Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File:                     6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier:          Lta9ECk2bATLAhGnEob0+9+ilv2Yb//dj6T9yf4c7VM=
Subject key identifier:   0A:60:CB:BC:F8:3E:CF:71:EB:21:3A:68:E9:26:2D:2D:32:87:51:28
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       019D9962525AF0BF6E3E58E3E29FC7B894FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number:          16BF
Signing time:             Fri 17 Apr 2026 03:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:50 +0000
Files and hashes:         1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: jHQlsBL3z9F9um3md+ky3xrMM9v0PrS+l9Lup/6kpFs=)
                          2: wEZCw-VLeU1jpA57GhD5o-3uPdI.roa (hash: 1vJM+R9B72RBGk03v5ie3GqXY2ZDTLcLKiRAG44iQm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:52:5a:f0:bf:6e:3e:58:e3:e2:9f:c7:b8:94:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: Apr 17 03:00:50 2026 GMT
            Not After : Apr 18 03:00:50 2026 GMT
        Subject: CN=0a60cbbcf83ecf71eb213a68e9262d2d32875128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:25:8a:5a:9d:15:bc:0e:a8:98:40:d4:77:79:
                    f8:57:da:e8:b8:f6:c0:68:74:5b:c8:56:e3:07:42:
                    92:d1:35:49:1c:c6:22:ec:8b:c9:f2:83:6f:80:da:
                    c4:15:1d:a7:11:7c:3c:96:8d:c6:44:9c:67:ed:a3:
                    8a:2f:a1:7f:37:a8:bf:b6:bf:4a:49:27:e9:df:d3:
                    3a:29:f0:b2:68:e7:b4:87:c6:40:ad:64:b7:65:a3:
                    ad:d1:b3:15:c5:16:8a:c0:b5:64:06:0d:86:c5:23:
                    07:90:4c:f8:b0:df:62:ba:c1:d3:ba:f8:4f:b8:e6:
                    bd:08:1c:56:73:c2:bd:26:74:ae:c8:c1:37:a8:e2:
                    60:25:15:ba:1c:48:77:71:36:93:d0:3f:a5:24:ec:
                    3d:ac:f8:34:85:90:8c:84:58:8a:6e:95:8a:04:09:
                    9e:e2:27:6b:8b:ef:a6:48:15:ff:99:b9:14:da:c8:
                    72:1b:32:b1:af:c7:e1:9a:d0:6d:8b:ff:2d:b1:30:
                    45:e6:cc:cd:64:33:30:18:b3:9a:32:17:d5:7c:b7:
                    b2:a5:98:be:03:5a:7d:91:39:aa:1f:2f:d1:84:26:
                    cb:f2:9c:4f:23:a9:8c:0c:23:a3:10:ac:68:9a:c0:
                    36:93:52:c4:13:2a:ea:ed:97:c5:8c:54:1f:6a:22:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:60:CB:BC:F8:3E:CF:71:EB:21:3A:68:E9:26:2D:2D:32:87:51:28
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:ee:1f:8a:7d:05:f9:e9:25:f3:00:71:a1:dd:c1:c9:96:
         0b:15:9d:91:77:7c:ab:6c:f9:c9:be:64:c3:56:87:ca:80:9d:
         be:4e:b9:43:fa:58:d4:e1:6c:50:d6:0f:a3:bf:89:1a:7a:5e:
         f5:59:43:a7:3c:75:d9:93:9c:09:23:23:27:12:88:1e:a3:37:
         f3:a1:19:72:12:ca:bf:b6:41:87:40:28:24:75:ec:5b:29:ba:
         9e:e0:7f:de:ca:4a:b7:4c:a8:c4:f8:c5:f8:95:f8:14:4a:cb:
         78:3f:43:20:46:b3:9c:92:8b:f5:c1:88:59:4f:e2:62:ed:64:
         99:42:ac:52:38:6f:93:46:9f:43:e8:d6:77:a0:dd:84:25:d0:
         03:f4:e6:7b:c5:10:22:d9:a0:5c:58:2c:2a:4a:67:38:61:aa:
         4c:be:54:28:e8:bb:44:26:f6:86:93:1d:f9:a5:c8:21:a8:37:
         99:8d:82:1b:56:4a:c2:ec:e2:e0:77:c0:fc:f6:7c:f8:6e:44:
         63:19:ba:c6:8a:45:a6:a5:00:02:05:a6:22:44:ad:2d:2d:da:
         e6:d8:3d:29:86:53:a3:5b:4c:73:8d:70:9f:aa:8c:28:04:4d:
         88:ae:f5:c5:d8:32:d3:32:3c:3f:fc:05:2e:c8:62:b6:61:b8:
         ac:49:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:45 2026 by rpki-client