:a2:39:
                    c7:e5:48:83:44:13:17:f5:f1:c7:35:97:35:45:f6:
                    71:e9:6c:43:7c:97:cd:0d:d4:81:9a:54:7e:0b:2b:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:E3:FE:11:E0:62:0A:58:7F:9F:6C:AB:F6:25:5E:41:9D:55:23
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:c8:b8:44:33:8b:12:7e:0f:67:f5:96:2e:73:e8:b8:c2:
         d7:b9:28:a9:7d:0f:8f:b3:32:7e:35:fc:15:dd:61:7d:d2:70:
         28:58:f0:f0:21:38:c5:96:18:f5:b6:5e:b2:60:82:bf:8d:f3:
         73:90:2d:85:e8:23:bd:56:60:bd:62:91:a9:c2:81:a7:90:d2:
         39:bc:b8:47:2d:cb:ce:cc:23:01:f1:4f:fb:44:5b:6e:9f:79:
         95:ae:6c:3c:f5:45:e3:11:de:be:34:22:62:44:a4:aa:e0:b0:
         c9:3a:b2:d1:5f:85:3e:47:78:61:f5:77:87:74:b2:8d:32:9b:
         9c:77:4c:5b:24:e9:22:30:89:4d:ff:13:d6:e7:a1:97:b4:ad:
         20:77:88:2e:76:b7:82:5c:4d:4c:ae:c3:c0:a0:2c:77:89:96:
         b1:37:70:cd:b6:c1:67:82:fb:08:27:80:69:ef:ac:96:69:3c:
         d3:ee:3d:b1:c1:27:ba:2b:41:d9:1e:ae:db:a2:f0:0f:7c:9e:
         2a:d3:a7:42:af:89:f8:cd:70:9a:b2:70:9b:7f:7c:00:3b:b4:
         78:40:01:d0:48:1b:a4:e9:f3:a6:76:dc:7f:d4:af:7c:20:45:
         f6:b9:b1:02:58:32:0c:f9:83:cf:10:2f:37:ad:e2:7f:42:24:
         17:b7:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:41 2026 by rpki-client