Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File:                     H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier:          CsOmbo8ZiSw51hTIO/g0K88LisFBbcNiQE0e836WuFc=
Subject key identifier:   3F:19:95:28:6B:D6:C5:30:48:BB:6F:D2:49:E1:A9:27:73:79:C3:94
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer:       /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial:       019D97E25416D0217D96D44DE95C96FE50B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number:          0919
Signing time:             Thu 16 Apr 2026 20:01:25 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:25 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:25 +0000
Files and hashes:         1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: xyGx0L8KgrB9JawR8YmBD1hX8uUM4V5cpmyOc2SJJxs=)
                          2: c4GD0N5ffflgM4WSJFRdKaORXEg.roa (hash: ANDRx+abOUWpKzoyrqtGua8LAFv82Wy6OwjQEBpNXbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:54:16:d0:21:7d:96:d4:4d:e9:5c:96:fe:50:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
        Validity
            Not Before: Apr 16 20:01:25 2026 GMT
            Not After : Apr 17 20:01:25 2026 GMT
        Subject: CN=3f1995286bd6c53048bb6fd249e1a9277379c394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:30:37:44:0e:10:c3:da:4e:55:de:d5:b9:65:
                    a6:58:3f:9f:65:1a:18:8c:d5:97:b1:f3:72:1f:66:
                    36:9e:74:0d:80:ab:08:e6:b4:9f:04:a2:33:4a:fb:
                    76:f3:f8:19:ec:71:5d:54:4a:bb:c4:ca:d3:a2:08:
                    2c:3f:34:a3:a9:bc:f3:14:3a:fa:c1:8b:24:64:67:
                    51:53:bd:af:aa:e2:c9:58:7d:be:37:b7:27:fb:32:
                    23:55:ab:5e:56:92:d9:28:21:a5:34:79:f6:e8:aa:
                    73:70:c2:52:57:b0:32:33:a6:61:39:a5:6d:cd:0d:
                    3d:24:f8:ec:79:56:16:a4:91:10:b8:93:b8:f2:63:
                    00:b0:2f:54:79:cb:0d:a2:f8:c8:e7:bc:b1:35:76:
                    a4:b3:cc:7e:19:06:4d:29:eb:83:d7:9b:af:7b:6b:
                    50:f0:78:43:f2:fe:27:00:08:b4:f2:b5:ee:78:ed:
                    ec:68:3c:39:df:40:d6:0f:f5:85:05:75:e9:5f:ea:
                    3f:b6:d6:ca:9e:8d:c5:1b:98:ba:61:bd:5f:01:1a:
                    62:c6:fe:15:8a:23:6c:02:52:35:46:8e:2a:16:b9:
                    f9:b0:82:31:09:94:d9:c9:1e:de:a2:b7:af:ff:b2:
                    c4:0f:bc:fd:5d:bd:a2:0b:b1:be:a5:2e:c8:f1:35:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:19:95:28:6B:D6:C5:30:48:BB:6F:D2:49:E1:A9:27:73:79:C3:94
            X509v3 Authority Key Identifier:
                keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:5e:f3:b2:86:84:ef:06:1d:50:ac:c9:26:1f:ce:12:ce:
         51:da:7b:0c:d6:86:f6:42:13:00:0e:bf:33:9f:22:3e:d9:cf:
         d2:fb:75:17:e9:1c:1b:ca:98:2d:22:51:79:2f:ac:27:9e:a0:
         24:69:b8:5a:f3:17:81:f8:7a:23:32:94:a0:f6:a9:24:e4:4f:
         ce:52:79:d1:08:ca:13:6a:48:41:b3:49:bc:57:75:5d:80:60:
         4e:26:7a:e2:a4:44:07:b8:e2:90:7c:b3:18:50:c2:e7:8d:77:
         1c:26:86:69:8e:0c:d1:92:29:e3:74:59:94:3e:3e:40:26:69:
         b9:0d:0f:49:a7:85:6a:95:bd:08:25:68:82:79:6e:63:b5:8c:
         2e:7d:5d:20:6b:7b:5e:48:1e:ab:79:9a:17:c3:fa:6a:d1:20:
         eb:92:9a:58:b7:6e:32:28:23:c3:75:04:9a:a4:41:27:a9:31:
         5e:bf:3f:39:8d:33:cb:41:37:b3:fb:d9:b5:09:07:d8:8a:fa:
         74:84:61:5e:84:29:c9:8e:7a:00:8b:9e:03:90:90:0c:3b:4f:
         68:b7:90:97:89:05:03:d1:ee:ac:8a:4f:a3:e3:be:6b:40:ec:
         1e:3d:a5:e9:1e:2b:21:40:3e:3e:a4:50:7a:d2:2e:b6:b3:2f:
         e2:04:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:03 2026 by rpki-client