Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          AMNO+1NQbOQZZNpIRPJIBWct+vVa0WYbSTtKyXdcp1s=
Subject key identifier:   58:55:23:45:9F:C7:7C:11:0C:04:34:3C:D5:64:A4:E0:9A:17:17:F2
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       019D98BDF1D413CAAAA97DF19251708EAD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 00:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:18 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: /5rELh8jX6QG6G1Hghx0/vScZaa+ornWx1maiqaQAlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:f1:d4:13:ca:aa:a9:7d:f1:92:51:70:8e:ad:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Apr 17 00:01:18 2026 GMT
            Not After : Apr 18 00:01:18 2026 GMT
        Subject: CN=585523459fc77c110c04343cd564a4e09a1717f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:34:ae:27:f5:8b:90:5d:72:99:34:44:84:
                    e0:e9:88:a7:cf:e2:47:76:c3:03:70:45:91:eb:d3:
                    68:89:a8:1d:4f:dd:0a:97:34:f5:68:7c:56:2a:84:
                    a1:ea:32:37:bb:ce:bd:89:a0:d0:58:16:23:8d:eb:
                    fb:4b:b3:57:2e:d0:c5:a6:bc:5f:3b:50:84:56:54:
                    7d:56:57:ec:a3:b2:3a:99:37:dc:a7:73:8c:5c:91:
                    7c:c8:a7:a0:e8:c9:de:f8:9a:f4:63:74:60:78:a6:
                    dd:f8:b5:5a:e4:6e:a7:61:dc:c1:2d:3d:b3:ea:39:
                    91:9b:f4:94:a1:25:9d:a5:6c:58:f7:af:f7:28:ba:
                    59:ac:f8:04:07:e6:8d:75:61:45:0f:3a:88:57:50:
                    2d:94:dc:9a:f2:70:d8:db:a7:c0:ce:b1:30:85:4b:
                    6c:d3:76:3c:50:24:bb:e3:d5:b3:4c:a3:11:62:77:
                    d6:6f:0a:ad:d4:9d:a2:17:14:8d:70:1f:73:a1:ce:
                    27:1d:0d:58:92:85:ff:6a:33:38:7b:ba:2c:67:b7:
                    36:40:40:59:e6:eb:2f:03:00:d5:6a:06:d7:2e:38:
                    9c:11:2e:44:e8:e1:d3:20:5f:d8:20:e4:a1:92:8b:
                    fb:9f:9b:00:a6:cf:31:1e:ac:fe:f8:bd:75:13:1d:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:23:45:9F:C7:7C:11:0C:04:34:3C:D5:64:A4:E0:9A:17:17:F2
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:46:d7:ed:fd:47:d9:6f:7b:16:fe:7c:59:e8:05:42:f5:ab:
         a0:b1:a8:b2:23:23:ad:14:d6:2f:4b:2f:8f:69:f4:0a:ff:75:
         b8:f5:d2:03:6f:9a:3c:91:15:f9:84:92:ef:5d:4f:4d:eb:2a:
         df:48:56:c4:40:12:c7:f8:15:c6:ed:f8:15:02:69:a0:af:11:
         b2:af:04:16:f1:ec:22:9f:f4:56:a1:ed:5e:23:b5:31:df:31:
         dc:a1:b6:a7:22:ef:08:d8:bb:f6:01:f2:8f:b9:1f:c2:e3:ac:
         3d:53:b3:16:c1:99:49:dd:4f:5e:27:43:8b:9b:72:f6:c2:f0:
         a9:02:83:1d:85:74:14:72:89:15:ad:4a:7f:a4:1e:2d:73:ab:
         6a:b5:e1:7d:60:56:ff:7c:97:b4:ec:ec:f6:ea:1a:b8:30:0c:
         f6:59:09:58:50:80:71:9d:31:51:b2:9a:ec:c9:28:91:c7:a7:
         c1:0d:6f:57:b8:75:5e:3b:1d:e3:8d:62:43:0b:a1:f3:73:6c:
         29:07:87:26:06:9a:b9:36:dd:0b:18:4c:da:d0:ff:69:f1:7d:
         49:12:5f:4e:e9:6e:45:39:87:94:7d:27:84:91:7b:53:2e:e2:
         ca:2b:71:e3:d9:9d:4a:6d:3f:8c:f7:28:f6:3e:d0:63:4a:20:
         81:cd:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:27 2026 by rpki-client