Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File:                     6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier:          W9UMT6kplPXqdgLaXgYse4BL/9lxsU2zDRUH3tWKozI=
Subject key identifier:   D4:00:61:30:11:AC:EF:95:3F:58:F1:7B:96:28:96:C9:08:20:45:2B
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer:       /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial:       019DA4F907A85793F35E24B0F8C69BE9E93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number:          03CD
Signing time:             Sun 19 Apr 2026 09:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 09:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 09:01:17 +0000
Files and hashes:         1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: g+yrGSo7hl5Ya+BeSjb9eH9Or5d4C5iYT79nj5QkIYo=)
                          2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f9:07:a8:57:93:f3:5e:24:b0:f8:c6:9b:e9:e9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
        Validity
            Not Before: Apr 19 09:01:17 2026 GMT
            Not After : Apr 20 09:01:17 2026 GMT
        Subject: CN=d400613011acef953f58f17b962896c90820452b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:2f:45:eb:3c:12:26:3b:5a:b9:4d:c7:77:
                    3e:59:9f:8f:a2:2e:61:ee:91:58:df:ec:55:58:91:
                    cf:1d:be:27:49:bf:58:be:9e:bc:66:d1:4b:51:10:
                    05:b2:a6:e6:77:30:8f:1b:b9:5a:b6:a0:e1:e3:43:
                    0b:e9:84:0b:3a:1b:16:55:87:22:01:75:3a:e2:54:
                    a8:ac:7a:28:24:15:9e:9b:62:70:9b:98:09:a4:37:
                    0d:72:57:31:23:bc:b5:0a:2a:7c:33:09:28:aa:bc:
                    7f:cd:2e:f6:b3:15:9b:55:7f:1b:d1:43:bf:17:2d:
                    dc:86:3f:49:2f:03:f4:a2:53:fe:d8:ac:30:e0:26:
                    9d:80:4b:b7:de:2d:6e:d9:d4:05:08:21:be:f1:84:
                    6e:6e:4a:52:de:04:f9:27:2b:8b:c4:fe:28:7d:90:
                    c3:d0:f4:46:e0:11:af:b4:cb:35:ae:cd:1f:a0:ee:
                    5e:46:d5:a6:cd:06:7b:36:da:e6:0d:78:af:fe:e8:
                    7b:14:ef:09:38:29:8e:0b:2b:f2:2a:44:b1:99:65:
                    81:68:d4:a0:fa:1b:19:b9:93:4b:de:1f:b8:10:95:
                    71:ba:14:79:1f:57:ac:56:39:bc:a2:d6:a2:04:ff:
                    a5:8d:8d:2e:af:4e:b7:dc:5b:12:39:fb:d3:cd:e3:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:61:30:11:AC:EF:95:3F:58:F1:7B:96:28:96:C9:08:20:45:2B
            X509v3 Authority Key Identifier:
                keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:33:e7:26:81:70:33:f8:1b:58:f6:1a:59:85:5b:c2:b4:90:
         2d:b5:d1:3a:72:08:20:df:4d:f5:09:02:0a:ca:c2:2f:5d:ef:
         d5:3e:df:53:92:cc:b1:d5:96:18:12:da:6c:92:bc:15:a0:e5:
         f6:88:25:98:6b:0d:0a:56:98:fe:ee:3d:06:bc:f8:26:46:00:
         b0:c2:15:30:ce:ee:12:12:b6:48:55:09:2e:5c:e9:74:9d:7e:
         08:45:20:7b:ee:40:a6:82:72:7c:34:7b:7d:00:b5:4e:1b:62:
         d1:e2:b8:bb:cb:71:af:69:40:7d:a8:3d:b3:a0:62:5f:1b:3e:
         0f:08:85:b4:e8:dc:f3:16:21:f9:20:40:d5:d5:50:c4:31:51:
         90:98:e6:0a:be:1b:2b:e4:fc:ef:28:d1:3f:e0:80:8a:ce:96:
         99:2c:4d:af:97:32:22:1a:b6:27:cf:b6:13:8e:bc:97:cf:75:
         af:fe:65:fd:9d:08:cc:7d:01:c5:c6:39:2f:91:b7:11:39:95:
         c9:cc:72:b8:72:7f:32:71:20:9c:f5:46:04:8d:26:12:bc:07:
         17:5e:03:e9:22:6b:f1:4f:f8:94:fc:08:79:35:66:28:b9:d7:
         03:e0:24:b1:30:a2:0b:2c:37:f8:84:07:b3:74:5f:cb:1b:38:
         93:8c:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:31 2026 by rpki-client