Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          DKcFWFm6N94s4nNHPcikVQJRxaTvfvnHpMH7HjldLrQ=
Subject key identifier:   4F:C8:E4:A0:5C:DA:61:0E:63:A8:8F:0F:6B:D8:69:19:EA:33:6E:2D
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019D98BD2C60BF27D958D7291C4B0F81F86C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          14D6
Signing time:             Fri 17 Apr 2026 00:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:27 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: 5G+J+ngzFOG1jVk85xx1fFq686ZkZfCXWz9gQCW0foA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:2c:60:bf:27:d9:58:d7:29:1c:4b:0f:81:f8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Apr 17 00:00:27 2026 GMT
            Not After : Apr 18 00:00:27 2026 GMT
        Subject: CN=4fc8e4a05cda610e63a88f0f6bd86919ea336e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:54:c7:59:f2:fa:89:15:9b:52:1e:8e:bd:
                    38:fd:38:9d:f3:cb:13:47:85:1f:19:e5:e8:31:1f:
                    29:8f:14:5c:ea:6b:75:ae:fb:e9:a9:03:c6:a4:a6:
                    65:13:3c:90:c1:7b:58:1d:5f:17:6d:e8:d1:4a:ff:
                    1d:85:ab:95:e5:43:7c:fa:4a:97:fc:63:ce:e8:f5:
                    be:03:09:5e:6a:fd:2c:f7:6e:6e:07:24:13:45:1e:
                    71:92:ee:94:93:62:37:f3:f8:36:76:e7:2f:6d:d2:
                    ad:ce:b3:bd:e8:a6:99:34:e1:a9:76:5f:d2:8d:b5:
                    73:2a:97:99:e4:fd:f6:6a:b3:b2:ae:0f:2b:54:19:
                    4c:55:b3:84:f4:e9:71:4a:72:f6:6f:21:93:20:11:
                    85:25:fa:e6:fb:77:a2:88:fb:3e:2f:20:19:83:6e:
                    7f:35:7d:d7:90:f5:4a:87:38:e9:84:6a:ba:a2:9e:
                    9b:06:62:b1:93:2d:e1:e9:a4:f0:57:f2:47:97:90:
                    b4:f0:72:3f:65:77:e0:57:8b:46:93:13:01:64:a8:
                    c8:c9:3e:70:d0:b1:17:aa:15:fe:72:db:8d:d0:da:
                    d7:76:de:cf:1f:b6:b5:70:9a:96:0a:c4:d8:49:35:
                    e1:75:f7:7e:bd:ab:25:27:4d:f3:5f:e4:61:5d:08:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C8:E4:A0:5C:DA:61:0E:63:A8:8F:0F:6B:D8:69:19:EA:33:6E:2D
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6a:d6:49:ba:dc:b9:45:af:66:7d:d8:fa:ed:2e:ab:48:3d:
         c6:a8:dc:3f:4f:42:44:f4:10:8c:ca:c5:c0:8a:09:c3:2a:63:
         7e:e7:2e:77:16:c7:c4:e2:60:81:68:67:1b:c3:32:52:96:8b:
         ca:bf:b4:e3:e1:9a:a8:82:3f:60:fb:9f:dc:7a:29:2d:4d:86:
         9d:29:a3:00:a6:53:5d:92:6c:55:40:09:b0:f9:7e:2c:17:bb:
         c6:e7:42:58:f1:c3:59:d0:c8:54:45:df:5e:df:57:06:a0:6d:
         ab:92:6b:66:48:59:b2:1a:e9:9e:d5:67:23:7f:2c:54:4a:50:
         12:9c:73:0a:22:82:71:94:33:30:d9:9a:92:b0:59:e4:21:ac:
         97:bd:68:49:8e:75:f9:11:03:38:68:97:f5:0e:89:ba:6b:73:
         3a:c7:98:fb:ee:2a:c3:1e:7d:3d:d0:62:5b:1e:6d:44:68:00:
         fd:37:81:bb:11:d0:13:ca:38:46:bc:4c:2f:df:25:fb:f8:13:
         e2:b4:17:50:9a:95:f1:13:5a:5e:59:2b:9b:0b:dd:70:f5:6b:
         cd:38:f7:1f:e8:63:d2:5e:a2:37:4f:ae:c1:9b:1d:6a:87:92:
         17:51:4a:14:c6:84:b7:ea:37:e4:02:9d:b7:8f:e5:68:29:d5:
         e8:2d:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:27 2026 by rpki-client