Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File:                     s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier:          PO9GK25eo2OEWF1dwL2SNkzOY1aA1cROvUdIEMupnFM=
Subject key identifier:   C6:2F:5B:8A:12:7D:62:5D:52:6F:DC:68:C5:01:27:00:AE:AC:AA:FC
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer:       /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial:       019D984F8F44B23FBB120770A13213A29EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number:          162D
Signing time:             Thu 16 Apr 2026 22:00:43 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:43 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:43 +0000
Files and hashes:         1: IdBqw0A4TK6uyYCMeFPtnqsmeRc.roa (hash: 5nFwsjED/xvOkZjCNJO1OpoEyT7doRuSAQWm9AMMmaE=)
                          2: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (hash: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU=)
                          3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: eYkvFjyJi7fA6CMG2LGZZQbeXoWEHFFQNs3bCxhJYkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:8f:44:b2:3f:bb:12:07:70:a1:32:13:a2:9e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
        Validity
            Not Before: Apr 16 22:00:43 2026 GMT
            Not After : Apr 17 22:00:43 2026 GMT
        Subject: CN=c62f5b8a127d625d526fdc68c5012700aeacaafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:8d:9d:bb:94:59:da:1c:33:95:52:03:22:
                    3c:e1:08:46:33:8a:4b:ed:40:26:69:91:48:8c:02:
                    14:07:82:c9:2c:34:19:f6:14:68:2d:cb:ae:e9:e4:
                    5c:2b:71:8a:7a:ed:43:18:75:16:01:1b:58:e5:2d:
                    d3:65:9d:77:86:67:32:39:50:d7:83:e8:49:2a:78:
                    62:59:7e:c2:8f:88:34:34:77:b0:76:a4:ee:1e:04:
                    01:ec:0b:f7:81:88:d5:00:cf:85:43:19:c2:89:57:
                    37:41:3b:cd:e4:95:1a:cd:fc:b0:65:e7:12:1e:1e:
                    25:ca:5d:81:17:7c:1b:d7:60:fd:14:fa:1a:75:10:
                    e5:8f:10:69:51:23:66:79:d5:06:24:37:77:9a:94:
                    7c:f6:66:75:d9:c5:4d:b3:16:62:a9:6c:e1:fb:3e:
                    54:e2:a9:96:58:6c:6c:af:20:f3:0b:e1:58:db:db:
                    fe:fb:cb:ee:f6:9d:dc:a2:96:c2:bd:2d:4f:a6:15:
                    0f:a3:a2:f5:a0:cd:2f:32:f1:85:0b:37:c5:0f:b9:
                    e1:ff:86:c6:e9:88:ef:43:44:ed:cf:ca:7a:1a:b0:
                    7c:b5:30:4f:4a:16:b4:13:01:86:49:76:a2:1c:eb:
                    04:68:49:ee:d8:fd:84:03:8a:30:45:78:48:eb:bd:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:5B:8A:12:7D:62:5D:52:6F:DC:68:C5:01:27:00:AE:AC:AA:FC
            X509v3 Authority Key Identifier:
                keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:e2:bb:6b:30:e6:d6:d0:a3:2a:fd:41:ab:04:11:40:b9:
         54:b5:1a:13:73:2e:e3:e3:71:ce:b9:2a:d9:99:bf:e1:cd:0f:
         6c:20:6f:3a:39:9e:97:ca:fb:08:53:5e:89:96:d1:9f:f6:e8:
         b3:1e:c7:39:3a:06:2e:9e:f1:da:7e:b1:e3:2c:7d:c3:7b:db:
         c5:c9:fb:b3:5a:89:42:8e:19:83:9e:12:62:fc:cb:74:da:46:
         30:66:bc:ea:eb:f0:cd:b9:a2:07:ee:5c:07:91:3a:85:66:57:
         22:4f:e9:df:c6:62:9f:08:b3:95:67:21:6d:41:e4:c0:ec:51:
         c7:be:25:96:2c:43:71:c3:05:0e:c4:c1:df:47:60:2c:f2:3d:
         f2:4d:34:e8:c5:bf:89:c5:39:e3:56:8e:5c:f0:1f:89:2d:98:
         17:d9:db:40:44:b1:eb:27:2b:86:35:e4:f9:16:c9:e2:21:b5:
         69:71:00:ae:de:82:20:12:e7:32:1e:68:fa:bf:e1:28:e0:0c:
         dd:2d:9c:06:29:51:ff:9c:66:a4:9c:52:dc:01:41:aa:7e:bc:
         81:46:e1:36:98:14:2d:7e:68:6c:af:a7:83:40:97:6c:9a:ab:
         9a:c2:83:67:34:a5:9e:53:c1:7e:b2:26:10:12:73:cc:5a:23:
         06:3b:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:35 2026 by rpki-client