Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File:                     bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier:          lmVaMfE/xw9UxK/l1x9vfTp/BGWqGadWEox1EtUXHh4=
Subject key identifier:   28:23:43:10:4D:37:E4:09:B6:9B:41:03:93:F1:D8:B3:DB:F3:9C:F3
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer:       /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial:       019D9886720018B981DBAFAA43C3685F20E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number:          08E8
Signing time:             Thu 16 Apr 2026 23:00:40 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:40 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:40 +0000
Files and hashes:         1: 2txQ-0RSqs2uJRwQDVdC5Ar0Q1U.roa (hash: dgukSS0gWF7oah9dhXPhy2J6/nwd2z1Om6wRww4A75c=)
                          2: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: I7PNqj/PRRCAzHeFZ6g7ibq9zV1bcywkxPAknr+bJek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:72:00:18:b9:81:db:af:aa:43:c3:68:5f:20:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
        Validity
            Not Before: Apr 16 23:00:40 2026 GMT
            Not After : Apr 17 23:00:40 2026 GMT
        Subject: CN=282343104d37e409b69b410393f1d8b3dbf39cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:c6:cb:37:2f:80:5e:9e:03:5d:0d:0f:f0:
                    19:12:f1:d2:3b:e3:45:ba:13:e7:98:87:9d:1f:46:
                    0f:59:62:3b:37:93:88:ae:af:86:60:6f:38:77:52:
                    1b:c6:34:1c:f0:b2:51:fd:eb:12:23:42:30:19:58:
                    3c:90:4a:25:05:67:ab:ca:4c:3a:53:ab:dc:35:e6:
                    f8:11:46:24:cc:71:94:cb:7f:64:ab:11:f8:8c:4b:
                    b7:19:b2:44:1b:2e:6e:86:4f:7b:87:d7:d9:42:79:
                    7f:cd:20:64:ac:9f:c5:7d:85:55:d1:8e:2e:86:82:
                    44:c0:03:20:58:fb:77:aa:f2:23:ab:43:b3:2b:61:
                    af:e3:ae:59:eb:ae:d2:28:7b:36:15:e0:fe:5f:78:
                    79:1a:be:ea:cb:86:4b:bb:ba:0a:b4:1e:81:af:7e:
                    f1:3a:00:5e:9e:86:19:83:75:88:5f:0c:2c:62:7f:
                    ef:54:96:4a:ce:11:e0:16:66:3d:51:77:eb:8d:60:
                    59:fd:10:a5:a4:da:45:75:08:ed:94:eb:ea:40:b3:
                    ed:8b:61:cd:8f:88:3b:fd:fc:a9:24:e2:20:fc:a9:
                    ec:36:21:9f:e7:4c:91:c7:d0:64:39:c9:67:2f:e3:
                    3e:72:4c:f2:93:8c:77:ea:e6:68:b8:d3:91:34:7e:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:23:43:10:4D:37:E4:09:B6:9B:41:03:93:F1:D8:B3:DB:F3:9C:F3
            X509v3 Authority Key Identifier:
                keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2f:a2:7d:1d:4f:b8:d3:45:97:3b:27:77:52:2d:6b:d8:37:
         95:c1:97:01:70:59:00:e4:ee:e8:9c:17:95:b0:d1:83:75:ca:
         ad:90:38:19:81:a7:45:36:cd:0d:b2:6c:e0:a4:c6:63:4c:56:
         d6:b4:88:05:57:78:6f:f2:24:cd:8e:8b:21:4b:9d:d5:b5:0a:
         83:d2:30:a6:85:fc:3a:d3:2f:16:a0:23:3f:c9:98:4c:cc:a0:
         55:b7:68:1b:ba:98:fb:b6:22:d2:6a:1e:b5:e7:a7:3e:b4:ba:
         b5:39:03:23:54:23:7c:94:c0:3b:fe:55:74:5d:cf:6d:bb:69:
         2f:00:4b:1a:40:b4:ee:d3:c4:85:63:72:eb:57:49:69:27:77:
         02:6e:4e:b7:9b:0b:b1:7d:3a:1e:de:48:80:85:17:4a:30:d9:
         bf:58:4d:d7:17:cc:6e:5f:c4:50:b1:88:e2:53:1e:6e:a7:2d:
         37:cf:84:11:a0:d6:a7:1b:fe:5d:57:3b:6a:35:d3:1c:60:d0:
         e5:89:d2:d1:23:72:52:2f:cb:79:56:30:20:2a:ac:f5:5a:0e:
         81:d2:9f:eb:68:aa:f1:48:0a:3d:10:9b:65:0a:69:a1:7e:da:
         f9:b8:7f:5a:77:c3:1d:89:65:91:90:c7:0e:18:41:cc:36:7b:
         5f:cd:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:23 2026 by rpki-client