Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File:                     6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier:          rLpB2/EDL77uFdU2PSxHmsjFSJ/xMFwgrUuPA4eAX08=
Subject key identifier:   BC:C7:17:64:B3:C0:25:90:83:C1:86:16:D9:77:60:20:9F:2E:02:37
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer:       /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial:       019D9BF50D75C283F4F9C940A1003233BB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number:          0399
Signing time:             Fri 17 Apr 2026 15:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:21 +0000
Files and hashes:         1: 0NDgQCvqhryncNsEQEFvwSr_y0M.roa (hash: LF2EyUV4OIlA7LZWcGa2EYYOsJUgAR1OHjq6qtxDlCo=)
                          2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: wL/J2/zjpgScnLcEjH6+9uEy/knq3KQ8POm6imDGorQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:0d:75:c2:83:f4:f9:c9:40:a1:00:32:33:bb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
        Validity
            Not Before: Apr 17 15:00:21 2026 GMT
            Not After : Apr 18 15:00:21 2026 GMT
        Subject: CN=bcc71764b3c0259083c18616d97760209f2e0237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:21:e1:46:2b:9e:a0:b6:1f:f8:96:b8:5c:5e:
                    f1:ff:24:ce:d5:77:e4:1a:62:30:a8:08:37:73:ce:
                    38:02:d0:54:cb:15:4d:fc:57:0e:3b:27:5d:bd:28:
                    e8:30:73:ec:db:ef:d4:bb:ee:0e:ea:ff:57:56:a6:
                    97:e0:ae:eb:9a:8c:df:e6:5c:c0:81:64:79:ab:9a:
                    65:47:ec:db:c2:36:9f:ac:c9:bf:b6:f2:0a:84:f4:
                    aa:9c:20:3b:1f:31:ca:04:8f:de:c9:b9:21:4c:13:
                    a4:74:b3:fc:85:4c:ec:b6:8a:5f:46:5b:20:93:3d:
                    7a:59:b0:ca:62:56:49:c0:00:ae:89:11:58:8f:a2:
                    37:3d:19:4e:af:45:5d:90:e2:74:06:f8:42:33:53:
                    9e:43:b2:1d:1d:5a:7b:52:7d:51:56:40:85:b6:7f:
                    0c:25:ce:ca:1f:22:77:e7:59:a1:bb:6d:26:64:2d:
                    56:e5:b6:45:f5:0f:56:58:fb:97:5f:d1:fa:d3:81:
                    c8:00:7d:f1:21:90:80:40:53:b8:85:3b:a0:b9:18:
                    ca:de:ad:62:78:69:d6:ad:1d:62:e8:b7:e5:29:c6:
                    f2:f6:41:b6:7e:7c:04:a3:f6:69:f4:47:15:33:61:
                    75:cd:24:08:e8:15:d6:49:b4:98:98:85:ab:06:04:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C7:17:64:B3:C0:25:90:83:C1:86:16:D9:77:60:20:9F:2E:02:37
            X509v3 Authority Key Identifier:
                keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:57:e9:63:fe:ea:0d:14:f5:89:c3:41:4a:e9:a4:c2:da:51:
         82:f8:19:de:db:e3:dc:3b:a8:33:77:4f:bd:dd:64:42:61:0a:
         12:3c:cb:6c:53:d2:68:da:b4:89:50:99:c1:71:53:68:33:43:
         ca:a3:4e:b6:ac:0e:d7:bd:14:f2:9f:52:e2:0b:86:dd:32:e9:
         23:95:c1:71:8e:2d:24:0e:9f:68:38:10:e2:d4:78:1a:b1:4f:
         05:48:5a:2e:db:6f:96:c8:40:54:d8:ae:26:8e:95:3d:a8:f9:
         bf:37:f2:20:53:29:0e:ef:2b:f7:76:dd:e5:53:2f:c5:b0:84:
         89:df:e4:f9:f6:eb:5f:2d:ad:40:ee:96:83:d5:a7:9e:90:40:
         44:2a:1a:39:a3:d4:e7:36:bb:cc:5e:52:3a:29:7c:f8:74:32:
         a5:04:3d:78:6a:dc:71:a8:d8:fc:6c:7e:73:a9:ee:89:ff:62:
         ca:3a:e2:2f:65:7a:40:ee:c9:6b:c7:4c:2f:c3:eb:45:76:4d:
         59:61:b5:dc:42:b5:34:08:98:27:bc:7c:c6:30:cf:b4:5a:c8:
         0d:2c:5b:4d:46:37:b5:46:6a:89:7a:03:59:0e:4a:86:1d:73:
         60:89:b5:92:ac:f1:4e:ac:53:ea:34:29:5e:40:74:98:c1:22:
         25:ee:66:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:29 2026 by rpki-client