Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File:                     6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier:          tmHnU86/MGNqsuX/JZ9bZbuD7EAqQMU267dldCMAqPw=
Subject key identifier:   39:6E:86:99:34:36:B9:44:E1:C5:FF:8C:C7:BE:66:D7:DF:94:E9:AE
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer:       /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial:       019DD0510BA6285D7A46B386BC7B10DE64C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number:          1038
Signing time:             Mon 27 Apr 2026 19:01:05 +0000
Manifest this update:     Mon 27 Apr 2026 19:01:05 +0000
Manifest next update:     Tue 28 Apr 2026 19:01:05 +0000
Files and hashes:         1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: /MyuSPC7rVuvSOekHIvbMrOHpmZSlhqUZZlilS5o0KQ=)
                          2: CdMLNjkWN_LbBmbtyqVRIvBxVHQ.roa (hash: 86QotpjDcKjFxnBx3ug0BvDhMYnHrgdBwrKCM9Nq8eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:51:0b:a6:28:5d:7a:46:b3:86:bc:7b:10:de:64:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f4510444a17add7327146152943495ababb968
        Validity
            Not Before: Apr 27 19:01:05 2026 GMT
            Not After : Apr 28 19:01:05 2026 GMT
        Subject: CN=396e86993436b944e1c5ff8cc7be66d7df94e9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:b2:68:00:fc:c7:10:0e:ce:bf:9f:53:25:
                    d8:f7:b2:0f:aa:b2:32:61:5c:35:d3:96:71:f3:ce:
                    5c:8b:ae:bf:70:a3:08:e1:9d:c8:1c:05:e2:41:66:
                    cc:e5:8b:28:7b:1f:ae:f1:b4:1a:95:d3:b8:df:51:
                    e1:a5:cb:62:29:e5:b6:9e:e7:7e:16:b0:52:6c:3b:
                    42:13:2b:2c:6b:bc:9a:af:9a:73:c2:ce:9e:17:2c:
                    63:b9:72:9f:fc:ba:28:de:95:22:2c:d5:70:a9:cd:
                    5f:3a:6c:57:bf:7c:9e:9e:bb:21:8b:18:de:f4:d1:
                    12:7c:c4:2e:57:22:c1:a9:e7:2c:19:98:50:a5:23:
                    23:ca:fe:be:d3:c8:a7:48:75:51:5e:a2:36:8f:ef:
                    dd:3e:8f:92:9b:fb:5a:ec:2a:00:9e:2e:28:5a:e5:
                    54:6a:6f:cf:56:f9:0b:c8:0e:fc:e7:84:c9:92:13:
                    e3:8c:e3:fa:bb:5b:47:bf:52:6b:e9:f3:7b:28:b5:
                    4f:9f:90:bd:07:39:6c:84:2e:9a:2b:6c:12:bb:be:
                    fd:cb:59:60:fc:b0:fc:d4:a8:3c:4d:18:75:68:91:
                    e0:ba:ea:8e:a5:69:85:db:93:c5:cd:af:ff:79:d8:
                    14:f9:2d:19:53:95:88:d7:d7:50:50:d2:5a:46:2a:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:86:99:34:36:B9:44:E1:C5:FF:8C:C7:BE:66:D7:DF:94:E9:AE
            X509v3 Authority Key Identifier:
                keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:35:77:68:a3:d1:9b:1a:95:8f:c8:a4:8f:89:9c:87:60:54:
         55:4c:cf:7b:55:66:f1:2e:03:a8:5b:c5:df:6d:8f:54:ce:68:
         e2:0c:34:01:54:01:8a:23:a3:98:cc:72:d7:00:84:42:41:63:
         56:0f:2f:0e:5b:5a:65:29:be:f6:28:c2:1b:8e:e6:54:39:f6:
         25:6f:d2:f4:f4:b5:48:9a:82:16:61:59:c1:73:de:6e:8c:2e:
         65:28:f7:b4:de:58:b6:40:bf:9d:bb:60:c6:16:30:cf:fc:89:
         13:b9:cb:f1:41:da:41:14:75:cc:60:72:81:d8:6b:e9:2f:ae:
         79:cc:46:ff:99:78:59:53:7d:b7:f9:31:b1:a9:bb:2c:2a:50:
         3a:ef:ff:30:bd:3e:71:60:7a:5a:6a:7f:6a:e6:10:eb:3e:ba:
         13:02:74:21:97:98:b2:57:81:52:f4:c4:db:5a:be:de:ea:fa:
         2a:70:0c:eb:7b:6e:b1:1a:eb:20:9e:8e:ca:22:a6:11:e2:4f:
         34:14:d4:46:f4:d1:92:43:15:fa:10:fb:26:33:23:90:d1:38:
         86:ec:10:2c:54:6a:c9:5d:14:5c:a8:aa:d8:92:fc:39:de:2c:
         3e:b1:43:a3:58:18:17:73:0b:bb:f3:b1:fa:02:15:60:9e:56:
         d1:ac:5a:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUQumKF16RrOGvHsQ3mTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZjQ1MTA0NDRhMTdhZGQ3MzI3MTQ2MTUyOTQzNDk1YWJh
YmI5NjgwHhcNMjYwNDI3MTkwMTA1WhcNMjYwNDI4MTkwMTA1WjAzMTEwLwYDVQQD
EygzOTZlODY5OTM0MzZiOTQ0ZTFjNWZmOGNjN2JlNjZkN2RmOTRlOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraOyaAD8xxAOzr+fUyXY97IPqrIy
YVw105Zx885ci66/cKMI4Z3IHAXiQWbM5Ysoex+u8bQaldO431HhpctiKeW2nud+
FrBSbDtCEyssa7yar5pzws6eFyxjuXKf/Loo3pUiLNVwqc1fOmxXv3yenrshixje
9NESfMQuVyLBqecsGZhQpSMjyv6+08inSHVRXqI2j+/dPo+Sm/ta7CoAni4oWuVU
am/PVvkLyA7854TJkhPjjOP6u1tHv1Jr6fN7KLVPn5C9BzlshC6aK2wSu779y1lg
/LD81Kg8TRh1aJHguuqOpWmF25PFza//edgU+S0ZU5WI19dQUNJaRion6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDluhpk0NrlE4cX/jMe+ZtfflOmuMB8GA1UdIwQY
MBaAFOn0UQREoXrdcycUYVKUNJWrq7loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQt
YTI3NmVkMGJhMWJjLzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQtYTI3NmVkMGJhMWJj
LzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTV3aKPR
mxqVj8ikj4mch2BUVUzPe1Vm8S4DqFvF322PVM5o4gw0AVQBiiOjmMxy1wCEQkFj
Vg8vDltaZSm+9ijCG47mVDn2JW/S9PS1SJqCFmFZwXPebowuZSj3tN5YtkC/nbtg
xhYwz/yJE7nL8UHaQRR1zGBygdhr6S+uecxG/5l4WVN9t/kxsam7LCpQOu//ML0+
cWB6Wmp/auYQ6z66EwJ0IZeYsleBUvTE21q+3ur6KnAM63tusRrrIJ6OyiKmEeJP
NBTURvTRkkMV+hD7JjMjkNE4huwQLFRqyV0UXKiq2JL8Od4sPrFDo1gYF3MLu/Ox
+gIVYJ5W0axazg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:03:53 2026 by rpki-client