Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File:                     6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier:          IH3VS1FZp4NsIYK5AD5xUDDZ7jE4PYluhOtNE/MaxDs=
Subject key identifier:   56:21:52:EF:6C:AA:CC:AC:8E:73:31:FF:46:C3:0D:60:56:57:8E:1C
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer:       /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial:       019DCF74D5DAC54C36EC81EA772638CE9975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number:          03E3
Signing time:             Mon 27 Apr 2026 15:00:33 +0000
Manifest this update:     Mon 27 Apr 2026 15:00:33 +0000
Manifest next update:     Tue 28 Apr 2026 15:00:33 +0000
Files and hashes:         1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: 5rBfxs4WOuJ1DS7rE4cR/l8SUwOlTs8dme51WkzIYqw=)
                          2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:74:d5:da:c5:4c:36:ec:81:ea:77:26:38:ce:99:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
        Validity
            Not Before: Apr 27 15:00:33 2026 GMT
            Not After : Apr 28 15:00:33 2026 GMT
        Subject: CN=562152ef6caaccac8e7331ff46c30d6056578e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:55:44:b7:0d:b3:57:01:8d:64:2a:48:96:
                    ec:79:d9:a7:c2:7a:9a:58:53:17:3d:c2:ef:b7:a4:
                    68:7b:10:e4:7f:64:6f:8e:6c:b8:40:03:9d:26:51:
                    ce:23:1b:f2:c8:48:d3:29:ff:50:3e:4b:28:3f:f0:
                    18:ff:49:58:1a:cc:72:84:f1:63:cb:a5:f5:1e:92:
                    a8:20:bd:78:ef:1a:36:21:9d:b8:a5:69:f9:01:a8:
                    f2:91:d4:4b:12:eb:f9:98:b4:6e:d8:cb:d2:50:ab:
                    a5:73:da:a1:42:5f:78:1f:e2:9a:2b:f1:85:6c:a6:
                    5e:b2:aa:70:18:c8:a1:00:e9:40:38:17:1b:b7:5a:
                    53:4f:c3:71:06:b9:cd:2c:61:39:0e:0c:7f:a1:43:
                    5c:ca:2f:2c:1f:1a:c4:66:1f:e5:d5:5e:95:b9:6e:
                    96:2d:6c:45:c6:d1:5e:f6:7d:29:2a:6b:72:d0:8b:
                    4b:5e:08:3b:96:38:07:d0:b8:d7:c6:cc:7e:b3:43:
                    7f:7f:b9:59:ed:62:c8:0f:b0:f8:9e:e5:da:68:c0:
                    36:25:f8:d6:24:00:d3:ed:6d:96:85:77:b3:8c:90:
                    75:f1:db:f6:48:74:f6:da:1d:24:d4:98:f0:2f:f7:
                    08:db:e3:05:b8:dd:7a:37:36:04:7a:14:fd:e9:62:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:52:EF:6C:AA:CC:AC:8E:73:31:FF:46:C3:0D:60:56:57:8E:1C
            X509v3 Authority Key Identifier:
                keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:b0:35:fa:eb:b1:ed:2e:c7:36:43:94:2e:c5:7d:6d:09:
         f4:c9:83:1c:d5:9e:ac:76:3c:ea:06:89:df:9d:8b:6d:8e:c0:
         79:bd:1a:6e:93:d0:80:1b:99:2c:4e:fe:47:b0:ac:a2:6b:ce:
         d4:76:7c:2f:b3:ae:85:70:42:e6:d4:96:33:83:c1:1b:ab:34:
         da:88:2e:b8:f6:a1:f4:f9:1d:2c:ab:0d:0d:b1:c5:ba:41:16:
         bf:f6:b8:6d:a3:aa:4d:aa:3c:22:22:e6:ed:3c:5a:e2:18:14:
         16:0f:e2:78:46:0b:e0:7c:d2:2c:63:ca:d6:6e:65:18:68:b3:
         0d:2c:4f:d7:66:73:53:a4:ac:a1:97:6d:8f:2f:e5:ce:d3:c8:
         53:fc:1a:a5:f1:fe:09:94:8b:64:b0:f2:fc:1b:61:76:04:c6:
         76:72:f1:67:b2:7d:f3:02:13:4a:2d:74:03:c2:84:41:ec:b3:
         33:3c:d6:96:45:c5:0f:9e:9d:48:93:b8:14:33:79:2e:00:47:
         9f:f9:49:06:ad:94:dd:6c:7a:c9:ee:9b:23:4f:1f:7d:06:ac:
         a7:7c:c0:94:e0:44:a1:7d:93:6a:b0:5f:13:14:ae:77:cd:4b:
         3b:40:b9:a3:14:1c:a1:7e:8b:85:85:dc:8f:ad:ad:ad:c0:ff:
         05:20:4a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdNXaxUw27IHqdyY4zpl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2
NjMzZGEwHhcNMjYwNDI3MTUwMDMzWhcNMjYwNDI4MTUwMDMzWjAzMTEwLwYDVQQD
Eyg1NjIxNTJlZjZjYWFjY2FjOGU3MzMxZmY0NmMzMGQ2MDU2NTc4ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyRVRLcNs1cBjWQqSJbsedmnwnqa
WFMXPcLvt6RoexDkf2Rvjmy4QAOdJlHOIxvyyEjTKf9QPksoP/AY/0lYGsxyhPFj
y6X1HpKoIL147xo2IZ24pWn5AajykdRLEuv5mLRu2MvSUKulc9qhQl94H+KaK/GF
bKZesqpwGMihAOlAOBcbt1pTT8NxBrnNLGE5Dgx/oUNcyi8sHxrEZh/l1V6VuW6W
LWxFxtFe9n0pKmty0ItLXgg7ljgH0LjXxsx+s0N/f7lZ7WLID7D4nuXaaMA2JfjW
JADT7W2WhXezjJB18dv2SHT22h0k1JjwL/cI2+MFuN16NzYEehT96WIOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYhUu9sqsysjnMx/0bDDWBWV44cMB8GA1UdIwQY
MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt
ZGI5MDU5MTNjYjg3LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3
LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLKwNfrr
se0uxzZDlC7FfW0J9MmDHNWerHY86gaJ352LbY7Aeb0abpPQgBuZLE7+R7CsomvO
1HZ8L7OuhXBC5tSWM4PBG6s02oguuPah9PkdLKsNDbHFukEWv/a4baOqTao8IiLm
7Txa4hgUFg/ieEYL4HzSLGPK1m5lGGizDSxP12ZzU6SsoZdtjy/lztPIU/wapfH+
CZSLZLDy/BthdgTGdnLxZ7J98wITSi10A8KEQeyzMzzWlkXFD56dSJO4FDN5LgBH
n/lJBq2U3Wx6ye6bI08ffQasp3zAlOBEoX2TarBfExSud81LO0C5oxQcoX6LhYXc
j62trcD/BSBKcQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:30:56 2026 by rpki-client