Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File:                     a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier:          JjlOqIM7u9B7i6w0X8WuWi1KK4NF/Y2/9R6IXiJm/ko=
Subject key identifier:   A8:55:C3:8F:92:A6:92:C3:92:B5:4F:29:FA:73:97:4E:D7:43:F9:68
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer:       /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial:       019D9C634FE8F103E1D0653DA365C87287AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number:          0744
Signing time:             Fri 17 Apr 2026 17:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:47 +0000
Files and hashes:         1: ZapQiAtJnc9a1-GW4H20whNpSZw.roa (hash: hZ+kaGEM7fGXJLA7SsYpcn/FFyPh/7kbyCyQAEi9eHM=)
                          2: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: SwQVJe/oxj/T/ZcQw/aPpoeFyI4IC/xNJYH45tq5JxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:4f:e8:f1:03:e1:d0:65:3d:a3:65:c8:72:87:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
        Validity
            Not Before: Apr 17 17:00:47 2026 GMT
            Not After : Apr 18 17:00:47 2026 GMT
        Subject: CN=a855c38f92a692c392b54f29fa73974ed743f968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:95:ac:1d:4f:0e:e2:05:bf:78:64:ab:62:
                    48:ef:17:50:04:87:48:98:03:cb:d8:e5:15:38:86:
                    d7:79:20:fa:96:7a:a6:4c:80:44:1a:b6:79:3f:4c:
                    db:ec:c2:8d:80:cf:19:10:0c:8c:ee:04:3c:1a:d9:
                    78:e4:23:32:b0:2f:03:94:ee:8f:c8:78:b4:3f:dd:
                    dc:ec:50:c9:a2:4b:32:05:5f:1a:5d:a4:99:b2:47:
                    5e:35:89:4a:5e:63:f8:9b:e4:23:38:75:32:aa:ee:
                    16:b2:57:7f:d0:30:da:b1:2e:db:3b:a0:69:a3:c6:
                    36:3b:28:61:a9:24:5e:c4:a0:ce:e6:f5:e7:3c:d1:
                    77:60:8f:ec:0d:cb:5c:df:86:b5:7f:98:dc:96:ae:
                    a0:73:b3:33:8e:9a:54:73:4d:46:36:34:f0:70:18:
                    a9:0e:f1:22:37:01:50:54:1b:b9:6c:4c:3b:7d:c7:
                    70:fa:55:4b:00:ee:d5:cf:dc:fd:eb:12:27:9c:fd:
                    01:5f:1a:fc:bb:8e:06:57:af:81:7f:26:61:53:9b:
                    38:28:be:bf:32:3b:cb:67:14:2d:02:d6:81:31:d0:
                    4a:53:9e:64:d8:fb:92:f3:61:02:d3:7d:1a:34:f3:
                    64:5b:61:16:48:89:0e:dd:99:af:97:af:c1:c5:e8:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:55:C3:8F:92:A6:92:C3:92:B5:4F:29:FA:73:97:4E:D7:43:F9:68
            X509v3 Authority Key Identifier:
                keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:78:d0:6f:37:cc:92:f9:31:96:4e:1f:be:dc:0a:91:a9:a5:
         64:76:de:3b:46:cd:f9:5c:6d:ea:92:d0:21:a2:56:9c:61:d7:
         66:c2:63:ba:0b:7b:69:2c:ab:1a:e9:d4:44:39:82:db:05:e7:
         eb:d7:5e:d5:ac:09:7a:af:94:bc:e8:bb:34:22:ac:f8:8f:5b:
         a3:8d:ef:04:c5:7d:a2:3f:08:8c:27:ca:a3:83:c9:e4:69:4a:
         02:0e:b5:e5:92:f0:cf:31:77:07:5b:71:32:99:b5:00:a6:19:
         f3:99:73:b4:0b:7c:ca:fb:59:9b:98:86:c7:47:1f:28:cd:d9:
         c3:02:df:da:1f:ee:f3:8f:65:dc:48:52:41:9b:74:54:de:75:
         50:91:31:18:0c:a7:8f:4b:a8:4e:59:2d:3a:d3:3a:2e:32:eb:
         2c:2c:82:31:b6:eb:b5:6e:8d:48:52:73:3f:44:f9:5f:20:8d:
         10:e1:86:40:eb:ba:e9:b6:14:71:fe:32:f6:f6:27:3a:b4:43:
         be:0a:64:bc:e6:44:11:d6:79:35:02:23:17:e9:df:8a:1e:dd:
         6e:fe:0a:50:3b:95:f5:65:71:70:c1:ac:80:97:ce:96:1f:08:
         1c:5c:da:fc:fc:6a:1a:b4:7a:c1:e2:b6:ba:ba:77:01:88:a1:
         44:9d:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:01:00 2026 by rpki-client