Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
File:                     6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json)
Hash identifier:          2fzrHl/IgQxqNipyT37KkUta3ISZyQEgD6FPSHRb5Gw=
Subject key identifier:   29:B6:37:89:67:E3:91:34:3E:CF:A2:CA:DB:29:5A:0E:3E:52:A3:A9
Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
Certificate issuer:       /CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Certificate serial:       019D9E1B38DF0443718282DEED1AE1688656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
Manifest number:          0210
Signing time:             Sat 18 Apr 2026 01:01:17 +0000
Manifest this update:     Sat 18 Apr 2026 01:01:17 +0000
Manifest next update:     Sun 19 Apr 2026 01:01:17 +0000
Files and hashes:         1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: ROlkqVHc6WKDTwPoe2XRh/lvfHGDCwkZG8IB8VRrzKk=)
                          2: TCYoAFJaTqATlFl0u6eQAyMZXJ8.asa (hash: v+oV8YQrF1EVh7SFPiMT8Uf4NtlNNpd/LZU5zlH6PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1b:38:df:04:43:71:82:82:de:ed:1a:e1:68:86:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6
        Validity
            Not Before: Apr 18 01:01:17 2026 GMT
            Not After : Apr 19 01:01:17 2026 GMT
        Subject: CN=29b6378967e391343ecfa2cadb295a0e3e52a3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:c7:48:ba:9c:8e:d8:f1:e7:26:44:2b:3a:
                    39:5c:87:60:6d:e7:8d:17:65:f3:63:9e:66:45:27:
                    84:05:f9:4e:07:0a:3f:1c:1c:38:b3:ee:d8:51:50:
                    22:49:ea:89:6a:06:b4:c1:9a:97:85:85:9a:c7:3d:
                    72:c9:99:fd:ea:b9:3e:c1:13:3b:c7:dc:fa:99:08:
                    94:80:aa:20:51:8d:28:4c:c5:70:b5:37:72:2a:97:
                    7f:33:2b:1c:ca:9e:1a:39:fa:c6:68:01:6e:23:d2:
                    8f:25:e0:53:72:33:eb:d0:d3:b5:d4:7b:cc:59:20:
                    55:62:de:70:98:5c:b1:44:cf:da:7a:d7:5b:8d:ad:
                    9f:26:ad:1c:6c:0c:7a:77:64:2c:82:f5:e9:41:51:
                    e5:57:fa:75:f9:b8:e8:27:d6:8f:56:8a:35:f4:a3:
                    13:c7:71:ef:9c:5a:95:81:55:cc:3e:a6:c3:95:48:
                    0b:c6:15:9d:d2:94:8e:f4:6d:f9:f8:8a:56:6a:b7:
                    08:4f:ff:6f:47:d8:0d:97:af:24:b6:54:5a:c2:b1:
                    95:d8:0e:06:d0:a8:8c:6d:73:21:e1:21:90:f2:93:
                    f7:42:43:61:2b:38:e9:a4:f6:0a:79:ec:79:c0:fc:
                    40:ff:e5:e1:3d:7b:1f:c9:30:c8:d8:87:b7:5e:d1:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B6:37:89:67:E3:91:34:3E:CF:A2:CA:DB:29:5A:0E:3E:52:A3:A9
            X509v3 Authority Key Identifier:
                keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:81:51:bc:38:01:2a:e1:7c:a1:49:1a:5f:bf:01:40:cf:
         9c:18:80:4e:e1:15:c9:e8:1c:49:7d:5f:70:21:9e:73:c4:63:
         a9:ab:55:19:b5:d3:5f:30:d5:f5:a0:e7:3d:56:58:bd:1f:84:
         02:0f:59:75:2c:8d:a2:c2:4b:87:d4:cf:fd:04:d9:0d:47:53:
         4f:7f:6b:89:52:fc:6b:0a:3d:54:f0:90:70:f5:39:f7:7b:82:
         6b:44:bd:8a:8b:b0:14:2f:29:ee:a1:1a:f8:6b:50:fa:6a:b4:
         60:e4:a1:65:df:0f:15:35:ce:f3:87:11:01:17:59:0b:53:29:
         20:a1:a3:99:f8:f2:8a:2d:ca:e5:12:24:e5:d9:85:6a:3b:8b:
         cf:d7:08:01:a5:3a:3f:d7:6d:72:c7:1c:e6:8b:47:58:ad:9e:
         1f:07:cd:0b:f8:e2:30:40:eb:cd:7c:44:33:32:fc:62:a7:64:
         c2:0b:30:2b:75:c4:1e:8d:43:01:c0:79:64:20:f8:e0:d1:4e:
         ba:41:7b:db:46:51:be:b9:98:f3:ff:60:13:c4:7a:ca:7d:72:
         2c:05:50:6d:fb:73:a7:9d:bf:aa:ea:6d:41:e4:c1:c6:46:8e:
         a5:8a:c9:d2:05:41:b4:33:7b:c1:6c:b9:8b:a4:dd:93:7f:ad:
         25:08:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:28 2026 by rpki-client