Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File:                     1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier:          o4jqvtdlgjacRq2eCW7vEsG4gObqOEk0rTZsCISqGFQ=
Subject key identifier:   6A:C4:9C:88:5C:40:D9:CE:06:40:D1:7C:93:13:CA:C9:71:39:38:CB
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer:       /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial:       019D98867DDF6DE04F4AE9FE55FDE582BB52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number:          0AD5
Signing time:             Thu 16 Apr 2026 23:00:43 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:43 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:43 +0000
Files and hashes:         1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: 62UpLqAMI4rETnLNGVcVaYOeWNf+KOmDGZbdHDNhB4E=)
                          2: dIklPH6MQVoi4FKEgOv-ZNvLOdQ.roa (hash: 8vf5FWodBfFQuv37hN2+e65ZSB5TlTHJUcgDUZ0ExBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:7d:df:6d:e0:4f:4a:e9:fe:55:fd:e5:82:bb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
        Validity
            Not Before: Apr 16 23:00:43 2026 GMT
            Not After : Apr 17 23:00:43 2026 GMT
        Subject: CN=6ac49c885c40d9ce0640d17c9313cac9713938cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:99:96:ce:9c:d8:0a:5f:bb:72:04:d0:81:
                    96:a6:1f:03:90:02:64:02:a7:53:0c:9e:8f:14:e1:
                    b5:a3:f7:14:09:a1:9c:d8:fd:eb:17:29:a9:24:b6:
                    02:f9:a1:cd:1c:59:3f:35:37:66:7d:d7:7e:1d:7f:
                    37:10:90:76:67:f1:a4:64:ae:fe:1b:10:76:af:41:
                    8f:5b:8d:ce:cf:44:8e:5b:a4:bb:5b:ee:5c:a1:65:
                    01:cf:7b:6c:03:69:7a:cd:91:2c:b4:63:69:57:ba:
                    42:e0:47:12:fe:a6:72:1e:8b:5e:34:ab:bd:43:67:
                    fc:3b:2e:0d:5c:1d:40:7c:15:96:12:54:7a:a1:a0:
                    1c:83:b6:0a:9b:2c:75:a5:fc:c0:3a:66:37:e9:b3:
                    d2:1c:54:3e:86:0c:50:50:a6:ef:a1:12:db:3b:c1:
                    0e:9b:5e:f5:e2:96:4a:16:cc:b0:fc:48:08:57:38:
                    5d:aa:63:85:e1:1c:be:db:aa:f1:0d:50:9b:ad:43:
                    52:d6:34:ac:0c:7d:6f:49:2c:e9:04:d4:97:76:f7:
                    c6:f9:31:92:59:32:3f:7a:3f:70:c4:c0:55:4b:a7:
                    db:2f:07:6d:a8:4a:d4:1b:ff:07:ca:7c:e2:f0:88:
                    9d:f5:5f:1c:8e:5c:72:0f:f9:2b:13:76:f3:85:57:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C4:9C:88:5C:40:D9:CE:06:40:D1:7C:93:13:CA:C9:71:39:38:CB
            X509v3 Authority Key Identifier:
                keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:d0:1e:b1:a3:78:65:2a:15:a8:cb:c1:d2:b4:ab:cf:fe:
         36:4d:f5:12:55:ec:64:4e:be:2c:ae:3a:46:c3:f8:6c:6d:10:
         e5:c8:eb:93:a4:4f:76:60:a8:b9:65:b8:a5:46:28:21:59:d0:
         1e:48:7b:b9:5e:3d:72:29:89:4e:c1:64:31:4e:2b:09:dd:46:
         6c:c0:e8:a0:be:11:67:3e:f5:b8:b5:e8:94:3a:58:d9:94:03:
         c0:ce:79:e3:28:aa:23:fc:a7:28:17:04:d7:c3:f5:6e:49:ed:
         2d:1c:79:da:4a:8c:34:67:1e:76:b9:01:bc:8f:dc:d5:ec:30:
         3f:1d:dd:33:eb:6b:ed:17:75:d7:66:fa:09:aa:8a:67:65:ea:
         c2:f6:93:a1:28:99:9d:53:ca:59:e9:5b:b8:cc:4c:ad:92:b7:
         c3:7c:05:f7:57:4a:99:5c:74:ac:58:b9:c5:ae:88:d8:83:82:
         05:22:cb:71:ae:6e:6d:84:e9:1f:bc:59:b3:86:7e:81:14:29:
         ff:59:2c:55:b2:53:f4:30:c7:c9:0c:cc:4f:35:e9:73:74:c4:
         89:cb:3d:c4:f0:4f:a0:63:22:77:e3:ce:8a:5a:82:d7:36:55:
         f5:18:29:59:82:90:6a:7c:7c:b1:84:5c:44:f2:c9:eb:c6:f5:
         fd:1b:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:55 2026 by rpki-client