Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          xbQdDBuFyHh2Mdh1EpuAMI5p40u8OuZTYZEQikX5N5w=
Subject key identifier:   26:15:0B:68:A6:CC:7E:D7:33:FA:FF:1B:6A:08:FC:30:F9:9B:A6:E5
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019DA378011A1A2CA40DA7BE170B8F7EB276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          1894
Signing time:             Sun 19 Apr 2026 02:00:43 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:43 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:43 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: WrekAg+5ST0qELYCL4btyS7542UEFCdATD0tuKUQkR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:01:1a:1a:2c:a4:0d:a7:be:17:0b:8f:7e:b2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Apr 19 02:00:43 2026 GMT
            Not After : Apr 20 02:00:43 2026 GMT
        Subject: CN=26150b68a6cc7ed733faff1b6a08fc30f99ba6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:93:f4:e6:de:34:4a:d5:da:2a:41:c0:8c:
                    5b:a8:da:6d:05:3d:47:e2:71:a1:fb:ab:0a:12:ab:
                    b9:3b:7b:72:9a:ce:37:aa:48:dd:0a:5f:30:82:5e:
                    36:f6:af:0c:cc:34:1b:a8:87:b2:71:d2:d1:d8:85:
                    95:96:61:8a:08:03:79:72:84:82:f8:13:bd:38:fd:
                    a4:21:14:5b:7c:90:28:7d:b7:fe:d1:5d:0f:5c:26:
                    34:e8:19:d3:53:c4:35:8b:d8:bc:bb:c7:35:94:9b:
                    16:11:b2:c4:3b:cb:19:e2:50:d2:e7:56:08:6c:fb:
                    c6:63:49:61:6b:d5:46:8a:70:a8:46:9f:8b:5a:32:
                    4b:ef:b4:65:dd:d9:d1:39:c7:a8:f9:c2:b0:13:40:
                    08:34:96:1d:d6:b0:a4:b7:a7:7b:3f:9a:c5:87:f8:
                    8a:0d:28:11:59:9a:c7:96:3d:8f:b5:39:10:6d:b8:
                    0c:0e:04:a0:9a:25:cf:65:55:13:c6:f7:74:3c:e8:
                    bc:df:e7:bd:65:1f:e4:32:9c:ad:bf:69:bb:06:d7:
                    08:75:32:71:b5:a7:c1:ab:5a:3a:90:b3:1a:1f:fe:
                    06:50:d7:69:02:97:28:10:8f:e1:46:4c:5c:d0:3d:
                    f0:54:1c:be:fe:76:0b:2a:4c:ed:4e:11:fd:a1:e3:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:15:0B:68:A6:CC:7E:D7:33:FA:FF:1B:6A:08:FC:30:F9:9B:A6:E5
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:b4:d5:11:9d:5f:c4:f6:c3:78:96:9f:2f:13:79:2a:f5:
         bd:2f:9a:0f:65:cb:67:7a:bf:2f:1a:ef:f2:5d:14:d2:4f:1b:
         1b:32:35:a1:90:00:c2:a6:10:31:9e:04:6f:3a:ad:c6:2b:83:
         7a:27:47:7e:a5:38:09:44:37:7c:6b:8d:e2:c7:73:b7:5c:24:
         f1:10:43:2b:49:c5:6e:bf:4a:15:08:6d:dc:a8:c4:0d:e6:63:
         52:60:28:f0:6d:da:8a:e6:8a:ca:eb:01:d6:4a:ce:46:d0:e5:
         b0:dc:11:c5:d3:e7:17:ad:b7:72:77:32:fa:8a:56:8c:67:0b:
         a6:04:89:e1:cf:a0:12:41:ed:58:96:36:53:31:7c:94:af:39:
         c0:3a:38:47:cf:80:73:5a:43:53:47:72:98:6c:46:eb:24:ea:
         b0:0f:46:b2:96:c4:26:30:0a:09:9a:2a:c2:93:09:9e:f2:54:
         c7:f4:73:c6:d2:1f:43:42:d0:71:9d:80:47:b1:13:2f:3d:32:
         51:cd:21:b4:87:69:b2:cc:0f:61:4d:b8:3c:de:45:5e:48:cb:
         0a:4b:d5:4d:35:58:07:b4:f9:84:53:d8:80:09:ea:3a:fa:f6:
         1c:4a:4e:2a:22:ef:54:3f:b0:f6:db:ab:63:9c:45:fe:df:00:
         d5:57:ee:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeAEaGiykDae+FwuPfrJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1
MmIwZWQwHhcNMjYwNDE5MDIwMDQzWhcNMjYwNDIwMDIwMDQzWjAzMTEwLwYDVQQD
EygyNjE1MGI2OGE2Y2M3ZWQ3MzNmYWZmMWI2YTA4ZmMzMGY5OWJhNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPmT9ObeNErV2ipBwIxbqNptBT1H
4nGh+6sKEqu5O3tyms43qkjdCl8wgl429q8MzDQbqIeycdLR2IWVlmGKCAN5coSC
+BO9OP2kIRRbfJAofbf+0V0PXCY06BnTU8Q1i9i8u8c1lJsWEbLEO8sZ4lDS51YI
bPvGY0lha9VGinCoRp+LWjJL77Rl3dnROceo+cKwE0AINJYd1rCkt6d7P5rFh/iK
DSgRWZrHlj2PtTkQbbgMDgSgmiXPZVUTxvd0POi83+e9ZR/kMpytv2m7BtcIdTJx
tafBq1o6kLMaH/4GUNdpApcoEI/hRkxc0D3wVBy+/nYLKkztThH9oeNDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYVC2imzH7XM/r/G2oI/DD5m6blMB8GA1UdIwQY
MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt
YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5
LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8+01RGd
X8T2w3iWny8TeSr1vS+aD2XLZ3q/Lxrv8l0U0k8bGzI1oZAAwqYQMZ4EbzqtxiuD
eidHfqU4CUQ3fGuN4sdzt1wk8RBDK0nFbr9KFQht3KjEDeZjUmAo8G3aiuaKyusB
1krORtDlsNwRxdPnF623cncy+opWjGcLpgSJ4c+gEkHtWJY2UzF8lK85wDo4R8+A
c1pDU0dymGxG6yTqsA9GspbEJjAKCZoqwpMJnvJUx/RzxtIfQ0LQcZ2AR7ETLz0y
Uc0htIdpsswPYU24PN5FXkjLCkvVTTVYB7T5hFPYgAnqOvr2HEpOKiLvVD+w9tur
Y5xF/t8A1VfuuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:22 2026 by rpki-client