Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          QMshL7n1EQ5isVTQVjQF9wC5umI3/XYny0vWOPHcYBM=
Subject key identifier:   02:C9:D6:C9:A0:0C:1B:F4:C2:28:11:3F:77:B1:BC:B8:B5:C1:0A:34
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019D9A073051606C9C49B99D337319EE0191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 06:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:55 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: 9KWgM9GLPbGbMZJHWbFgX/q00JiSdAR66v3L4jCbi1k=)
                          2: CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa (hash: EDn78xn+p6oMFAEmlxUOHaCSYp4j7S763nhsCUw2Kv4=)
                          3: H9CdRCLLB89FGC_P99zvO9bw22M.roa (hash: /+D8bia7Or2I7xsqu4Z5whu7vt5QZWNJo6zSPqWl4CQ=)
                          4: ORyyWOYfH2nmHuG5PcDCFlq-wYQ.roa (hash: OirWDledNDa67ty/dKSFYukThzm9V2btotcDCbLF1o4=)
                          5: Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa (hash: gtJSWV6dJGPToJtFvmcUYQb8AcDhxr2Bne8t1GW0tKE=)
                          6: zcCiixqCklulb_B107CrpvzF08M.roa (hash: I58sikhQ3Ff9PunOEcBamQjNVvG5kDBAQWFHprNeKL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:30:51:60:6c:9c:49:b9:9d:33:73:19:ee:01:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Apr 17 06:00:55 2026 GMT
            Not After : Apr 18 06:00:55 2026 GMT
        Subject: CN=02c9d6c9a00c1bf4c228113f77b1bcb8b5c10a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:12:cb:36:b6:58:4c:be:10:55:c9:ee:07:3a:
                    b5:d9:9d:7e:b0:3c:5a:52:3d:62:06:b6:25:2a:4b:
                    bf:85:dd:0d:0b:b8:b8:68:07:e6:b5:e1:0b:d0:42:
                    da:df:be:af:7e:e2:6f:07:31:90:a8:54:1a:d9:c1:
                    0c:d0:5b:47:46:03:6f:ae:df:46:9b:2a:36:54:10:
                    7b:b3:80:98:e1:99:01:c0:6b:9d:ef:6b:97:29:d1:
                    4e:c1:3f:cd:9d:2a:cc:7f:66:5a:27:14:bb:b1:8a:
                    c3:0b:4c:1c:87:de:7b:81:e8:44:9e:37:00:a4:ac:
                    c8:91:9a:00:b5:9a:cb:fa:29:76:36:ce:65:06:9a:
                    39:2a:a2:73:d0:e0:73:d8:7b:23:de:4f:02:32:2c:
                    cc:8d:c0:8e:5a:64:84:f1:5f:35:28:1b:31:de:75:
                    5a:c9:6c:bd:11:87:52:b9:4d:d9:c3:ec:fe:a0:4e:
                    1f:57:63:13:28:79:c3:73:c8:b7:42:b2:4d:53:7f:
                    1a:40:46:39:de:74:bf:c5:18:c4:d5:e1:f8:7c:13:
                    e8:49:d4:98:56:38:a6:b1:bd:0d:cb:f3:88:2c:46:
                    a9:92:32:56:48:b3:65:f0:97:c5:f6:62:b1:64:6b:
                    5b:d6:d2:06:bc:82:e4:0a:49:ef:92:a4:dc:dc:f2:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:D6:C9:A0:0C:1B:F4:C2:28:11:3F:77:B1:BC:B8:B5:C1:0A:34
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:71:1a:16:85:45:29:a1:f4:95:2b:ba:e0:08:23:7b:aa:8b:
         f6:41:2d:79:21:2e:5c:db:2a:21:ea:2e:92:41:f2:35:87:78:
         29:04:75:dd:1b:0b:8d:53:67:84:95:90:a1:f5:45:f9:ad:9b:
         bc:d2:84:f9:df:11:c3:b5:0c:f0:5f:ed:19:87:f4:3c:40:a2:
         9a:a4:21:6d:5a:73:66:1e:00:e0:b8:cc:fb:e3:6c:8e:78:dd:
         95:e9:76:90:09:7d:ad:85:8c:c0:a9:c0:44:60:3b:43:75:71:
         69:ca:fc:78:23:2d:d0:45:06:78:9d:03:9a:9a:ab:08:4a:8b:
         47:03:53:c2:4b:19:b8:29:fb:8c:b7:3a:1b:f8:02:13:c2:74:
         9e:a1:49:d3:60:c4:97:e6:5d:0a:36:2e:c9:4b:29:09:0f:35:
         7a:8b:86:37:b0:0d:ad:56:32:a9:f6:28:26:0b:c5:e1:3a:03:
         8e:13:1c:1b:31:7f:ea:13:8d:67:6e:07:8e:b0:95:23:d9:a9:
         c0:a0:90:de:ee:d6:da:c2:3e:2c:c9:c7:15:47:2a:24:66:50:
         50:11:63:4c:b0:ba:a4:79:df:49:5f:41:76:5e:91:24:18:64:
         8c:c0:1b:da:c3:c9:04:a0:8a:e0:be:cc:87:94:9c:e1:3c:b2:
         3c:85:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:47 2026 by rpki-client