Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
File:                     6vl4jJlRMNcOrEbAayJmctJdQYU.mft (raw, json)
Hash identifier:          tzahFXCkZ4q4oDkOYorosgylOdAmv6m6hdS7dzHXXWw=
Subject key identifier:   4A:89:19:D4:22:F5:52:D3:E9:BA:34:F0:85:20:55:52:A7:38:ED:62
Authority key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85
Certificate issuer:       /CN=eaf9788c995130d70eac46c06b226672d25d4185
Certificate serial:       019DA189F9EF07A2D0A91EF3FF3983B8057B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
Manifest number:          0E0D
Signing time:             Sat 18 Apr 2026 17:01:07 +0000
Manifest this update:     Sat 18 Apr 2026 17:01:07 +0000
Manifest next update:     Sun 19 Apr 2026 17:01:07 +0000
Files and hashes:         1: 6vl4jJlRMNcOrEbAayJmctJdQYU.crl (hash: NZarJ8aWL/IS8Y1wgF8zRcnbLNIT5IJJBxlIG2q5gYE=)
                          2: iq2sIW_7r1s1fdqTw7uNQndwmDA.roa (hash: /lnS57mtw7Zyuat4LO8cFH49gKzXZcuOrFwsUylOBQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:89:f9:ef:07:a2:d0:a9:1e:f3:ff:39:83:b8:05:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf9788c995130d70eac46c06b226672d25d4185
        Validity
            Not Before: Apr 18 17:01:07 2026 GMT
            Not After : Apr 19 17:01:07 2026 GMT
        Subject: CN=4a8919d422f552d3e9ba34f085205552a738ed62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:d3:0f:cd:65:71:6e:1d:bb:a9:1f:38:5e:
                    ad:99:0f:1a:75:db:0d:66:91:0b:b2:c3:cd:46:45:
                    89:52:de:5c:4f:cc:56:52:33:f2:27:07:93:17:a7:
                    49:0c:82:2f:6c:26:86:60:92:9d:c7:90:50:25:45:
                    d1:0a:6b:50:06:65:7a:ce:19:95:3f:a6:0e:40:da:
                    e0:3b:85:a0:1f:af:8e:64:59:cb:7e:5b:1b:8d:83:
                    9d:33:06:61:d1:b4:bd:2d:70:19:6a:64:7b:90:c2:
                    c7:14:3e:64:fa:53:78:e4:79:5e:b8:3d:d9:89:ab:
                    44:58:28:36:90:d6:0d:20:ee:43:ea:06:00:f2:9f:
                    f0:a8:9b:d4:c2:c5:a6:70:d4:2f:ae:18:ab:ec:3c:
                    9a:a4:48:3e:64:6b:e5:35:90:6c:a1:e9:b0:f8:88:
                    46:5d:25:fd:fa:2f:95:56:42:79:b7:33:12:92:b2:
                    db:db:ae:df:57:a7:b3:60:af:b3:e3:ed:6c:64:86:
                    11:3f:76:87:aa:a2:33:e3:9b:03:99:43:db:50:78:
                    0c:63:af:72:b7:b6:9f:5d:83:20:41:0c:d2:51:8f:
                    c2:1e:1e:ab:11:24:bb:c0:0b:a9:a2:52:3d:63:9f:
                    e0:f2:4b:cb:51:b4:9b:2a:a1:07:0e:4a:05:8a:92:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:19:D4:22:F5:52:D3:E9:BA:34:F0:85:20:55:52:A7:38:ED:62
            X509v3 Authority Key Identifier:
                keyid:EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4c:81:bf:ac:97:a7:51:01:26:1b:33:a0:1a:17:89:0d:84:
         3e:e3:17:23:06:c0:58:8c:41:98:73:b4:a4:ff:d7:84:b8:36:
         9a:e0:52:3b:21:ed:a7:61:f1:67:d2:f0:b2:88:21:d2:6d:1e:
         83:e1:60:f7:c4:96:30:27:f6:5b:9f:ab:e0:d5:d4:ef:79:ee:
         8a:65:c9:03:45:ab:0e:f5:2f:3f:f7:5a:9d:7c:0b:f4:a2:99:
         b2:59:ee:46:ed:ff:a9:b3:ce:1a:b8:2f:21:47:f6:9c:ab:be:
         68:7f:86:4e:7f:3c:88:36:54:1c:2d:50:08:b2:dc:cd:ed:1e:
         74:26:3b:61:f2:25:7b:8a:4a:41:c9:7a:0d:f6:cb:0d:d3:e8:
         34:5a:c9:d0:79:f9:da:5d:13:4d:84:dc:41:42:ca:be:c0:44:
         a8:72:26:dd:3b:97:f2:1b:4e:9e:46:d3:00:ed:7f:f0:bd:16:
         6d:77:99:da:0f:32:8f:00:ab:87:b7:cd:e4:8f:dd:29:9e:18:
         9e:40:c0:ac:d3:63:34:ff:3d:ca:7f:5a:16:b2:e4:f8:29:87:
         5e:9b:ff:a5:e6:a6:f9:26:24:6c:8a:9b:cf:26:e4:99:47:c0:
         af:a0:2e:c5:6a:d8:4a:d3:72:19:c5:c4:26:8d:b7:d0:3f:45:
         7c:88:e5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2hifnvB6LQqR7z/zmDuAV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZjk3ODhjOTk1MTMwZDcwZWFjNDZjMDZiMjI2NjcyZDI1
ZDQxODUwHhcNMjYwNDE4MTcwMTA3WhcNMjYwNDE5MTcwMTA3WjAzMTEwLwYDVQQD
Eyg0YTg5MTlkNDIyZjU1MmQzZTliYTM0ZjA4NTIwNTU1MmE3MzhlZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPjTD81lcW4du6kfOF6tmQ8addsN
ZpELssPNRkWJUt5cT8xWUjPyJweTF6dJDIIvbCaGYJKdx5BQJUXRCmtQBmV6zhmV
P6YOQNrgO4WgH6+OZFnLflsbjYOdMwZh0bS9LXAZamR7kMLHFD5k+lN45HleuD3Z
iatEWCg2kNYNIO5D6gYA8p/wqJvUwsWmcNQvrhir7DyapEg+ZGvlNZBsoemw+IhG
XSX9+i+VVkJ5tzMSkrLb267fV6ezYK+z4+1sZIYRP3aHqqIz45sDmUPbUHgMY69y
t7afXYMgQQzSUY/CHh6rESS7wAupolI9Y5/g8kvLUbSbKqEHDkoFipJZEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqJGdQi9VLT6bo08IUgVVKnOO1iMB8GA1UdIwQY
MBaAFOr5eIyZUTDXDqxGwGsiZnLSXUGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUt
MGZlN2EwZWU2YmQzLzEvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUtMGZlN2EwZWU2YmQz
LzEvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUyBv6yX
p1EBJhszoBoXiQ2EPuMXIwbAWIxBmHO0pP/XhLg2muBSOyHtp2HxZ9Lwsogh0m0e
g+Fg98SWMCf2W5+r4NXU73nuimXJA0WrDvUvP/danXwL9KKZslnuRu3/qbPOGrgv
IUf2nKu+aH+GTn88iDZUHC1QCLLcze0edCY7YfIle4pKQcl6DfbLDdPoNFrJ0Hn5
2l0TTYTcQULKvsBEqHIm3TuX8htOnkbTAO1/8L0WbXeZ2g8yjwCrh7fN5I/dKZ4Y
nkDArNNjNP89yn9aFrLk+CmHXpv/peam+SYkbIqbzybkmUfAr6AuxWrYStNyGcXE
Jo230D9FfIjlrA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 23:45:11 2026 by rpki-client