Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          cJrg85/DFy68ATj59Tkb1jHZTXG88qy9JyZgnCwgeiQ=
Subject key identifier:   B6:03:EA:A3:5C:0A:0A:52:D9:49:4C:D9:BB:49:B9:AC:C5:46:E3:BB
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       019D97E17EC338DFFD155F2877723447BF26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          12E7
Signing time:             Thu 16 Apr 2026 20:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:30 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:30 +0000
Files and hashes:         1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: ++zDCT4ayYsF7lSGJo7u6S5zNWFAqNYcb13pVpIyzQI=)
                          2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=)
                          3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=)
                          4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=)
                          5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=)
                          6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=)
                          7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=)
                          8: T13_FpAETOo3zpDz-m5p4Yo43tU.roa (hash: qg17lmbhvQRAnJl5UzZbEihU9vs9JAWpSUDuAPfFKjI=)
                          9: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=)
                          10: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=)
                          11: _rHhp3dSYrAKOlnkapqRB1yefkc.roa (hash: oed1XeIiLPoYidtZJ6x5WeunpoTBMJO8BbUCjhaG6qE=)
                          12: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=)
                          13: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=)
                          14: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=)
                          15: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=)
                          16: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:7e:c3:38:df:fd:15:5f:28:77:72:34:47:bf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Apr 16 20:00:30 2026 GMT
            Not After : Apr 17 20:00:30 2026 GMT
        Subject: CN=b603eaa35c0a0a52d9494cd9bb49b9acc546e3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:1d:54:1d:52:d6:b7:16:4b:2b:a5:2d:16:
                    21:f1:18:d0:d4:77:ef:f5:3b:d9:73:62:89:fd:ac:
                    a2:50:0f:8c:5a:d1:28:aa:f7:8e:eb:dc:f1:38:8b:
                    62:e5:46:a7:d0:4a:63:2a:f7:8a:28:1f:14:be:39:
                    4c:f3:64:dc:f3:95:c6:34:f2:cd:e9:8a:eb:fe:f1:
                    37:50:9d:ef:bf:62:91:e1:ca:ea:2f:14:e2:3c:51:
                    ed:dd:82:28:4e:63:ac:11:b3:42:6a:b6:11:ea:a1:
                    57:55:c0:5f:8c:6c:7f:bf:8e:a0:54:c4:28:d4:76:
                    1e:5f:79:15:c6:f6:9a:22:95:c5:60:30:23:ba:66:
                    b5:6c:cc:ff:92:7a:20:da:35:41:58:e2:29:98:c7:
                    f3:69:ca:ce:72:4e:b1:ff:2d:a9:80:29:75:21:48:
                    2c:d2:eb:93:3c:d9:36:ca:c8:aa:b5:76:00:04:79:
                    d7:4e:c6:5e:75:41:7d:c6:3f:f7:37:42:f5:c0:d7:
                    4f:67:c2:1c:71:dd:5b:60:8b:e5:1e:b0:89:f8:4d:
                    50:5b:50:da:7c:39:93:68:ce:db:ef:85:e3:c9:9b:
                    a2:f5:64:b1:0e:7d:16:d2:1d:1a:89:4e:77:5b:86:
                    2b:91:9a:d4:91:89:c4:42:0b:6d:1a:d4:eb:e9:d7:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:03:EA:A3:5C:0A:0A:52:D9:49:4C:D9:BB:49:B9:AC:C5:46:E3:BB
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c3:8f:2c:55:fd:ac:eb:72:e4:cd:f1:a3:a9:7b:fd:10:09:
         38:fd:7b:7d:a8:1e:48:2d:b5:9f:42:87:91:28:2a:98:2b:0e:
         3c:94:60:f7:8f:59:61:55:4a:fe:4b:70:a3:12:32:c8:a6:b4:
         63:7a:3f:d7:7f:b5:6f:2d:fb:d0:ab:1d:f4:2f:e5:16:bb:6c:
         66:9a:84:95:e3:b2:52:ea:94:ee:97:68:35:7c:d1:b0:51:c4:
         f1:41:27:1d:ea:58:98:b3:c3:08:1e:6c:d4:2f:6d:9b:b8:2b:
         e6:db:3c:3e:c3:8a:da:43:1b:19:ea:ea:8a:f8:8b:34:07:6d:
         87:5f:38:51:08:3d:8a:30:e9:ff:99:6c:12:ab:8c:06:85:0f:
         86:82:a9:d1:02:b9:6c:86:2f:5f:69:cf:db:5a:60:ea:ea:f2:
         b0:f9:8b:e3:b5:38:dd:8b:ca:09:6d:64:cf:2e:4e:dc:79:7d:
         04:c3:51:a6:18:d6:f7:28:74:89:58:2c:fc:a4:96:23:48:b5:
         9d:46:ef:7c:b1:f7:a0:f6:9d:5c:ac:2f:b9:8e:5d:e8:82:2b:
         c8:79:74:f0:72:e4:2a:ef:16:89:d8:8c:a9:f0:1e:c5:d5:41:
         6d:1f:9e:37:ea:59:48:38:cd:28:c1:a6:e9:3f:c3:23:a4:94:
         78:6f:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:10:27 2026 by rpki-client