Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
File:                     6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json)
Hash identifier:          1xxttjEtOLrv392k2JVB6leP14BcZOCa1/hif3ZKydU=
Subject key identifier:   D7:74:95:5E:12:02:B4:4A:38:11:B1:BD:64:2A:73:61:E7:12:8E:DD
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Certificate issuer:       /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial:       019D98866CCD763B2F42AFA5EED6E24F6B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
Manifest number:          18BF
Signing time:             Thu 16 Apr 2026 23:00:39 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:39 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:39 +0000
Files and hashes:         1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: iivZODzGtVyNuqI/jVlofETB2BCDFQXOB+QB3ci90fQ=)
                          2: WY3x6Nj5UF4V6lDGjNvXztQ1Byo.roa (hash: aBowCUk8GvTX31weJsT2u+VJHO3DLPfjbtv1Dgnekcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:6c:cd:76:3b:2f:42:af:a5:ee:d6:e2:4f:6b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
        Validity
            Not Before: Apr 16 23:00:39 2026 GMT
            Not After : Apr 17 23:00:39 2026 GMT
        Subject: CN=d774955e1202b44a3811b1bd642a7361e7128edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:3e:c9:22:93:4d:81:a1:9b:a0:61:36:50:
                    a9:80:51:d4:0f:92:32:51:e1:91:d2:27:82:d8:22:
                    87:87:db:0b:79:4b:a0:7d:ff:44:40:43:95:9f:a9:
                    20:80:45:9d:1d:79:46:09:36:4b:26:69:52:69:1e:
                    66:d3:56:1c:ff:87:06:ce:80:b5:a1:a1:50:08:ee:
                    ce:1e:3d:4d:1b:ad:91:c6:6a:3b:05:9c:65:b9:3e:
                    5f:81:da:4b:eb:8b:34:30:1d:86:7d:dd:04:c1:11:
                    28:2c:da:17:b4:22:88:64:78:f4:bc:e1:b2:1d:54:
                    bf:7e:31:38:92:e3:76:08:69:a3:e9:04:b1:3e:99:
                    29:8c:8d:cf:24:83:94:c8:84:9e:1d:5a:93:a6:2a:
                    07:cc:e5:0f:5e:d7:6d:c3:66:c1:1a:be:75:c0:67:
                    90:3d:4a:06:30:1a:56:47:ee:b0:57:0b:71:27:c8:
                    95:b7:42:69:a7:6d:7e:60:f3:f9:9e:1f:4c:43:12:
                    9b:6d:cb:2f:5d:16:8f:b9:fb:b8:09:bf:33:aa:8b:
                    ea:d2:28:8c:ce:25:44:f6:68:3b:31:d4:20:cb:9a:
                    3b:af:fb:a7:a1:cf:ba:4f:39:79:da:73:21:42:21:
                    d9:ec:9d:86:b8:2d:10:14:56:c0:e3:e9:bb:b5:6e:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:74:95:5E:12:02:B4:4A:38:11:B1:BD:64:2A:73:61:E7:12:8E:DD
            X509v3 Authority Key Identifier:
                keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:21:2f:b9:65:06:c7:ce:45:dd:9c:89:d8:77:71:51:28:34:
         e6:10:a4:4f:61:8f:d3:90:49:72:10:c4:c9:26:f4:a9:2f:05:
         b5:fe:c4:87:b1:00:c1:b2:74:ec:7f:f7:30:05:59:90:46:f2:
         f5:ec:bd:6e:d7:13:c6:3d:4b:18:6c:8a:05:87:54:c1:e0:5f:
         62:38:a5:5b:a0:5f:33:bb:ce:86:6d:11:9b:5d:71:d7:3d:ec:
         6c:56:3b:c1:49:0a:1a:c9:d1:e7:5f:f8:dc:fc:8c:a9:90:b6:
         3b:c2:8b:cd:4a:74:a7:a8:55:31:77:52:a0:08:35:d5:7a:5e:
         e5:83:fa:e4:f9:ab:9e:78:c0:b6:d1:ea:4e:5e:19:6f:3b:a0:
         0e:11:cc:63:d6:ed:9b:cc:14:de:6a:42:4a:fc:07:f1:cd:1f:
         74:3b:12:b3:e0:be:77:08:25:22:bf:4f:1f:cb:c6:8f:da:9d:
         32:01:ee:84:96:81:aa:25:e0:f6:a2:31:db:e2:f9:3f:1e:a3:
         72:28:b0:f0:4a:ba:5a:a6:01:47:9c:55:cf:60:60:68:cb:2c:
         30:4e:85:b6:bc:13:4d:6c:7e:2d:45:b3:4c:68:4f:cb:b7:9a:
         b9:fb:29:59:9c:0b:1f:5d:c6:53:81:84:bc:55:26:a8:62:94:
         86:38:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:59:39 2026 by rpki-client