Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File:                     bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier:          F6t60TwBrTFFl28qtFQjgG48wxsvSWhxeClwmV2WEQU=
Subject key identifier:   F1:0C:38:C8:54:0F:1A:EF:82:78:8D:D8:DC:9B:07:F9:76:9F:6C:81
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer:       /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial:       019D98F4F71F15CEB073F3F745F0A05CA994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number:          0CE1
Signing time:             Fri 17 Apr 2026 01:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:23 +0000
Files and hashes:         1: MHWk_6gkCFNzcpzPNNt2w891inE.roa (hash: uLAuY62U3N5zmg9Od7m47MwNBzxs39ToP7TJu3Dno1Y=)
                          2: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: yjHmkMbuq5LR6a7ETj6CdHz57KQk23rJ0Q7ThDVD+vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:f7:1f:15:ce:b0:73:f3:f7:45:f0:a0:5c:a9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
        Validity
            Not Before: Apr 17 01:01:23 2026 GMT
            Not After : Apr 18 01:01:23 2026 GMT
        Subject: CN=f10c38c8540f1aef82788dd8dc9b07f9769f6c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:c1:70:b3:7c:fa:a9:11:5b:85:cc:10:5f:
                    2e:80:15:e7:cc:1a:40:8d:28:87:73:ca:32:9d:87:
                    99:fa:14:57:3d:32:d0:0d:5e:01:6c:fe:c9:56:fc:
                    7f:ba:bb:7f:a8:36:7f:9b:29:ad:ef:c0:b8:a1:5e:
                    2c:af:bb:22:46:74:66:9d:65:d5:a0:3a:32:6e:a5:
                    8c:7f:92:9b:f8:d8:90:24:55:4d:35:41:8a:7f:cb:
                    40:47:4d:6f:f1:e5:1a:43:a4:0f:a2:8f:a6:e7:cc:
                    19:46:ee:0d:19:cc:2c:19:7e:1f:0d:f3:e2:ae:48:
                    94:e8:09:76:0c:64:83:ef:0f:33:19:8b:fb:8e:b2:
                    56:56:e2:a3:53:9d:05:12:13:84:3a:25:be:bb:09:
                    52:0e:f0:7c:56:4c:c4:53:18:eb:bc:f2:e1:8d:a4:
                    15:b5:0d:4a:d4:0e:40:54:73:ac:13:f7:56:75:40:
                    58:b2:37:cb:a9:27:14:9b:b5:d0:6d:ff:19:78:7d:
                    6d:9b:8f:0d:a2:39:de:a6:5d:a2:25:d9:df:d7:9d:
                    05:92:dc:58:23:d1:90:38:ba:d2:68:b3:f1:94:d8:
                    b3:37:1a:ef:7a:87:e0:cc:9f:ca:ea:b7:3c:d4:8e:
                    18:41:9a:22:3e:74:d1:46:00:07:20:3c:48:22:4d:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:38:C8:54:0F:1A:EF:82:78:8D:D8:DC:9B:07:F9:76:9F:6C:81
            X509v3 Authority Key Identifier:
                keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:94:bc:bf:ce:fe:8e:09:fc:9b:b8:27:88:4f:22:b8:95:2c:
         91:19:8f:7d:9b:c8:b7:98:8b:2b:66:95:87:47:b3:e0:49:5d:
         9d:e1:62:a0:ad:e0:6f:7b:7a:ce:8e:31:c2:c3:dc:c0:96:b7:
         98:5c:c9:4d:0c:09:5a:fb:a8:68:71:75:84:03:bb:a4:8c:33:
         70:43:69:7b:7d:d5:06:30:02:5a:ce:01:19:e8:7d:26:c2:a7:
         57:89:cc:44:84:4a:fc:0c:39:86:93:f8:35:15:73:5d:52:63:
         e7:12:08:6a:47:02:b1:5f:26:a4:7d:5c:f6:51:af:6a:81:cb:
         78:b2:a9:c4:60:ee:b0:9d:66:cc:ce:5d:4f:2a:2b:68:29:41:
         35:d1:a2:d1:73:4d:e3:e8:4b:8f:c8:72:f7:6b:86:98:6b:b0:
         d1:c4:96:53:2a:7e:fc:75:87:34:c7:47:2a:5b:43:84:71:4d:
         19:ce:03:98:c9:ca:51:46:cd:d9:fa:64:db:20:72:62:9d:3c:
         b8:27:10:02:a5:40:df:f1:08:36:d0:81:46:3f:54:15:57:1b:
         7f:95:ad:c4:e9:b5:b8:6c:4e:20:24:a9:55:0c:eb:8e:03:43:
         0c:39:d0:6b:db:a4:83:c1:f3:ae:4b:1d:e1:7c:d0:39:c3:e1:
         02:dd:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:01 2026 by rpki-client