Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
File:                     6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json)
Hash identifier:          +2uw0HMjQzehJewXSnTXEIDv4WXlbk0Cj/VE/BiCMdA=
Subject key identifier:   8E:8D:C7:55:AB:93:BF:2B:5C:01:9C:09:D0:E4:2B:FB:8A:CE:80:2D
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Certificate issuer:       /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial:       019D9EC075366C3A08FCD9F3CFFFC1CBD7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
Manifest number:          0352
Signing time:             Sat 18 Apr 2026 04:01:46 +0000
Manifest this update:     Sat 18 Apr 2026 04:01:46 +0000
Manifest next update:     Sun 19 Apr 2026 04:01:46 +0000
Files and hashes:         1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: 4HjJMmkYT4F9tnLNEo5Zt4p7434J2dMhN3ykV2NDbhs=)
                          2: e2Nx3MWYEW91glMqV5TLbQ1S5j4.roa (hash: 1d9GQqvCFQjgc9W5ZDcmpkqgj4oWJ7r7FTu64+cmQXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:c0:75:36:6c:3a:08:fc:d9:f3:cf:ff:c1:cb:d7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
        Validity
            Not Before: Apr 18 04:01:46 2026 GMT
            Not After : Apr 19 04:01:46 2026 GMT
        Subject: CN=8e8dc755ab93bf2b5c019c09d0e42bfb8ace802d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:3a:92:2d:9b:a0:a9:1f:d8:ad:70:bb:ae:
                    70:f0:e5:5c:5c:e9:48:80:2c:6a:07:54:82:ea:33:
                    bf:00:b8:d6:86:02:a5:b1:ad:28:59:2e:44:8d:4e:
                    94:bd:f3:d8:ac:82:76:f2:01:2f:cf:38:4e:0c:0f:
                    d9:e9:79:8a:c1:15:25:92:4d:5a:46:51:d2:13:6a:
                    75:be:db:7b:1c:59:bc:10:33:d0:83:e4:29:5d:d1:
                    98:42:a0:e8:6b:a1:b4:cf:26:d0:da:18:d9:22:ec:
                    bc:ec:04:fa:97:26:77:e5:ae:1e:d3:34:f7:9f:49:
                    41:68:ac:31:6a:28:43:38:36:c1:04:e0:f5:53:20:
                    fe:7d:ea:6f:fa:14:6b:c2:91:0f:a7:84:3e:84:c8:
                    ab:83:40:53:fc:c7:cf:09:1c:62:0f:1f:af:62:f9:
                    a7:84:6b:ff:c7:ef:15:d4:c0:59:5c:7e:73:ea:15:
                    a9:06:16:c3:4b:75:2f:3c:6e:88:d7:92:5b:49:3e:
                    bb:0e:65:84:cb:5b:77:ba:5e:c6:36:c6:01:4b:63:
                    5e:f3:bb:38:ce:e7:9a:d4:40:9d:ab:5d:4b:86:8b:
                    41:79:5a:62:04:e2:2d:61:24:2c:05:26:86:98:09:
                    08:9a:c6:37:3d:9f:6b:10:24:26:46:fe:4d:90:62:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:C7:55:AB:93:BF:2B:5C:01:9C:09:D0:E4:2B:FB:8A:CE:80:2D
            X509v3 Authority Key Identifier:
                keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:62:89:7a:f4:10:af:52:bf:29:2d:41:8d:b2:ee:b6:02:
         80:83:fd:67:4d:6e:57:8b:59:d2:13:bd:f0:0b:b3:16:19:43:
         ee:5c:1f:c4:0d:18:49:43:ef:e5:08:48:a5:50:47:92:6c:92:
         e7:f7:d3:72:60:38:79:ca:50:8e:9d:05:1c:63:3c:d2:94:c8:
         78:52:5e:27:49:8d:08:00:56:a0:bf:e7:60:e9:8c:78:95:02:
         e0:e8:86:67:bd:89:ab:cf:33:37:8e:d9:ea:09:5d:4d:77:ba:
         2c:14:6e:60:a2:94:e6:aa:74:26:6b:79:0f:16:38:d1:e1:0c:
         a9:7b:e9:e2:22:8f:64:5e:c3:40:cc:00:eb:32:c8:7a:b7:33:
         db:cc:cb:37:b5:3c:77:57:89:eb:b0:9e:3c:2c:cb:69:ee:5c:
         3d:99:4f:26:f6:d7:f9:50:93:ec:33:26:91:70:92:6c:2b:cf:
         11:61:bf:09:1e:6a:9f:9f:be:8a:cb:3f:2b:35:a3:f6:35:af:
         68:08:f8:d9:98:52:95:aa:6c:67:3b:74:49:71:2c:bc:d6:c5:
         ae:09:7f:c6:c4:7f:ba:78:30:dc:c6:a2:36:ea:32:85:2e:3e:
         9e:41:b6:51:82:54:d9:88:c7:96:63:0b:d8:45:ca:bd:30:2b:
         4d:f4:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:23:59 2026 by rpki-client