Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
File:                     g6PKzqjF0dmJsH6m4JdKANoDako.mft (raw, json)
Hash identifier:          KfzBs02DdrfPerQ6Ppnu7jEg+OCaLDXYC8TBv6rPjB0=
Subject key identifier:   9C:99:96:65:E1:75:3A:20:48:90:13:53:A7:F0:E2:71:90:49:09:24
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Certificate issuer:       /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial:       019D9D082A1AC72610A8D109F7B2EFD10C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
Manifest number:          0178
Signing time:             Fri 17 Apr 2026 20:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:51 +0000
Files and hashes:         1: eTK6_P37nQZzruBHzeHGcO4T3zY.asa (hash: tOEzSunzuWj37U3B09PX4r97OTZ1nR4yyZSVGcYBXmU=)
                          2: g6PKzqjF0dmJsH6m4JdKANoDako.crl (hash: gL+Z3jdPTVoInh1pxBpyCdVcUMU2UtZU0jU5Pa9Nf4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:2a:1a:c7:26:10:a8:d1:09:f7:b2:ef:d1:0c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Validity
            Not Before: Apr 17 20:00:51 2026 GMT
            Not After : Apr 18 20:00:51 2026 GMT
        Subject: CN=9c999665e1753a2048901353a7f0e27190490924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:6a:93:30:1a:50:ee:a0:70:59:14:2d:0e:
                    d9:f4:5f:4f:85:bb:d9:89:0f:53:4c:3f:de:71:78:
                    3d:f5:99:16:12:0c:28:d9:6e:50:28:c5:41:12:d2:
                    73:04:ec:aa:a0:0b:b7:cc:05:fb:95:f7:59:03:9e:
                    c1:e7:28:ad:5a:eb:d3:ed:ee:0c:55:9a:09:d6:38:
                    f0:f8:7c:cd:a1:7a:b6:aa:77:4a:9e:88:01:9c:ee:
                    2f:b7:43:6f:e3:ee:4a:02:7f:68:c5:bb:d4:e0:54:
                    d5:b3:9c:c7:5d:d8:ad:e4:b3:4e:f4:76:4f:87:64:
                    97:85:9e:2d:58:13:de:25:c4:32:a1:9e:54:ae:2e:
                    ed:5e:bf:50:33:04:83:ba:83:98:3e:1e:f9:69:45:
                    47:7e:5f:a6:7a:be:26:b6:68:71:90:dd:b7:fa:87:
                    3b:3c:76:a5:72:0b:41:d7:3d:f4:c2:98:71:45:52:
                    23:d9:da:88:c0:7e:53:2a:52:f4:d5:37:4f:ca:9f:
                    04:bc:44:a9:d5:13:b7:9d:86:d4:d4:40:5d:5c:46:
                    65:bc:59:17:a5:3c:84:3a:ce:88:0f:1d:9e:47:ea:
                    a1:2a:72:f1:d2:97:82:d0:a7:e8:30:a2:d1:49:b0:
                    98:2c:6c:7c:0f:c4:a6:94:de:ad:b4:07:5a:fb:82:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:99:96:65:E1:75:3A:20:48:90:13:53:A7:F0:E2:71:90:49:09:24
            X509v3 Authority Key Identifier:
                keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9c:21:02:8a:cb:8a:3c:b1:de:47:70:f5:c2:4f:f9:73:2e:
         78:62:c1:7c:93:25:9b:83:b8:4b:12:d7:d1:5f:b4:d3:d7:b2:
         ff:e2:7a:86:2f:e2:2c:77:47:b4:43:be:f0:b5:4b:89:b6:67:
         8c:44:8d:0e:bd:4c:d1:b1:10:26:b2:77:26:1b:db:75:18:6d:
         5b:e7:06:c3:7a:9e:51:0d:1c:bb:6f:65:2c:56:39:7a:30:15:
         9a:5c:81:41:31:02:f0:f7:e6:2e:83:92:08:a9:97:5d:ca:db:
         12:10:65:44:fd:e1:ca:14:55:45:80:d1:f4:ac:12:5b:e9:aa:
         49:af:e2:e7:53:97:8c:f0:6e:2c:66:9c:36:57:6f:ad:6e:28:
         49:92:29:5b:11:bf:d8:63:28:74:b5:3e:dc:f5:35:97:d0:51:
         d7:7d:f1:fd:58:11:a6:34:92:7b:96:90:60:8a:6e:78:2f:fe:
         19:bb:4c:38:38:77:b7:16:56:4e:88:f6:88:ca:7a:61:06:41:
         30:f1:bd:fc:78:b4:67:05:54:45:e9:3f:f6:ef:94:aa:9b:7b:
         40:14:9d:5f:42:e2:6c:c9:52:41:6c:b6:51:48:7e:ad:31:c6:
         7f:02:d0:0a:e1:4d:9a:3e:90:f0:5d:e7:74:7f:98:49:23:41:
         03:11:91:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:46 2026 by rpki-client