Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File:                     q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier:          ouOwumEfaM4mKsMPGht0EtnaaEa2oI1v1TiboBc8N4M=
Subject key identifier:   E6:63:69:D0:8C:FA:19:D1:64:92:03:91:86:3F:CC:5A:F0:A8:AF:CC
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer:       /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial:       019DA48AC28A57D60E822A0F191DDA70DFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 07:00:50 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:50 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:50 +0000
Files and hashes:         1: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: 0VpToyT469i3ipHNbgVAKG0lEkGpchzLekXqtBuBFh4=)
                          2: tQeq3gyDlggE_iMVfQtijaWolKE.roa (hash: +8U51vzZRoC0d7LUoiUC8rmqZBGQmF1Hqr6UPr/Xav8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:c2:8a:57:d6:0e:82:2a:0f:19:1d:da:70:df:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
        Validity
            Not Before: Apr 19 07:00:50 2026 GMT
            Not After : Apr 20 07:00:50 2026 GMT
        Subject: CN=e66369d08cfa19d164920391863fcc5af0a8afcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:e8:37:39:5f:81:13:c7:77:92:24:6d:8b:
                    77:4a:e2:54:a6:b6:21:bf:7a:ad:60:86:f3:51:e6:
                    89:84:55:4d:50:88:be:97:f3:56:1f:89:b2:1d:3b:
                    4c:0f:a1:53:a1:08:fd:e3:07:44:00:8c:4e:40:80:
                    d8:03:08:2a:74:b7:33:1c:36:11:f1:fd:69:41:38:
                    7e:17:f4:aa:62:fb:6e:ca:75:de:03:4e:35:e5:f0:
                    e0:c5:e2:e7:0f:cf:62:ed:42:b8:8c:b0:12:a9:ff:
                    db:c4:23:57:ea:0c:58:c9:25:f4:2b:77:3c:30:78:
                    ba:63:78:29:16:11:19:03:57:64:37:5e:29:1c:52:
                    4d:51:af:49:86:58:03:89:cf:fc:71:6b:39:73:13:
                    99:52:f7:ee:4a:bb:12:f8:9b:e0:42:da:57:a1:d3:
                    06:8b:08:13:84:32:22:39:b8:75:85:b9:f7:b3:5c:
                    76:9d:07:b0:cc:77:65:65:fc:63:e8:89:c1:4f:7e:
                    de:21:cf:da:f8:43:cc:ae:00:e2:71:7a:3c:be:ae:
                    b5:e1:1a:a7:71:dd:e6:cc:8c:4d:e6:1b:8b:a1:89:
                    dd:b2:ad:54:f9:0a:0e:de:96:e5:f4:98:f0:86:e7:
                    57:25:40:7e:57:1c:13:e4:9c:83:97:d8:e8:93:70:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:63:69:D0:8C:FA:19:D1:64:92:03:91:86:3F:CC:5A:F0:A8:AF:CC
            X509v3 Authority Key Identifier:
                keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d8:1c:c2:52:86:92:02:d5:14:be:b2:50:e9:3b:48:48:3e:
         70:37:50:06:99:f6:21:34:47:b8:e8:3a:15:c9:22:d6:ef:f0:
         da:27:44:5d:50:57:d6:78:e4:03:24:08:ba:6e:82:71:c1:6e:
         0b:66:96:c2:55:83:c1:7f:bc:75:14:17:ee:da:74:7e:f2:55:
         d4:6e:b0:91:62:1d:8e:89:3c:83:54:87:08:66:7e:8b:13:40:
         f0:c0:39:eb:29:4f:a7:c7:62:7a:4d:b7:0f:f9:52:47:d1:2f:
         aa:07:1b:a7:63:d8:6b:d7:3f:f4:82:d7:07:97:28:05:c3:b7:
         96:de:5f:8d:c0:d8:24:91:23:f9:d1:6d:b9:d7:e6:ca:e1:c9:
         6d:7e:74:99:cd:44:91:7e:54:37:20:69:be:dd:d2:a3:6e:aa:
         82:20:69:59:ef:06:10:62:96:96:e6:1b:5d:7f:2e:6f:b7:7e:
         1d:ed:cf:ff:dd:67:2e:9c:ca:b2:f9:13:09:6e:25:89:93:48:
         e9:14:2a:15:d2:f2:05:68:98:e7:f0:03:b5:3b:16:95:fe:f3:
         ef:89:61:91:76:af:4a:1b:df:48:d9:07:eb:ea:7d:c3:54:0a:
         f0:5e:0e:c3:fd:6d:d0:ac:09:0d:48:a6:69:66:6e:dc:71:ff:
         83:05:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:31 2026 by rpki-client