Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File:                     Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier:          Ie8SF+LzM/OskWhBHLZpxTmy2d4rL5KEyPBFH/LpWEo=
Subject key identifier:   46:FA:06:78:CA:07:9B:ED:46:A9:B8:6F:AD:C6:65:83:0B:ED:48:1F
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer:       /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial:       019D97E1F49DD181A131EE4920E7B24015C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 20:01:00 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:00 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:00 +0000
Files and hashes:         1: 8V38VHEkwBfuD3hKlUMAwAWf0gY.roa (hash: imN6z7AkUfOmEGnz8pAEu90fdda1mOaxJQPyio4Pb3I=)
                          2: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: FE8CLiSZ2ttsHDiMgsQmheVY7cPlj1wKqNjXCDkFn5E=)
                          3: _X7djEtEeel6rznCy89Da-wo810.roa (hash: MybIr2vIo4CNJaPziQgcTc/X4EYFmstJ5wpm8V4UqW0=)
                          4: v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa (hash: oRN0RpTL9cEOLFpMfM+oW8RC/6m7RJC5l8CQ7D2QtoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:f4:9d:d1:81:a1:31:ee:49:20:e7:b2:40:15:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
        Validity
            Not Before: Apr 16 20:01:00 2026 GMT
            Not After : Apr 17 20:01:00 2026 GMT
        Subject: CN=46fa0678ca079bed46a9b86fadc665830bed481f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:a2:4f:6f:75:32:dd:e2:df:19:0d:25:48:
                    2e:18:27:c2:cd:7a:4c:36:f6:7f:28:80:a7:f5:29:
                    16:3f:b7:6c:f0:56:fb:81:99:68:e3:f1:59:1a:7c:
                    23:ea:c3:d8:71:b0:41:df:e1:1e:e1:ad:50:9a:c4:
                    36:5d:88:23:57:cd:cb:e5:37:84:5a:d7:7b:e7:a8:
                    e6:07:d9:9f:f5:76:de:0d:17:1c:1e:2b:a3:33:ae:
                    cb:bf:c7:4b:ba:80:1f:5c:ec:d0:a2:11:d3:ac:ba:
                    ae:f0:63:ef:53:02:9a:24:9a:9c:fc:da:b8:d1:98:
                    53:f2:f8:d3:49:1c:86:58:85:bf:97:70:7a:92:8f:
                    6a:9c:6a:a5:56:8b:ac:6a:eb:99:2d:79:5f:d6:67:
                    64:3b:d1:a2:95:a1:80:31:c4:cd:8a:83:bb:67:fa:
                    5a:e1:7f:a7:57:28:d3:eb:63:7b:ae:b4:b4:f4:5d:
                    56:1e:d6:10:2a:87:d3:a2:3f:10:7e:f6:5f:13:d3:
                    aa:34:8a:6c:24:f3:16:e4:90:88:f6:17:91:b1:6d:
                    46:44:b9:ac:85:cd:d4:c3:c6:92:09:df:e4:74:f0:
                    51:0a:e9:4b:af:d8:58:53:df:cf:e1:66:29:35:fb:
                    f6:08:50:88:13:9e:a0:5e:2e:fe:c1:dd:b7:6f:db:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:06:78:CA:07:9B:ED:46:A9:B8:6F:AD:C6:65:83:0B:ED:48:1F
            X509v3 Authority Key Identifier:
                keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:c5:d1:39:cf:e2:05:e5:2d:53:9e:7c:bb:24:c7:02:a9:
         43:98:02:d9:bb:87:de:d6:89:cf:4c:ba:5e:16:38:2e:8f:a7:
         6b:8a:c6:c4:21:e5:e2:8c:b3:a6:66:8b:32:52:36:14:03:eb:
         98:64:61:6f:a8:05:e5:2b:9f:6e:6c:78:2a:2b:fb:b0:53:15:
         2e:73:31:aa:17:6f:e0:8d:81:f6:e4:1f:29:07:35:56:59:8b:
         51:a3:62:e9:52:74:6f:d5:d0:80:2d:24:ae:a0:5b:9b:ee:54:
         e5:12:ab:45:18:cf:54:cc:02:ce:68:ee:b1:99:3e:d4:52:8b:
         5f:d3:74:a6:c4:d7:42:a9:67:69:f7:fe:ad:8c:e7:23:88:54:
         68:21:55:43:0d:8f:b8:d3:9c:9f:f6:fd:48:ee:8f:50:9b:d6:
         20:d1:5c:03:f3:bb:f5:4a:2a:70:30:5e:44:87:9e:85:bd:e4:
         57:a5:4f:f3:ed:25:87:77:df:45:cf:f8:ba:57:8f:1e:9e:df:
         6b:10:a0:64:c9:18:0e:67:45:81:c0:3a:05:cb:6d:12:cb:a1:
         d1:70:ab:5f:64:7a:f9:3c:71:f3:9e:39:5c:4f:50:3e:8b:41:
         64:bb:1f:a1:02:b8:26:68:46:ee:af:b4:e0:49:16:07:4f:65:
         0c:a4:bd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:03:18 2026 by rpki-client