Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          M1EYD7UWw3gQJfUDCDENdZ98ItTjC4WHfQT3yIh9u54=
Subject key identifier:   36:17:62:77:EF:E9:EF:BA:91:41:B6:67:EC:5C:5B:45:43:5E:DE:60
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       019D9A3E963FC86116481B9FEFFCE3B92EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 07:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:26 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:26 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: uDqnpKXZJElW4apT8HFOlKTmhH9V2bkRDZGlQJlMKQA=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:96:3f:c8:61:16:48:1b:9f:ef:fc:e3:b9:2e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Apr 17 07:01:26 2026 GMT
            Not After : Apr 18 07:01:26 2026 GMT
        Subject: CN=36176277efe9efba9141b667ec5c5b45435ede60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:a3:bc:43:ce:7c:ad:7b:31:61:cf:00:a5:
                    4f:1f:80:0c:9a:55:7d:17:71:77:ca:d3:45:b2:d9:
                    71:29:89:49:bc:af:97:28:9f:70:b2:16:1a:41:cc:
                    c7:ba:43:a7:dd:43:b8:2a:1d:ca:7b:e7:39:54:54:
                    11:a9:c8:5b:52:09:e4:5e:ea:35:39:ec:a1:99:cf:
                    9f:bd:b1:80:7b:98:e2:63:e0:e9:68:f2:a9:ba:73:
                    5c:a0:df:b3:c6:94:dd:6f:fb:4f:8b:e3:ed:68:1a:
                    d8:af:9d:e1:5d:cf:ff:41:70:4a:31:23:4d:7a:a6:
                    27:62:57:6d:49:3b:9a:20:c4:e1:ef:08:88:76:e3:
                    1c:ba:11:76:8a:fc:54:1c:91:2d:ac:fd:43:33:02:
                    cc:e4:11:82:66:ce:78:32:29:e6:c2:08:71:31:6e:
                    16:7a:d8:cd:d1:56:38:30:fd:d9:66:76:67:91:fa:
                    09:dc:45:90:e8:7f:39:2f:bf:81:d5:8d:41:4e:73:
                    ce:7a:24:ce:08:3c:1d:a9:f2:72:2c:ff:0b:9a:2a:
                    56:3d:2a:3d:35:54:92:94:85:0d:5b:f1:59:ef:49:
                    62:e5:1f:84:88:20:51:09:5b:12:d3:9d:40:b9:75:
                    d8:1b:c1:21:79:f3:e2:e1:7c:55:25:72:6a:4d:2b:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:17:62:77:EF:E9:EF:BA:91:41:B6:67:EC:5C:5B:45:43:5E:DE:60
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:8a:60:fd:75:fd:88:74:5b:b8:34:a5:30:8a:eb:31:27:
         3f:bb:f9:8d:57:02:f5:3a:1c:3a:24:44:4a:9e:b0:43:c4:79:
         b1:b0:7e:72:1c:7c:0b:06:63:32:43:90:32:e5:cd:ce:e1:47:
         ee:74:59:fd:2f:a8:3d:5e:b2:ed:59:64:e7:5f:2a:77:6f:bb:
         b2:cd:5e:ee:ff:0b:94:61:08:1a:39:ca:39:f3:d3:04:4b:c3:
         a4:b4:7e:8e:47:2b:fd:78:1c:0a:8d:f3:15:88:6f:1c:7f:51:
         31:7d:e2:51:5f:06:2e:c0:fb:df:db:c1:6b:77:1d:58:08:60:
         b0:0a:9f:81:b6:ff:70:8b:a1:cf:92:ad:36:91:df:7d:ce:ac:
         ac:bb:79:63:19:a5:b7:2b:fa:08:19:4c:b5:5d:e4:40:57:46:
         66:05:95:76:f2:ee:2b:b3:4f:19:e8:71:71:36:c6:f4:44:a3:
         d7:5d:36:70:41:e2:84:cb:a6:bc:af:cf:e9:fd:f0:8a:cc:0d:
         b3:7a:4c:56:f4:b6:7d:51:06:3b:3f:65:39:c4:7f:48:d7:00:
         1e:fd:79:f3:86:81:d8:5f:0b:dc:d9:f1:4a:50:d7:4a:4b:7e:
         1c:fb:15:60:63:36:74:3a:69:22:2c:30:f4:f5:90:b1:b9:37:
         00:45:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:03 2026 by rpki-client