Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          gVc46zRjucbDsLKMOgkHbJFA/WpwxOGS580zhMwGofg=
Subject key identifier:   6C:53:9D:59:50:48:7E:A8:6D:2E:C8:6C:E9:DF:A6:0F:A3:B7:38:E7
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       019D992B6313A2B311FE3E7D18B459A7BA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          06EA
Signing time:             Fri 17 Apr 2026 02:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:50 +0000
Files and hashes:         1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: 64S36RvbjfQ2BOUUBAMKJyWkQq+wsqDZimqTzjum9+I=)
                          2: moBWHmY5dUscCoFGFgkj8lgTo6k.roa (hash: SdWsLpL7bWufA3L06GIvSvKd8LEI6DM8Lhn01PlHx/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:63:13:a2:b3:11:fe:3e:7d:18:b4:59:a7:ba:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: Apr 17 02:00:50 2026 GMT
            Not After : Apr 18 02:00:50 2026 GMT
        Subject: CN=6c539d5950487ea86d2ec86ce9dfa60fa3b738e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:65:b0:92:7b:8a:77:32:05:b2:88:b9:28:
                    9c:3f:23:b3:6d:82:14:69:43:0d:4c:48:5a:7d:48:
                    a5:3e:87:71:98:e6:b2:11:11:7f:bd:1e:81:4e:03:
                    72:ef:c3:68:bb:48:02:fd:40:a8:be:83:82:e4:1b:
                    eb:59:ed:1b:3a:2b:58:0c:f9:c3:ae:36:5f:27:c8:
                    32:f0:eb:fa:63:86:58:c5:e8:88:2e:0a:6a:4e:32:
                    21:da:16:0d:01:32:41:30:95:82:50:f7:27:7f:eb:
                    d5:fc:32:0d:4f:9d:82:87:aa:d1:6f:8b:c2:14:03:
                    68:56:02:b7:83:f4:f2:a9:35:64:39:96:75:a2:60:
                    0a:59:93:27:d9:35:70:2f:c7:e2:2c:00:eb:17:47:
                    6e:0c:5a:95:3f:75:78:66:4b:82:0c:b7:b8:ea:7b:
                    a5:37:45:68:66:fa:d1:96:b8:da:69:86:a7:05:e7:
                    e0:74:aa:3e:9a:01:37:57:dd:93:f7:f5:50:5c:b1:
                    48:64:74:c1:d7:47:14:5a:6b:ce:66:63:7e:77:6a:
                    04:6f:fa:5b:11:9c:55:43:e8:18:7f:7e:bc:33:e5:
                    0a:b8:12:0e:51:e2:7d:0a:68:7b:a7:8b:f6:8c:50:
                    ec:54:c1:e9:67:31:ab:38:e0:97:e5:60:b4:d2:be:
                    6c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:53:9D:59:50:48:7E:A8:6D:2E:C8:6C:E9:DF:A6:0F:A3:B7:38:E7
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:7a:89:a3:c2:02:2b:b8:ab:b6:79:e2:5a:99:44:e8:dc:
         62:91:a3:51:63:7e:16:ed:c2:cc:97:c9:bb:2f:af:cb:a8:20:
         3c:8b:0d:e2:fb:ea:f0:84:da:c4:26:4c:91:cf:3f:63:e7:0e:
         f6:04:bb:43:cb:b9:1f:1e:bb:6e:4c:97:9a:57:4e:a3:87:3a:
         da:9d:0b:35:18:a8:19:87:b5:01:dc:2f:2e:46:9c:ca:cd:f8:
         67:81:7c:b4:f7:4e:de:81:5c:19:cd:87:d8:dc:fa:5d:45:eb:
         b9:51:54:08:18:61:d1:15:3c:5b:dd:a9:50:f9:7f:8a:af:df:
         89:e9:b4:19:36:32:e7:06:b9:2b:86:c4:e4:a5:22:38:fb:2a:
         e6:5c:70:69:a9:80:bc:25:32:20:d1:92:65:87:74:f7:2e:5e:
         cc:f8:22:15:f6:28:d4:9c:9d:6e:8a:31:21:85:b1:94:fe:a2:
         a8:26:0d:62:7b:05:71:45:13:d7:f7:25:bb:92:6b:dd:96:db:
         79:c3:74:16:6e:ba:cb:f9:fc:6d:32:8e:07:fc:79:af:d3:87:
         91:2d:ba:04:d0:ed:ba:93:77:26:44:f9:b0:f9:62:ec:e2:74:
         1d:bc:dd:9c:15:91:7c:5e:90:e8:b1:c3:fe:5b:f4:e6:92:96:
         67:ce:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:30 2026 by rpki-client