Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File:                     brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier:          bCCW20/4E/OyfGywLhXaArV1ZjH0V4eoD5tPJ+6ke5I=
Subject key identifier:   F6:D5:57:80:4C:34:E1:A4:1E:D8:6F:4D:0C:DE:E5:93:66:5C:C1:07
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer:       /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial:       019D98189213B886B5CB9E4820FCCCDB8585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number:          06E7
Signing time:             Thu 16 Apr 2026 21:00:40 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:40 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:40 +0000
Files and hashes:         1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: wtQKxZZRFjoleTNsiYIc8i+isEkr34N7I8thbI1ywi0=)
                          2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
                          3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:92:13:b8:86:b5:cb:9e:48:20:fc:cc:db:85:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
        Validity
            Not Before: Apr 16 21:00:40 2026 GMT
            Not After : Apr 17 21:00:40 2026 GMT
        Subject: CN=f6d557804c34e1a41ed86f4d0cdee593665cc107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:15:36:b2:19:0a:91:64:ae:89:fa:af:cd:
                    da:72:6d:94:6f:f3:0d:15:f5:6b:af:91:cc:25:70:
                    60:a3:97:12:72:97:d2:ac:6a:6a:00:85:c0:51:77:
                    83:ed:ba:3d:d4:4e:b2:e8:85:9e:2c:0e:0d:a3:94:
                    63:65:8b:d7:0d:aa:42:dc:6e:0d:67:21:9b:55:d2:
                    2a:46:bc:46:ab:de:4b:25:e6:8c:b9:a8:b6:95:0f:
                    3f:dd:0a:81:c4:e8:49:69:34:50:70:01:07:07:89:
                    70:49:ad:a6:80:23:1e:eb:1f:3e:a4:94:b4:1e:f6:
                    5f:fd:50:7f:2e:c3:ac:38:80:be:e0:57:8b:a2:5f:
                    ab:2f:6b:03:f1:2a:ae:1f:94:ac:9c:27:96:89:43:
                    98:c1:5a:77:0e:52:59:87:a7:de:fa:e8:da:9f:04:
                    75:9f:c2:e1:f0:2b:00:7f:a9:43:64:cd:c3:92:aa:
                    6b:7c:9c:13:8f:b2:88:b5:86:55:79:8b:21:98:58:
                    2c:8f:d6:f3:df:9c:e9:4f:dc:36:2b:48:c2:db:3d:
                    cc:84:1c:1a:eb:e1:96:2b:93:f9:75:7b:14:1d:d2:
                    59:70:d8:51:15:57:0d:e9:89:96:9f:f2:95:c4:01:
                    b7:a8:03:89:34:c7:0d:9c:df:b7:fe:16:9f:0a:b6:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:57:80:4C:34:E1:A4:1E:D8:6F:4D:0C:DE:E5:93:66:5C:C1:07
            X509v3 Authority Key Identifier:
                keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:39:97:40:c3:4a:39:43:c7:d9:f2:96:f2:02:86:99:19:
         53:48:53:56:8b:bb:64:85:3c:1f:da:6c:e3:a5:c8:10:99:8f:
         65:d4:e8:77:bc:b0:6c:03:40:7b:a8:ed:5e:5c:52:c2:69:79:
         45:df:f4:9f:93:da:70:16:b9:65:07:c2:99:89:b2:92:eb:3b:
         f5:9b:b0:a1:50:45:4c:fa:c3:7e:77:37:3b:02:01:37:dd:9c:
         0e:26:c4:08:34:23:b6:29:93:57:b0:bd:ca:3a:24:16:5d:d5:
         d5:2a:f8:9a:b2:f7:61:18:fa:15:cb:d4:61:81:c0:1c:58:46:
         9a:ad:d6:f1:ab:c0:df:cb:43:14:15:ff:a3:28:b6:a5:6c:da:
         9b:a1:00:2e:9c:1d:87:71:e3:95:4d:93:85:4a:82:bd:9f:56:
         03:5c:f8:dd:76:af:ff:5b:4d:27:bd:f7:b5:a8:e3:8c:e0:6a:
         b1:4c:a6:dd:6d:72:4b:79:06:ba:60:21:9d:85:5a:7b:1c:83:
         b2:c3:0c:d1:3a:47:21:c6:25:e4:17:78:82:9a:48:93:cf:00:
         93:56:54:5e:0a:e4:6b:5f:e1:a9:55:00:89:42:4d:ab:0f:ec:
         cb:fe:60:4c:3e:3a:9f:7d:a2:84:fa:b3:68:36:79:b9:65:dc:
         c4:b7:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:16:50 2026 by rpki-client