Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          gzb2N9wAPtYPpDL8gXru69mfBXkLFinXP+P4CLbODVc=
Subject key identifier:   E7:DE:19:AC:00:46:D1:0D:55:96:C9:74:7F:80:48:52:18:4B:91:BB
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       019D99D0B41BA1FE714DD9793FDB313D5197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          0848
Signing time:             Fri 17 Apr 2026 05:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:24 +0000
Files and hashes:         1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: 8raK6YusysoGPmIaEOtOZbeT0QclgZWMCDqjlyZSQ3E=)
                          2: ET0FEwtBWcNF1w6-haZ741PxhEE.roa (hash: ewl+EUT/eRs8CzyYcj651WLEqPS9XoO9of4XQBHw70I=)
                          3: fiv0OI-AqtRVVrzWS5rFRgZaVys.roa (hash: oh8Kp8XMS/i+hHdda1I22uBBGuzEAYFA2en/nHrlnSs=)
                          4: t8aFQS7lWhuM_-J21qq8wpHr948.asa (hash: IcDTJWBpBF8MZ144faOgduVI2vqGFOUYWFm0kF+tK60=)
                          5: uWhFb1HwZvJ_IfY-iiz9y_hTepY.roa (hash: 7jH7FBgqrDkvhTn6gZysjOdIXNNg1HK77FI6FjOJlP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:b4:1b:a1:fe:71:4d:d9:79:3f:db:31:3d:51:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Apr 17 05:01:24 2026 GMT
            Not After : Apr 18 05:01:24 2026 GMT
        Subject: CN=e7de19ac0046d10d5596c9747f804852184b91bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:32:f5:10:df:75:40:e6:28:0b:3b:b6:ab:
                    a6:32:d2:58:cd:1d:19:30:f6:b7:e5:09:79:b5:b9:
                    84:66:b7:8c:aa:dd:93:4f:14:cb:d7:08:47:10:dc:
                    ca:f9:da:e1:81:ff:5d:44:23:5e:e4:da:3f:27:04:
                    17:40:d1:bf:3c:97:e5:cc:98:41:59:7e:0c:02:3d:
                    0a:2b:81:a2:ef:36:69:4e:75:34:e0:31:a0:29:9d:
                    c4:36:25:47:7c:ff:c9:43:6e:ab:f7:33:8d:6f:96:
                    2a:46:30:d1:e5:f9:5c:52:93:11:ce:8d:84:5d:b7:
                    b4:76:fd:aa:5a:9f:ef:f5:d8:12:ae:db:e5:61:bc:
                    ea:a8:21:c3:bb:fa:f4:63:b5:39:0a:8b:22:3e:27:
                    92:d8:7c:52:f2:d9:57:0a:aa:4b:bd:b0:4e:a4:46:
                    b1:26:2e:4d:10:23:ec:d5:9e:21:27:fa:10:8b:2f:
                    5d:76:b8:92:54:15:44:cf:ea:d8:92:0a:e6:04:e4:
                    43:c4:cc:6d:e4:8a:bd:44:11:8d:c6:07:b6:b4:e7:
                    4d:22:0b:38:4c:3e:ce:2b:24:fb:1a:34:bc:9a:99:
                    aa:09:82:79:c6:cf:29:08:0f:03:95:23:51:fc:81:
                    ee:50:7c:c3:23:a5:44:54:79:fc:2d:20:f8:6e:40:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:19:AC:00:46:D1:0D:55:96:C9:74:7F:80:48:52:18:4B:91:BB
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:a5:bc:2d:82:55:5f:5e:2d:18:1d:ab:a6:c6:ad:17:f4:
         6c:3a:f7:0c:6d:f5:8f:ff:de:07:a7:03:2e:c7:6b:d8:84:ce:
         54:48:e9:5b:81:83:05:bd:66:32:81:d3:c6:ad:59:ad:d0:2d:
         ec:e2:a4:8f:4c:2f:37:3d:c1:60:46:86:46:3d:86:8c:37:f7:
         71:74:4d:7a:d5:75:2b:3c:38:7c:4d:f3:09:8a:b5:a8:60:38:
         d6:6a:e7:1c:83:21:4f:ad:13:88:63:db:28:0c:c1:28:28:b2:
         b4:40:d7:f3:c3:32:f1:66:63:0d:0d:3e:64:2d:f4:c1:26:96:
         b0:da:1a:5e:c7:8d:fe:af:f3:c2:1e:72:d1:a2:ba:9c:27:e2:
         fe:6d:bf:12:85:c0:cc:b5:bf:61:ce:1d:26:30:80:b0:45:02:
         01:0d:62:7b:bc:40:f4:6f:5c:4e:f3:96:95:02:0d:bc:b0:13:
         8b:b4:f1:de:e0:e1:65:6e:7b:6b:3d:2c:19:60:c0:d0:c9:ba:
         ef:b6:c7:40:91:77:f9:eb:b3:51:34:f3:bb:4d:44:01:b6:a2:
         1d:72:ef:b2:df:ec:f0:6a:3d:63:98:75:40:1d:df:d2:af:0b:
         42:6e:38:3c:6f:a2:2a:20:76:82:63:e7:b1:88:ac:77:85:75:
         f8:e0:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:26 2026 by rpki-client