Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File:                     86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier:          qImMXD6Vr6/xxMzH99YsoQK/jRU301feY3PSsWoRKiQ=
Subject key identifier:   E3:D3:FD:A3:1A:FA:24:06:B6:DD:B9:F8:4D:0A:83:0C:D9:B7:BB:43
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer:       /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial:       019DA89E2E23EB858E44CBADD571484E7697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number:          060C
Signing time:             Mon 20 Apr 2026 02:00:31 +0000
Manifest this update:     Mon 20 Apr 2026 02:00:31 +0000
Manifest next update:     Tue 21 Apr 2026 02:00:31 +0000
Files and hashes:         1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: Gw/gi45gaYi80RIes9eYb43a04trvS6pq1qYYFs/cz4=)
                          2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a8:9e:2e:23:eb:85:8e:44:cb:ad:d5:71:48:4e:76:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
        Validity
            Not Before: Apr 20 02:00:31 2026 GMT
            Not After : Apr 21 02:00:31 2026 GMT
        Subject: CN=e3d3fda31afa2406b6ddb9f84d0a830cd9b7bb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:8e:97:72:55:8f:df:41:e8:f7:11:e8:97:
                    7a:21:e6:c6:c5:a6:43:e2:ba:1f:ac:f1:da:40:08:
                    bc:8a:04:a5:7c:b2:ea:69:1d:e5:1e:c2:73:c9:55:
                    63:74:d1:b9:2c:71:ef:b6:76:1f:71:f6:39:14:d2:
                    78:36:47:75:c6:cb:87:8d:2e:bc:6a:55:28:48:ce:
                    7e:10:a0:2d:9e:aa:83:87:91:6c:40:31:8d:e1:e5:
                    e3:d0:42:f3:7c:b5:e0:39:b4:84:ff:a7:69:22:9d:
                    1c:00:c4:c2:de:3c:74:a5:c7:e3:d9:4a:c2:c5:90:
                    b9:c1:f5:6f:44:b4:ac:a6:f9:c3:2f:d8:9f:16:03:
                    8f:31:99:79:17:9e:78:70:dd:6c:25:b2:a1:c1:e1:
                    a9:6c:bc:4e:58:e7:53:41:59:38:fe:d2:cb:8f:94:
                    54:ee:8f:c4:2f:05:d8:cf:66:32:48:cb:34:c1:b8:
                    e1:fc:3d:0b:d8:2e:22:31:4e:14:1f:a5:35:91:81:
                    c2:3a:20:56:2c:1e:be:a0:e6:ea:9b:23:92:18:fd:
                    f0:43:6d:c8:8f:9f:a7:c9:00:ce:da:0f:aa:c8:52:
                    78:92:b4:5b:03:8c:ab:ad:3a:35:9a:19:bf:f5:fb:
                    2a:d5:8e:ca:90:9d:cf:e0:10:cb:cf:f4:d7:db:e0:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D3:FD:A3:1A:FA:24:06:B6:DD:B9:F8:4D:0A:83:0C:D9:B7:BB:43
            X509v3 Authority Key Identifier:
                keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:7f:29:cb:85:1d:c0:b0:e9:37:50:98:84:25:3e:19:e1:
         4e:0f:71:46:8a:37:2c:02:2e:42:b4:47:64:d6:6d:94:6e:78:
         54:e1:b0:7f:d9:65:0c:3c:7d:b0:a9:22:46:33:7c:5a:93:2e:
         18:14:5b:d8:15:b9:02:7a:83:d8:db:61:6c:5d:22:27:ad:de:
         a3:04:b6:b2:a1:4e:e1:e5:57:56:44:ad:07:4e:33:00:e2:55:
         c8:e3:47:a7:db:1e:9f:2b:13:3f:7d:12:59:b2:fd:e7:4e:20:
         db:ff:9f:d3:c7:00:82:02:00:23:0c:c9:79:95:50:f8:9d:c6:
         3e:04:41:07:85:43:4d:42:6d:aa:75:42:06:48:f2:a6:f6:5e:
         08:d0:a5:91:03:5b:1d:59:51:00:b8:65:e8:4a:5d:55:a0:0a:
         df:79:b6:20:77:ad:b0:22:07:74:70:f0:6c:e7:25:c2:cb:cf:
         3f:c8:86:17:6e:97:96:1e:0b:70:51:b3:ca:34:97:d4:4b:fb:
         46:8b:e2:07:15:77:a6:23:7c:9c:6f:b1:d6:9e:ea:80:e0:69:
         33:8a:0d:4d:c3:f7:cc:2a:c4:fa:dc:0f:4a:9d:d5:6f:2f:ff:
         7b:85:78:bc:c0:a1:f4:1d:55:20:5b:8b:54:f3:4d:f6:00:7a:
         32:cc:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:33:11 2026 by rpki-client