Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
File:                     6E31KvRgym-oySOkn1y3lepnB_c.mft (raw, json)
Hash identifier:          w5dCC0epm9q16mUZHsVbXU7dkLimuFyaJIY6wlGzHRg=
Subject key identifier:   DE:BE:75:DD:24:AA:8E:24:6F:4D:EA:65:30:9E:3D:82:8D:F5:24:3B
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       019D9AAC4AF8E605F6B5C133835925244C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
Manifest number:          0B68
Signing time:             Fri 17 Apr 2026 09:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:15 +0000
Files and hashes:         1: 6E31KvRgym-oySOkn1y3lepnB_c.crl (hash: Yi+68BN4TCtLXM+0sede58zCKm6v0rfB5voIlB8QkZM=)
                          2: Gelmt2dyq_XN8YdpKEuPQmN09eA.roa (hash: +DBE2rKsQVPzu0RclwrvCMPoUnuvCaTotWIVnHuK8zc=)
                          3: IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa (hash: AWvg3wl7fzu5i9djaKK4h6Y9sJ9Pr3WgdeDcYIz8ktg=)
                          4: USS4jDeuYyGXL2mwppDmvGGOpAI.roa (hash: 9+rfYSUljt29cuBfSL9LJuPSvB6IhVB21HVxTpdamQk=)
                          5: Yai7LBvRMViiUdeaDjDEDgA3LYU.roa (hash: d6mnraAJOyvr/ycKXQOhXrvBnydjo1H9ixxvEDF+5WU=)
                          6: jSr68ezMymtW56scD11bOLeYI28.roa (hash: xsIbi8zBStn7hsbtROXJNUEF3PIRInOiPGWrPR7zVJ0=)
                          7: kG9o92WtxtdlslnK36VPn0SNf1M.roa (hash: OXeUCoUsqDWHvih8GRMeRQbUwh35avks5fVUQM/vjSE=)
                          8: m3YOl3KcHPw0jUGNX-PfWukNeHg.roa (hash: +MhGdxnaLuhxZ2eCGlUOStLfg0KmoTa8/jNIH8bkEKg=)
                          9: s931y6R-0zlx2ez42IiM1gBgTIo.roa (hash: RTrkv7ongNF6gWxBGWrH9pDs7qZjN5vjg1SAtV6G9Y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:4a:f8:e6:05:f6:b5:c1:33:83:59:25:24:4c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Apr 17 09:01:15 2026 GMT
            Not After : Apr 18 09:01:15 2026 GMT
        Subject: CN=debe75dd24aa8e246f4dea65309e3d828df5243b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:a0:97:1f:85:ca:7b:42:f5:a5:15:4e:64:
                    89:37:18:a0:6f:e7:d2:dd:e4:33:81:df:d7:2f:c5:
                    db:08:08:78:58:36:b9:00:a2:0c:65:4d:bf:25:5c:
                    18:4e:58:44:f8:5d:63:38:f5:2a:19:cb:13:25:a2:
                    47:a0:33:bd:5f:68:ee:09:57:98:aa:0b:90:ec:92:
                    93:23:e6:49:26:9d:da:94:bb:39:6e:72:8c:93:a8:
                    c9:07:78:2f:b5:e7:78:7b:3c:57:8f:19:83:48:46:
                    27:5d:f4:f4:15:31:57:f0:00:18:e1:f3:04:83:83:
                    ce:b4:8f:70:bd:d3:2a:ee:41:fc:0e:e2:f0:8e:f6:
                    5f:90:62:91:c6:f4:34:9b:3e:cc:8c:2a:89:7b:5a:
                    1d:ec:22:03:d4:72:d7:81:2b:53:3a:41:a7:9e:5d:
                    70:bb:be:e7:04:d9:18:de:00:80:29:6c:dd:34:19:
                    24:c2:60:e8:bd:8d:bd:08:79:84:ff:ff:a3:bd:f1:
                    55:e6:5b:3b:89:e8:52:a6:0c:25:eb:e6:f4:51:a2:
                    75:d5:2d:bf:ed:21:60:31:83:a8:22:49:68:b1:30:
                    4d:5f:a1:72:73:ff:06:f5:d0:de:ba:24:0e:e1:ea:
                    44:6e:61:eb:f6:7a:94:ef:6e:69:f9:32:2b:09:2e:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:75:DD:24:AA:8E:24:6F:4D:EA:65:30:9E:3D:82:8D:F5:24:3B
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:72:f0:1f:7a:d0:52:e2:21:28:d9:a0:46:3d:97:08:1a:5a:
         3c:b7:c0:49:1b:70:ef:4b:92:50:d2:ea:23:c6:6f:7b:b6:b7:
         a8:c1:79:29:25:69:d3:ed:a0:76:e9:09:16:b7:a5:52:f4:6e:
         e4:0b:fc:60:0f:ea:5b:98:f9:25:19:a7:f5:8c:b2:5e:d4:01:
         0e:a2:16:b1:5d:4e:35:23:90:b1:27:03:76:36:35:5e:1c:34:
         9c:6b:e3:60:11:cd:c8:ec:d2:87:a9:13:ef:ba:82:2c:ba:24:
         62:6e:8c:eb:1d:cf:43:87:a9:8e:cb:f0:d4:c7:e1:a3:54:15:
         c9:3f:e5:0b:d7:f7:89:60:a7:74:b2:1a:ae:ab:e5:a4:4f:0b:
         90:19:2c:0a:fe:f4:04:b3:e1:f2:1f:08:9b:50:e8:d7:50:02:
         6c:07:4a:5e:e8:cd:77:20:ba:59:8e:c7:02:7d:56:56:b1:cf:
         f4:92:40:68:af:25:4d:9b:7f:b3:6d:cc:55:68:9b:0e:38:32:
         d2:a0:70:5b:40:43:7e:64:a2:28:d9:3b:eb:0c:8b:66:ec:9f:
         24:3e:03:93:ca:2d:7d:2b:81:6c:7e:25:bd:c0:70:ee:96:c8:
         62:ed:5d:cc:d3:b5:48:d3:d4:eb:3f:42:68:5b:99:69:79:a0:
         ae:44:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:55 2026 by rpki-client