Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File:                     6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier:          NQiw/uV/nHL8wdHv86NjeXZ5ETkKgcBh66g5ISk8/EE=
Subject key identifier:   7E:09:9C:58:27:D9:D5:60:56:CC:F8:52:61:96:B6:B2:87:AC:27:C8
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer:       /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial:       019D9A3E9D2D1FE0D7F96C25D633BF3619D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number:          1854
Signing time:             Fri 17 Apr 2026 07:01:27 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:27 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:27 +0000
Files and hashes:         1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: yOcU7Ji9fnRYwG7YMBAdqRvg/1cIxU+PSZ3BgNo9CxQ=)
                          2: m2Z0wBEzN8fscwTDloF7hDYFp-U.roa (hash: RR+TM2qfe7c3hOxq3hLFeEmbYbML3r9sN4F/EITsexg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:9d:2d:1f:e0:d7:f9:6c:25:d6:33:bf:36:19:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
        Validity
            Not Before: Apr 17 07:01:27 2026 GMT
            Not After : Apr 18 07:01:27 2026 GMT
        Subject: CN=7e099c5827d9d56056ccf8526196b6b287ac27c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:ec:0c:54:db:09:18:dc:a8:46:df:39:86:
                    8b:a5:89:11:b3:9c:66:9b:2e:2f:1b:74:95:df:b2:
                    52:df:5c:2b:4e:7f:c5:8f:d0:84:56:c3:b9:49:c4:
                    e2:cb:d7:ec:21:85:5a:a1:87:b2:a2:d2:fa:67:99:
                    51:92:d5:da:31:46:4b:6b:a2:77:5f:68:56:8e:bd:
                    2c:49:13:c6:f4:d1:4a:5c:9e:62:20:3f:de:32:81:
                    a2:d6:7f:de:35:b8:14:b6:61:bf:02:5b:fb:40:09:
                    fd:dc:30:02:08:7d:2a:9d:1d:21:15:93:b9:a0:21:
                    85:b3:aa:b2:76:dd:2a:f7:b1:87:92:54:ce:91:dd:
                    09:57:5a:4d:c9:76:60:49:aa:ed:55:08:c1:74:d9:
                    73:72:3a:71:25:40:79:7c:93:30:2a:fe:03:35:6a:
                    32:22:0d:d5:55:06:06:f5:72:3b:51:4c:bb:b4:44:
                    c5:d5:ed:2f:55:a4:98:7b:5b:84:87:c0:a9:e6:16:
                    ca:58:ec:fa:23:9d:97:d0:5d:55:e0:8f:c7:fe:24:
                    b4:70:6f:57:4e:70:c6:33:6a:72:0d:6e:ce:a3:6b:
                    14:60:15:03:82:1f:6f:2a:da:75:70:3a:f1:be:78:
                    e9:6f:91:d0:5c:fe:e3:64:19:d2:3f:d3:c8:5a:38:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:9C:58:27:D9:D5:60:56:CC:F8:52:61:96:B6:B2:87:AC:27:C8
            X509v3 Authority Key Identifier:
                keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:ee:a7:36:6a:ff:d3:65:d1:4f:32:40:61:c8:49:27:0c:2a:
         a9:5b:ea:90:41:1a:61:57:a9:95:c6:e3:f1:61:45:59:9c:70:
         a1:fe:0e:9f:58:88:3d:a5:5d:51:5d:d5:a0:e6:37:fe:5a:f1:
         14:be:80:d4:06:02:6c:7c:60:42:a1:aa:fe:f3:92:0e:c7:3e:
         f8:c4:55:5e:4f:f1:38:37:31:ae:4c:2a:07:6c:a2:e9:dc:a1:
         d5:3b:82:0b:c3:1c:44:71:49:f5:c3:e3:a0:94:82:99:30:b9:
         c7:0d:99:1e:7e:d0:ea:7f:d3:92:26:23:da:9e:6f:f6:56:7c:
         a2:98:30:61:e3:b9:1e:d9:14:b5:27:a0:c3:88:f0:86:6d:60:
         bb:1d:94:2b:1a:ab:71:2d:42:5f:84:4d:1e:00:6f:55:01:cf:
         0f:03:a0:67:1d:cc:0a:6b:5d:d4:c4:80:a0:b8:81:40:f3:72:
         b5:6e:1d:9c:4b:95:7e:1c:39:c6:55:39:be:39:66:3b:24:ce:
         87:39:b5:87:e8:8c:eb:87:c4:04:a7:2a:4b:4e:91:15:e4:70:
         f3:e7:f5:13:31:08:dc:db:2e:b3:ad:67:32:a2:13:00:8b:c8:
         ae:30:b8:c6:09:81:ec:99:70:b2:ff:9d:67:1b:58:45:12:2c:
         8d:3c:81:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPp0tH+DX+Wwl1jO/NhnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NjM2MGRiODFmNTA1YzVlOWE5YjVhZDEwYTgxYzY0ZjRh
ODViZDIwHhcNMjYwNDE3MDcwMTI3WhcNMjYwNDE4MDcwMTI3WjAzMTEwLwYDVQQD
Eyg3ZTA5OWM1ODI3ZDlkNTYwNTZjY2Y4NTI2MTk2YjZiMjg3YWMyN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvvsDFTbCRjcqEbfOYaLpYkRs5xm
my4vG3SV37JS31wrTn/Fj9CEVsO5ScTiy9fsIYVaoYeyotL6Z5lRktXaMUZLa6J3
X2hWjr0sSRPG9NFKXJ5iID/eMoGi1n/eNbgUtmG/Alv7QAn93DACCH0qnR0hFZO5
oCGFs6qydt0q97GHklTOkd0JV1pNyXZgSartVQjBdNlzcjpxJUB5fJMwKv4DNWoy
Ig3VVQYG9XI7UUy7tETF1e0vVaSYe1uEh8Cp5hbKWOz6I52X0F1V4I/H/iS0cG9X
TnDGM2pyDW7Oo2sUYBUDgh9vKtp1cDrxvnjpb5HQXP7jZBnSP9PIWjgMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4JnFgn2dVgVsz4UmGWtrKHrCfIMB8GA1UdIwQY
MBaAFOhjYNuB9QXF6am1rRCoHGT0qFvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMt
NzYxODliZDRhMDQwLzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMtNzYxODliZDRhMDQw
LzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAze6nNmr/
02XRTzJAYchJJwwqqVvqkEEaYVeplcbj8WFFWZxwof4On1iIPaVdUV3VoOY3/lrx
FL6A1AYCbHxgQqGq/vOSDsc++MRVXk/xODcxrkwqB2yi6dyh1TuCC8McRHFJ9cPj
oJSCmTC5xw2ZHn7Q6n/TkiYj2p5v9lZ8opgwYeO5HtkUtSegw4jwhm1gux2UKxqr
cS1CX4RNHgBvVQHPDwOgZx3MCmtd1MSAoLiBQPNytW4dnEuVfhw5xlU5vjlmOyTO
hzm1h+iM64fEBKcqS06RFeRw8+f1EzEI3Nsus61nMqITAIvIrjC4xgmB7Jlwsv+d
ZxtYRRIsjTyBGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:41 2026 by rpki-client