Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          BNDgfo9EOhlrv/zxUC6cZDlshmkQJpxG+8ny0/OP7hM=
Subject key identifier:   E5:9F:88:23:68:F3:0C:0F:BB:F4:63:B6:51:BB:1D:B3:7E:24:4C:82
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       019D984FD31650E9EBF347C37077EB48A5E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          18AA
Signing time:             Thu 16 Apr 2026 22:01:01 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:01 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:01 +0000
Files and hashes:         1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=)
                          2: Cm2yDKipOZ7sHlbR_Hzzd41nQYs.roa (hash: yWZv7NkDFzKo9TIx/TWSen6p9EYZYREsasP3I0CUfzQ=)
                          3: UsjKC7eB_MWBtsUBXJK-RFYAYHU.roa (hash: NGEpFjBcwXvxm7QU0HUsjAWpitcU0iExVxH5Fk2JaRc=)
                          4: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: alkY79e0AYwCjKzsmlXmjXGPgeBbK6c1iz8UQCqsI3c=)
                          6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=)
                          7: wZoxcNDPJMq3-uyqVaFl1OpOC5s.roa (hash: LWpdYaFu3wCLKYxI/zQHGuILauK3fDO4Dw9ytsYmVLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:d3:16:50:e9:eb:f3:47:c3:70:77:eb:48:a5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Apr 16 22:01:01 2026 GMT
            Not After : Apr 17 22:01:01 2026 GMT
        Subject: CN=e59f882368f30c0fbbf463b651bb1db37e244c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:b7:31:6d:08:7d:56:43:62:be:06:ea:3e:
                    60:d6:0b:d7:1d:dd:dc:c5:5e:dc:4d:6d:34:ca:7a:
                    63:2e:22:2e:4b:2e:ce:a6:59:2b:24:34:90:05:e4:
                    61:97:6f:2a:5e:7c:f6:c8:2b:9b:07:1d:89:a2:45:
                    65:5f:41:80:7b:9c:ec:df:b6:ca:a7:15:a6:82:48:
                    02:6b:16:2e:7b:e0:3c:26:6a:70:3e:8a:f7:ad:c7:
                    6f:6b:f0:7d:db:fc:cf:5d:93:48:fc:7d:0a:3a:d3:
                    3c:fb:db:00:19:73:58:44:d1:10:bf:9d:49:62:99:
                    c8:8b:e0:d9:83:d8:60:19:4c:00:a4:69:dd:81:16:
                    4b:89:dd:3f:ed:3f:61:54:ae:35:40:f7:3c:09:cf:
                    40:c8:86:ec:50:9d:9d:26:ea:55:7b:d5:59:d5:5f:
                    84:bb:2e:4c:7c:1d:5c:61:86:33:a9:87:c8:9f:96:
                    e5:da:ad:30:e1:09:b8:32:39:5d:4a:e8:25:86:ab:
                    a3:95:3b:60:10:88:83:7a:db:b7:6b:db:8a:2a:80:
                    27:9c:c4:7e:5b:cf:b1:2d:13:58:5a:c1:7b:15:e5:
                    6c:21:ae:4e:f7:9c:a5:fd:35:ed:32:7d:50:42:8f:
                    49:80:16:05:95:8f:f9:04:46:bf:b0:bf:27:0b:42:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9F:88:23:68:F3:0C:0F:BB:F4:63:B6:51:BB:1D:B3:7E:24:4C:82
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:7c:de:1a:61:7c:96:b9:c6:d7:9a:3b:a5:08:35:b4:10:
         4a:82:14:06:21:aa:93:3c:25:1e:3e:62:6a:2b:bf:63:3b:6d:
         23:7b:cb:f7:ca:95:94:76:b2:ea:10:ab:a8:2a:fe:9e:9d:85:
         18:0a:52:10:3d:80:79:5f:fe:bf:13:b0:06:55:9b:27:fa:9b:
         c4:2c:ec:2e:89:d5:4a:8e:7b:d2:e9:f6:3b:ee:5f:2c:ef:24:
         5a:2e:30:96:65:53:f8:c8:48:e5:f5:be:9b:8d:ac:57:d0:75:
         2b:55:c2:25:b3:25:18:e1:df:fe:93:24:40:64:fb:ba:92:1c:
         ed:83:8b:ac:20:99:b2:e6:a9:df:b4:52:6b:39:55:15:0a:ff:
         a9:dd:00:99:95:47:ae:94:60:7d:41:bb:22:7d:a7:eb:85:d5:
         f5:7e:7a:be:75:ee:5a:ea:66:c2:55:e0:88:a3:e3:14:59:f0:
         5b:6c:e1:62:ae:cc:7a:03:d3:0b:e2:7c:f6:bf:25:f1:dd:07:
         64:28:5b:5c:b5:65:ca:8d:ca:fb:8a:df:0b:5a:81:3d:62:b6:
         e4:26:b9:3b:4f:74:09:f5:00:90:db:91:68:00:f8:68:c9:cd:
         0b:b4:d2:be:9d:4d:6b:83:e6:b5:3a:d0:7a:83:b9:78:3c:e0:
         d2:7e:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:48 2026 by rpki-client