Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File:                     L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier:          hMMa1LY5FmNPfj1hBIUpY5M6sY92wMpUcwK1cW1ZLvs=
Subject key identifier:   E5:EA:72:23:A6:23:69:0C:C3:CE:21:EB:74:26:AE:93:78:81:65:68
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer:       /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial:       019DA3E6A4CCEB9F2969713795AF8D1C2A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 04:01:34 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:34 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:34 +0000
Files and hashes:         1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: gnkihJUJW7fWFbc4pTntmCKEEhAfa4KplalPp08s7UI=)
                          2: XWGt8zvOb_kyT4bEnqa0uouBMAQ.roa (hash: ESSg/Q2R5xzvrkRwDMiUY8zSunMkng9nL/T25F+EMmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:a4:cc:eb:9f:29:69:71:37:95:af:8d:1c:2a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
        Validity
            Not Before: Apr 19 04:01:34 2026 GMT
            Not After : Apr 20 04:01:34 2026 GMT
        Subject: CN=e5ea7223a623690cc3ce21eb7426ae9378816568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:bc:28:3e:a9:4b:18:45:6f:04:44:28:9a:
                    54:6d:1d:69:e2:01:1c:e2:c9:7e:26:06:76:15:0a:
                    6a:49:fb:1a:7b:8a:90:9d:82:e6:a4:61:62:4f:b9:
                    72:04:5e:2f:55:b6:fe:bb:b4:71:70:42:72:52:4b:
                    d3:83:78:21:82:d5:b7:49:59:fa:c0:07:5b:86:a4:
                    09:a9:b8:58:6c:18:11:56:88:d9:a0:ec:24:a5:e5:
                    16:04:5d:0f:fc:65:66:00:d3:0a:07:80:3b:0a:61:
                    22:8a:b3:56:f3:fd:93:56:84:5d:92:b7:25:fe:ee:
                    64:d8:c3:08:ea:c9:a2:b3:8e:a6:3e:71:86:8d:62:
                    91:d1:64:57:27:f4:1c:3c:09:82:56:71:2e:bc:27:
                    a6:f0:4d:43:5f:c2:ca:e8:59:db:68:32:d5:95:83:
                    89:f6:77:b0:21:2c:b1:15:3a:36:f3:90:5a:fd:e7:
                    82:19:c9:2f:55:02:92:b2:99:d6:a7:6a:34:98:ba:
                    69:36:f5:7d:87:e7:8b:fc:b0:2d:86:89:d3:2b:42:
                    56:74:4b:47:08:1e:65:ac:e0:d9:a8:de:f8:b0:67:
                    e3:05:b8:7b:b7:c6:8f:9a:b5:16:37:3c:ae:e6:62:
                    c5:cf:f6:2f:5d:41:ec:bb:35:eb:ec:a5:f5:ca:4c:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:72:23:A6:23:69:0C:C3:CE:21:EB:74:26:AE:93:78:81:65:68
            X509v3 Authority Key Identifier:
                keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a6:52:69:9c:df:67:00:17:37:79:d9:38:76:6e:bc:3a:20:
         5d:e3:49:1a:bc:39:39:a1:c8:6c:34:f5:5e:93:e7:19:59:10:
         62:48:18:3d:88:10:e3:da:94:95:b5:94:1e:15:f9:aa:ce:d3:
         fa:9d:9f:e0:0d:8c:eb:ff:36:9f:4f:15:36:9a:74:89:98:cf:
         ec:09:54:41:2d:77:22:0c:e7:e6:7c:4d:f3:83:3d:67:02:e7:
         0f:0c:1c:a0:4d:b0:b5:aa:e5:b7:42:d8:36:3f:49:c7:2d:9b:
         0d:a0:fe:22:bf:ec:20:44:43:b3:5c:d7:3b:17:a6:53:67:41:
         41:5e:7c:39:bc:fe:ee:7f:d3:15:4c:2b:1c:ae:c2:fe:a6:10:
         0f:97:05:17:c0:83:66:85:50:00:06:33:a6:f2:38:1c:f3:2e:
         d3:e8:22:2a:4d:c7:3c:58:d8:5b:ac:e8:63:4a:98:16:f9:9a:
         57:ac:0e:79:60:76:bb:ec:f0:19:b3:8f:4b:3c:5d:fd:ec:23:
         53:67:dc:e8:b0:e5:bb:d8:e9:50:b0:69:04:1f:a8:57:93:2c:
         39:29:a7:99:40:53:05:64:1c:63:ba:eb:9b:d9:4b:c1:29:0d:
         bb:a2:6c:13:da:64:62:0c:af:b5:08:d7:ac:b4:e9:c5:bf:c2:
         a8:40:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:10 2026 by rpki-client