Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          s+7dq6PeP5vQyppaHZxA5+AJ4ySyUOTKn5Jvvj+vKbU=
Subject key identifier:   DB:6A:13:5F:CD:30:2B:30:03:8E:35:E4:E6:55:9C:1F:91:38:83:E9
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       019D98BDDB269C0BCD14B79F3C80F66E00F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          09FE
Signing time:             Fri 17 Apr 2026 00:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:12 +0000
Files and hashes:         1: EliSXZrgR1c36J3q5HEwgdzaHX0.roa (hash: FZup8urDRjoh+LhoPd+RJukJeWSAFbFgyU+lJveq7KY=)
                          2: Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa (hash: L1aIopxOUtbBLkdUuaCRDC0ncbpwnY8QrLA/wvRFK5A=)
                          3: akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa (hash: nhX5fVxRS3e4icCOygzdch8SpwXkUN5wlZ7uTW93Gsk=)
                          4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: XgCRS1TzyldAjKieKPSSXlSOzcZ2PPh7Hj/3fSJ+e6Y=)
                          5: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
                          6: kIDgGMW1uXNaj9KusJXcTTlIh7c.roa (hash: PwAEtgyKC+fUUIGh92oSv3jyXm09MobuWsRtDnHhYsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:db:26:9c:0b:cd:14:b7:9f:3c:80:f6:6e:00:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Apr 17 00:01:12 2026 GMT
            Not After : Apr 18 00:01:12 2026 GMT
        Subject: CN=db6a135fcd302b30038e35e4e6559c1f913883e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:38:81:4c:8d:51:2b:03:c7:59:fc:4d:89:
                    1a:ce:b8:34:83:18:aa:da:9b:ed:0a:df:4c:27:e2:
                    c3:6e:bb:94:f2:90:13:40:dd:bc:ba:6d:b8:b4:09:
                    0b:b5:13:78:f3:af:6e:d8:ba:f5:e7:12:40:ed:ca:
                    ff:cb:88:90:4f:bc:5c:01:ad:2c:79:8e:94:ec:8a:
                    50:ef:81:5a:f1:39:9f:76:7d:58:0e:94:65:39:f4:
                    59:0c:de:9d:ef:70:74:a8:32:67:53:4d:75:a6:c8:
                    c8:53:f5:42:4b:a7:97:4d:49:aa:10:09:28:6a:88:
                    46:97:3a:f4:88:af:25:ea:89:18:a5:25:47:1a:58:
                    71:f1:8e:5e:3c:88:16:eb:6c:6d:3d:4e:90:04:fd:
                    70:96:9f:b7:25:0b:34:ed:8c:48:7b:5a:92:32:c3:
                    cc:be:2e:d6:c3:70:ef:47:b8:8a:b4:76:90:3a:ff:
                    b0:69:6c:ce:c0:a1:e9:a5:98:92:15:a0:eb:88:40:
                    5e:c8:4a:96:60:a4:a3:ff:72:e0:f4:ed:4d:5f:14:
                    f4:ef:43:dd:ad:5d:d0:b2:c0:5e:55:1d:9e:bc:18:
                    00:c7:68:76:66:13:c5:c9:83:98:9f:61:55:0f:ea:
                    42:fe:7f:f3:2f:1e:7a:1c:f6:8f:ed:56:69:a7:94:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6A:13:5F:CD:30:2B:30:03:8E:35:E4:E6:55:9C:1F:91:38:83:E9
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:51:f2:74:68:8b:b4:cb:37:24:0e:fa:ac:f3:11:3e:99:d8:
         03:dd:18:3c:96:5b:4f:0f:f8:5d:38:bd:66:bc:a5:56:d5:4b:
         56:54:95:f9:92:0e:9c:f5:11:a6:93:61:73:c6:69:27:4a:b3:
         da:2a:eb:c0:9d:fb:0b:82:57:dc:0f:eb:fd:a3:cd:c2:0e:44:
         19:10:38:93:3a:c9:03:f6:f8:ce:2d:d1:97:44:33:33:b7:68:
         89:ed:b4:7d:30:74:97:f1:42:8a:cf:71:89:45:f9:f2:64:ab:
         bd:03:6a:5f:e4:a7:5b:88:98:ea:e3:d9:a2:13:a1:90:a5:a6:
         6e:6a:fc:eb:41:ae:2f:a7:1b:58:c4:e5:a3:fe:12:ed:96:92:
         bf:9e:97:b2:db:dc:7c:66:20:69:eb:c4:68:21:2f:1d:c3:4b:
         11:19:4d:01:c2:9d:34:80:93:2e:40:ba:80:fe:2b:11:50:99:
         cf:68:a0:2f:e9:bf:5b:45:d0:d5:aa:81:59:ac:62:e4:50:55:
         9e:74:55:f1:06:2e:0c:e2:de:4c:42:ce:5e:48:c7:76:7b:65:
         d3:4e:62:28:d8:72:0e:ab:d3:24:11:64:4a:53:01:89:38:dd:
         90:d8:b4:02:20:b4:fd:1a:2d:fa:da:85:3a:c6:97:34:58:6a:
         aa:6b:f5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvdsmnAvNFLefPID2bgD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy
MDRiYWMwHhcNMjYwNDE3MDAwMTEyWhcNMjYwNDE4MDAwMTEyWjAzMTEwLwYDVQQD
EyhkYjZhMTM1ZmNkMzAyYjMwMDM4ZTM1ZTRlNjU1OWMxZjkxMzg4M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHI4gUyNUSsDx1n8TYkazrg0gxiq
2pvtCt9MJ+LDbruU8pATQN28um24tAkLtRN4869u2Lr15xJA7cr/y4iQT7xcAa0s
eY6U7IpQ74Fa8Tmfdn1YDpRlOfRZDN6d73B0qDJnU011psjIU/VCS6eXTUmqEAko
aohGlzr0iK8l6okYpSVHGlhx8Y5ePIgW62xtPU6QBP1wlp+3JQs07YxIe1qSMsPM
vi7Ww3DvR7iKtHaQOv+waWzOwKHppZiSFaDriEBeyEqWYKSj/3Lg9O1NXxT070Pd
rV3QssBeVR2evBgAx2h2ZhPFyYOYn2FVD+pC/n/zLx56HPaP7VZpp5SgDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtqE1/NMCswA4415OZVnB+ROIPpMB8GA1UdIwQY
MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt
MzVjNjNmYTc2NWEyLzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy
LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVHydGiL
tMs3JA76rPMRPpnYA90YPJZbTw/4XTi9ZrylVtVLVlSV+ZIOnPURppNhc8ZpJ0qz
2irrwJ37C4JX3A/r/aPNwg5EGRA4kzrJA/b4zi3Rl0QzM7doie20fTB0l/FCis9x
iUX58mSrvQNqX+SnW4iY6uPZohOhkKWmbmr860GuL6cbWMTlo/4S7ZaSv56Xstvc
fGYgaevEaCEvHcNLERlNAcKdNICTLkC6gP4rEVCZz2igL+m/W0XQ1aqBWaxi5FBV
nnRV8QYuDOLeTELOXkjHdntl005iKNhyDqvTJBFkSlMBiTjdkNi0AiC0/Rot+tqF
OsaXNFhqqmv1Aw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:18 2026 by rpki-client