Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          ydtoyBq5BEPw/4+Z94vSaiE3pnt6NH0Uuoj6uiIG3Uc=
Subject key identifier:   0B:4B:84:B8:B8:AE:CF:80:90:45:F4:28:FD:04:F4:83:56:77:7F:C3
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       019DA453F378A83F6EE3EC4C0F2CC6691F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 06:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:58 +0000
Files and hashes:         1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
                          2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: V6VaTYLPd/Vzs235u8BIih3UbXSMZMB24uTQs4xrEMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:f3:78:a8:3f:6e:e3:ec:4c:0f:2c:c6:69:1f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Apr 19 06:00:58 2026 GMT
            Not After : Apr 20 06:00:58 2026 GMT
        Subject: CN=0b4b84b8b8aecf809045f428fd04f48356777fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:88:3f:49:87:1a:cb:e2:f2:42:0f:8b:cb:
                    06:43:bc:31:91:3d:a5:eb:18:84:ff:df:da:9b:d4:
                    57:2b:71:79:8d:7d:85:b0:8e:7a:a7:53:5f:25:ea:
                    ca:84:92:d2:5d:5a:e0:e9:69:c1:fb:ac:32:a7:5d:
                    33:5a:86:d4:4a:05:fd:b6:98:1e:c7:54:e4:d2:f7:
                    fa:25:fc:ee:96:6e:35:32:1f:07:b2:ba:93:e8:2e:
                    bd:6e:2a:2d:93:de:bf:5f:d7:72:a0:20:5a:29:3d:
                    1b:2c:76:1e:c5:53:d6:87:47:fe:c6:7c:4b:52:12:
                    89:87:30:02:a4:40:ba:cb:ce:5f:77:71:7c:a9:69:
                    12:66:e7:2c:eb:dd:15:cf:4f:d3:14:34:de:d3:d6:
                    33:a1:cb:e2:76:d6:ad:7a:dc:1f:b6:da:56:e6:92:
                    d2:d0:5d:66:a3:cf:9b:9f:ec:a9:a8:c5:e8:d7:5e:
                    1e:66:dd:f6:63:ea:8f:33:62:60:77:89:c0:ee:b0:
                    b7:a5:a2:53:fd:9a:70:5d:d5:2d:0a:0a:c6:1e:2d:
                    bf:19:90:60:f7:4d:42:07:8f:cc:d7:0d:84:f6:00:
                    0d:24:5c:db:5c:2d:b8:e1:8f:e8:6a:49:6e:fd:b9:
                    ac:71:9e:ac:69:c1:e0:6c:9f:33:18:34:ed:90:27:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:84:B8:B8:AE:CF:80:90:45:F4:28:FD:04:F4:83:56:77:7F:C3
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4e:ca:f3:e5:b8:84:cf:44:a2:53:2a:a9:18:26:b3:c7:ab:
         a3:8e:07:ce:c5:79:b4:98:f9:9e:2b:4e:9e:78:24:4c:0a:e8:
         88:df:4d:7e:fb:92:62:95:89:5e:b7:28:d8:2d:45:a3:35:a0:
         9b:8e:de:2d:f7:f1:ca:b9:e9:46:f2:cb:52:c3:58:ea:0f:3f:
         b9:fe:0a:1f:c2:d4:76:78:94:0c:6a:79:a2:4a:95:8c:b5:4f:
         4d:5f:1f:ca:87:f6:c1:e4:79:1d:24:04:ae:8d:ce:dd:49:b6:
         e1:a3:98:33:a2:00:46:7f:b0:a0:32:0f:44:39:fd:d4:3b:8f:
         60:9f:88:6e:86:92:20:19:80:59:cb:ae:2f:8b:20:72:b1:75:
         c5:1a:3e:f9:f6:c1:71:c9:c7:d8:98:95:0f:80:4f:a4:d9:9b:
         41:7b:62:9a:43:51:63:b2:c9:08:37:f7:db:60:ba:4c:21:4d:
         fa:ff:95:ab:76:b7:b5:ca:22:73:48:aa:65:9c:a4:3f:b0:ca:
         2e:63:e5:b4:ec:55:2e:1b:53:7e:44:44:5d:13:e9:0f:c2:2a:
         c4:cd:57:e0:5f:51:56:dd:c7:ab:50:fd:d0:e9:fd:d3:72:89:
         de:95:66:11:b7:b7:cd:1e:51:65:5b:41:e3:af:43:31:3b:0e:
         69:c5:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:22 2026 by rpki-client