Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          VPnK9SqiU/MapeclCEXZo290hHS1jR1sYy0OX+1jdDg=
Subject key identifier:   C3:90:AF:C0:B8:30:E8:10:6A:CB:A4:5C:F2:9F:5A:8B:11:9E:19:DD
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       019DA6E6AC96736BAFFAED6AE4C8D5B08AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          1497
Signing time:             Sun 19 Apr 2026 18:00:28 +0000
Manifest this update:     Sun 19 Apr 2026 18:00:28 +0000
Manifest next update:     Mon 20 Apr 2026 18:00:28 +0000
Files and hashes:         1: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: fX7hcsUT2wwLg8whPx7Jr+4FoOGUEcdfZv9H52WGvFs=)
                          2: QVZhA_jze4qVBDwSnQUmMxu1j6E.roa (hash: AWgQCld4mxknn1NvyY+yVEyOo5NSaCMfCYI2uqPVI18=)
                          3: d01OZQ1h5yd4zGfVbRIIarVh3s4.roa (hash: Xg/0ZNy0ArMdMbPyTvAy9IQ+pjsxh8KiRBOhFT7eW1Q=)
                          4: kviMEyCZuerPbRSjjOAweNUOX9M.roa (hash: XkVxdbAObzQecFi8jNeAZta/hKgnPT5nn3X0mpt80lw=)
                          5: rxoDYFpq8vIo4tsEseR7hW-PJWw.roa (hash: fCuVig3kLTHc4MXvnEsk4nmU3uAS7Jg8f43kLxgMMuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a6:e6:ac:96:73:6b:af:fa:ed:6a:e4:c8:d5:b0:8a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Apr 19 18:00:28 2026 GMT
            Not After : Apr 20 18:00:28 2026 GMT
        Subject: CN=c390afc0b830e8106acba45cf29f5a8b119e19dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:fc:bf:74:ac:61:4f:0c:5e:14:2a:15:fc:
                    10:26:b2:fb:6d:01:07:15:da:86:9f:cb:e7:9c:55:
                    31:92:62:7f:90:37:18:02:54:1d:83:a9:b7:68:3e:
                    af:07:cb:c7:eb:51:7b:85:7a:a3:de:08:08:5a:0c:
                    18:2d:86:09:a5:0e:c7:33:e7:a9:e9:e1:82:f8:66:
                    11:73:13:bd:99:52:23:ba:4f:0a:92:d3:2e:79:93:
                    62:02:d6:ce:c7:3e:1c:ab:92:f4:c6:53:e3:c0:6e:
                    be:8c:4b:5e:d5:e9:50:25:f8:48:49:f3:50:cf:c2:
                    0e:02:c8:c0:20:a6:e6:5c:77:27:61:39:c6:d4:a7:
                    14:72:68:cd:aa:2a:ae:8d:2d:d8:0d:03:2d:15:88:
                    b0:6d:45:d7:5f:ee:9e:76:be:f8:d1:f8:5a:ae:68:
                    b2:2a:f9:4b:d5:9a:81:4b:c2:82:b4:d2:f5:c9:e5:
                    28:cd:05:65:5e:0d:86:6d:e0:6c:5d:e9:89:60:5b:
                    05:0e:67:b0:2a:95:21:2b:b9:16:66:2c:c9:fd:5b:
                    a3:6d:13:33:a1:80:6b:d6:15:d1:ea:03:1a:59:01:
                    01:c9:94:7a:c4:3e:10:b6:56:72:2e:72:17:6f:9d:
                    f8:e8:28:3f:ca:81:c8:39:38:b9:a7:49:3e:85:81:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:AF:C0:B8:30:E8:10:6A:CB:A4:5C:F2:9F:5A:8B:11:9E:19:DD
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:e1:99:2d:40:25:1a:43:ad:e3:37:9f:0b:f2:a5:5d:3e:
         5e:67:23:5e:28:0f:c3:b2:7b:30:9e:ff:7a:2f:55:40:49:63:
         09:d1:4a:34:3c:4b:d5:27:b5:0c:7d:4c:8d:76:90:f5:db:b3:
         69:c9:de:49:be:d9:8a:d3:0c:5d:e2:9e:27:23:a6:5d:5c:bf:
         e0:38:70:58:d6:dd:bf:1d:c1:3b:1e:5d:21:6e:e3:1e:a0:95:
         bc:51:9f:0c:b0:6d:b6:09:0f:16:31:ee:da:ca:18:2d:da:a5:
         cf:b9:5e:99:d1:86:f0:c1:88:93:b9:ff:5b:25:2c:aa:95:87:
         80:b2:98:75:84:5f:dd:4f:eb:a7:1f:d9:be:18:e6:68:b9:7d:
         bc:a6:42:f7:4e:2e:a0:a8:3b:20:6c:5c:f0:4c:32:55:b0:09:
         b2:20:79:40:af:57:ed:1e:8f:2c:47:d2:54:a6:e8:0b:54:20:
         fa:e5:28:ef:f4:41:8e:86:b4:aa:5f:e0:cb:ea:88:ea:58:27:
         7c:02:75:b6:2a:17:28:1c:2f:64:b2:e8:49:3f:26:b4:02:39:
         85:47:e1:c7:d4:48:c2:59:34:a4:b6:6f:db:99:fe:62:45:f4:
         27:3a:5a:e1:31:97:11:7c:c3:d9:74:cf:b6:f8:28:6b:33:36:
         e1:de:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:24 2026 by rpki-client