Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File:                     d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier:          0ohcsICi4bBdQWO9p/Xz9qMjubtVSrv4ftMZRDs/Pj8=
Subject key identifier:   69:88:22:67:15:86:73:54:9D:6F:A5:FF:5C:92:EA:84:E1:FF:FE:4C
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer:       /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial:       019D9A74A3C5D15EF22FF6314D77CC2B620B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number:          11B1
Signing time:             Fri 17 Apr 2026 08:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:28 +0000
Files and hashes:         1: W8jOnIUAyFMaEP25sAUwJyxVaIM.roa (hash: i6lculuV3eQhPhN35emc/bL4sPdv/8Y0MhiLt4tT+wI=)
                          2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: lPO1xUkYo2voUAgEw5yDkpIpIkw8+KoDriuZgoAc7gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:a3:c5:d1:5e:f2:2f:f6:31:4d:77:cc:2b:62:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
        Validity
            Not Before: Apr 17 08:00:28 2026 GMT
            Not After : Apr 18 08:00:28 2026 GMT
        Subject: CN=69882267158673549d6fa5ff5c92ea84e1fffe4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:04:ff:69:9d:05:71:70:dc:b6:dd:34:af:
                    b6:67:52:d2:9b:9b:55:f8:97:3c:f8:67:e2:b1:c9:
                    aa:9f:bf:d9:84:29:98:0a:85:e5:23:7d:66:71:97:
                    19:1e:55:68:3d:72:4c:db:6d:b9:8c:4b:71:14:43:
                    63:b7:d6:76:57:87:9e:0f:cb:89:5b:86:07:fe:f5:
                    f5:87:84:ed:50:78:2f:ff:f9:87:e0:28:8a:ab:3b:
                    b2:7c:95:a6:a6:de:4e:10:dd:00:54:05:71:8a:b6:
                    88:ea:00:9b:c9:83:10:59:31:86:d3:e8:aa:91:85:
                    ff:5c:e7:f2:9a:b8:32:5e:3f:68:4f:fa:0a:74:ee:
                    6b:b0:7b:cd:b4:ce:fe:8b:5f:a6:54:9e:bf:ea:ac:
                    a1:eb:34:05:99:b3:62:c7:f5:90:17:11:ea:e1:1d:
                    2a:9d:a6:49:34:93:6a:cd:33:a8:ce:66:99:8a:7d:
                    d7:a3:ef:cf:38:aa:7c:1b:d5:79:0c:16:75:c8:5c:
                    0a:80:e8:0b:10:cb:16:a5:35:1a:bb:a1:56:b0:1f:
                    9d:e5:04:7b:12:2b:a1:44:70:37:4b:cf:ef:2b:55:
                    0a:b0:49:77:f4:f5:c3:53:62:ca:50:af:a9:1e:e2:
                    49:4c:68:b5:c0:0e:67:8c:1e:d1:2d:6a:23:1e:63:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:88:22:67:15:86:73:54:9D:6F:A5:FF:5C:92:EA:84:E1:FF:FE:4C
            X509v3 Authority Key Identifier:
                keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:76:d0:02:57:8a:6b:53:29:6f:73:a5:cb:89:b8:f9:f5:
         88:1c:49:0e:65:c3:eb:54:ef:8c:a5:c6:5f:b5:4a:d3:d4:19:
         a2:03:9e:7f:1b:e0:46:18:bc:85:18:f7:54:78:13:bf:bb:3b:
         4c:b2:f5:32:a5:5c:f5:f9:0e:2d:c7:c1:0a:b2:cc:0d:bb:37:
         8b:22:d0:78:e1:1f:0c:d2:03:ed:6c:6c:1a:e8:c3:b2:8d:9a:
         27:3a:3d:48:f1:0b:35:cb:22:c0:f0:fd:74:65:bb:e1:7f:84:
         7e:1f:d8:0e:42:3c:e0:5a:03:96:db:5e:77:7e:00:ad:a3:9a:
         74:ae:31:23:37:c3:9f:a7:fd:57:44:6c:54:63:41:8e:f8:de:
         81:c5:df:e4:f3:5e:fc:df:c9:b2:0a:3e:be:2b:48:7a:60:b8:
         56:2c:ce:56:d0:ef:94:5c:e4:ab:98:8a:8c:7f:fc:ba:ba:b5:
         30:14:84:0d:bd:dc:a4:14:e7:46:19:bd:9c:e0:44:d4:c7:64:
         2c:01:13:6c:9e:37:4f:71:36:5d:bc:0f:f5:66:ec:6a:d2:75:
         a1:8d:2f:77:04:1e:65:24:43:ae:57:85:c7:48:de:53:8e:f7:
         24:94:4f:ab:67:7e:a5:ee:e6:ac:d7:9f:2d:01:e3:62:c6:a4:
         f4:19:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:59 2026 by rpki-client