Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          k4SqovZrtX5FmKBj7RSqVo5fUddVV1+ZSMppUnd2X8E=
Subject key identifier:   BD:F8:7B:C7:9A:73:6A:19:73:35:69:4D:28:63:B3:A1:EF:10:4A:DD
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       019DA41D0343C5428A3B33498701148E8E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          1853
Signing time:             Sun 19 Apr 2026 05:00:57 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:57 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:57 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: 61MWxH0jOyd+QsoElrXCxFav6MQcCwGRB8d8kdu1KOE=)
                          2: OEcoV0x2ZiERZGgDrlv6frQzG3o.roa (hash: Fnf+bBSZRAjDDHsRlYG1QWMEEm9hP4YKSKPdjjCMdQc=)
                          3: U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa (hash: ynlZLfA1KKQGA9ays2zyoOPFiR0SmVJSMZZfG1zu6sk=)
                          4: f_5BjnEr80pGWfL1w3q_5fZIFf4.roa (hash: RpdasGSTz3LwfRMX6VuVLK5/qxPoIGc1oN473heL/WE=)
                          5: mtPVSWGGA9av5jGLn16eQn0UQjc.roa (hash: rVQVTg7c8+hdflSpxdf+lr1Hlsinw9GyRMav2V9r1s8=)
                          6: pK6hDJxmfZUaCBepnWZvEBb9jQ8.roa (hash: +OSS7va6u+BokiYgs5Z+5mtwaa42GT6KDBzxwPZg2k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1d:03:43:c5:42:8a:3b:33:49:87:01:14:8e:8e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Apr 19 05:00:57 2026 GMT
            Not After : Apr 20 05:00:57 2026 GMT
        Subject: CN=bdf87bc79a736a197335694d2863b3a1ef104add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:02:38:4a:43:e9:d4:9f:74:e2:25:92:94:
                    05:29:b0:c3:64:78:54:b3:75:f9:b6:c2:d7:dc:c1:
                    45:01:af:b5:f0:92:2a:c2:ae:e7:71:51:25:ee:65:
                    53:48:20:5f:aa:b0:93:17:cd:8c:a5:ee:19:3b:52:
                    bb:6b:98:7b:a1:0b:6f:b7:d0:8d:da:c2:97:d7:f8:
                    70:44:52:2e:a4:b1:55:a6:6e:3b:ff:0e:65:f3:75:
                    14:c5:2c:b9:79:e4:3a:c0:23:14:16:34:89:5c:a5:
                    dd:74:ba:4d:0e:75:71:df:a6:ee:65:21:5b:3c:cc:
                    28:31:a9:13:54:c4:41:8b:9a:34:e6:1e:37:94:46:
                    ea:24:8e:56:da:69:91:97:d3:85:83:f5:2f:a2:66:
                    f8:83:f3:a5:75:e5:30:87:1b:2b:c0:5c:75:12:c5:
                    38:c6:06:db:0b:9f:65:4a:ae:91:e8:79:e7:5b:26:
                    4e:f1:c3:2f:3e:ca:6a:c7:a1:3f:fa:a6:78:74:5c:
                    05:76:c4:e2:56:1d:43:1e:5f:f3:f8:17:d2:61:d8:
                    02:aa:e2:77:aa:6d:82:a7:72:e5:a4:b2:da:7e:47:
                    04:8d:bf:3b:f5:fb:2b:98:c4:0f:60:eb:00:75:60:
                    dd:47:df:b0:ea:06:42:d5:7f:8f:9d:92:7f:25:71:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:7B:C7:9A:73:6A:19:73:35:69:4D:28:63:B3:A1:EF:10:4A:DD
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:34:34:94:9a:17:97:3e:db:8a:09:2d:45:d2:10:91:ee:78:
         6e:0b:9c:a9:1d:78:47:00:80:80:ab:db:16:1b:ee:bd:f9:69:
         25:60:db:ce:9f:fa:30:98:4f:2f:25:7c:d6:d8:43:50:af:d7:
         9d:82:7c:45:9f:89:06:2a:1f:bf:3a:1f:d9:40:05:f4:e4:fc:
         97:c4:41:06:32:0a:a9:6e:cd:d8:20:a0:4b:8f:fe:97:e7:5e:
         37:6e:e3:c6:f2:d4:73:de:e3:d4:fb:32:3a:9e:d1:79:2d:2e:
         3a:78:93:08:90:a4:3a:3d:0f:67:7d:52:ac:c0:4f:dc:5d:d6:
         d3:29:41:cf:c5:8f:62:06:cb:9a:0c:ff:fa:e6:ba:09:e9:22:
         ac:e7:7e:84:e6:65:43:0d:f4:57:7f:af:d4:f1:dc:8d:9c:c9:
         4a:f4:1a:75:ef:02:7e:d6:33:0a:4c:45:1f:83:e6:03:96:ec:
         11:e7:59:32:f9:95:0d:6b:e7:f4:95:5a:b1:1e:72:b2:f7:c7:
         6c:21:3b:32:3f:69:6f:0e:67:91:4a:6c:a3:16:3d:c9:11:db:
         db:ef:7b:78:4f:38:98:55:01:c3:ca:fc:f8:13:f4:10:07:68:
         53:61:41:92:6e:c0:d1:06:a5:8e:87:7e:7c:c8:d1:f6:fc:ab:
         fb:2f:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:25 2026 by rpki-client