Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          jwj92N6DhTTgHZ4wX48CD1dhKgTbGObqUHcaHtwpR4Q=
Subject key identifier:   4C:75:40:4E:A0:6F:07:AD:AB:89:2B:0D:6F:43:86:03:DA:BC:5D:36
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       019D9E88BC51439F6FF0CDD4F429213E2EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          0FA6
Signing time:             Sat 18 Apr 2026 03:00:54 +0000
Manifest this update:     Sat 18 Apr 2026 03:00:54 +0000
Manifest next update:     Sun 19 Apr 2026 03:00:54 +0000
Files and hashes:         1: aXJznUL0xUln13cBfkJIhsiborQ.roa (hash: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE=)
                          2: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: NJ7FbQ+cyLtELzicx5pCVsunxh91FZjqF9PmglUJlLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:88:bc:51:43:9f:6f:f0:cd:d4:f4:29:21:3e:2e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: Apr 18 03:00:54 2026 GMT
            Not After : Apr 19 03:00:54 2026 GMT
        Subject: CN=4c75404ea06f07adab892b0d6f438603dabc5d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:70:34:df:6a:ac:52:e4:04:d4:2d:99:ec:
                    bd:b0:a4:cb:18:12:9f:26:9d:03:10:0c:21:ea:be:
                    52:ca:0e:74:7d:68:85:38:32:94:45:ef:17:56:fc:
                    16:d5:8e:98:0d:3d:48:67:5b:e2:b8:4c:74:b4:07:
                    97:d2:d7:73:be:cf:0d:3b:74:ab:0b:91:97:35:c5:
                    0c:de:5e:0d:ab:d8:17:11:9a:d1:0e:4a:b1:33:ad:
                    20:2f:26:37:93:d6:1d:8b:03:2d:c3:6c:48:ee:a7:
                    e4:7d:5d:c5:cc:ba:7d:c7:94:7d:dd:0e:e3:d6:35:
                    78:d1:98:88:ca:4d:42:23:07:08:af:bf:13:cc:ca:
                    67:d5:58:95:89:aa:14:e8:3a:8d:d9:a6:62:f7:b9:
                    dd:55:fc:39:cf:85:78:e4:d0:5e:b5:2a:7b:aa:bc:
                    17:1a:5c:91:28:ce:5d:e6:2c:d9:5e:2b:ff:88:d4:
                    66:bd:8d:19:e1:3a:02:f6:94:c9:dd:7d:a7:0e:a0:
                    9c:34:90:81:de:1f:b6:d8:06:15:05:7a:ad:90:09:
                    d6:2f:7d:8d:2f:72:f9:f4:a2:fc:c9:62:c0:7b:9d:
                    53:8f:b3:6b:03:cf:95:48:de:ce:51:e0:f9:25:0a:
                    6e:ef:47:ba:83:d5:b7:4b:ef:2d:69:4a:0e:b4:c1:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:40:4E:A0:6F:07:AD:AB:89:2B:0D:6F:43:86:03:DA:BC:5D:36
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:8a:03:d2:87:7d:4a:81:5c:1e:9f:36:aa:77:74:b4:fe:
         0a:56:24:a6:3e:1f:d2:65:fc:06:06:a4:87:61:25:c3:4d:00:
         35:96:80:02:50:cc:92:18:36:cd:35:e6:ea:72:98:54:50:5c:
         40:5c:cc:06:00:19:f5:9a:6d:e8:58:a3:f8:8e:4a:4c:2b:45:
         98:28:cf:a4:c4:dd:e8:28:8c:70:0f:d6:cc:c9:ba:45:3d:00:
         8a:81:59:40:b7:c0:07:5f:61:fc:0e:91:b3:d7:53:e9:65:4d:
         a4:bd:a1:82:ba:38:5d:7e:1e:73:03:05:e1:aa:1d:e8:70:90:
         22:3b:56:c6:1e:9d:c8:e1:a2:8f:7a:c4:de:da:bd:5f:44:9b:
         ed:10:ed:6c:7e:b4:b1:b4:a3:1c:d1:a7:54:7b:8b:39:6d:72:
         ba:8f:f1:77:4a:bb:01:2f:39:d8:d4:9f:86:26:8f:eb:c3:44:
         ef:9a:33:35:49:8c:5e:df:05:60:7b:31:91:f3:03:fe:13:56:
         5c:c5:d5:16:fb:82:7b:16:ca:6b:58:49:a5:0e:55:ca:b2:22:
         56:6d:f5:c7:88:20:b3:09:3f:ff:a4:38:89:c5:8f:78:74:e3:
         2d:7f:ef:88:a2:94:46:b5:84:c2:5d:d5:9d:6f:13:a3:97:ec:
         7e:bf:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:48 2026 by rpki-client