Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File:                     tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier:          ggcCq+kOxEBKDEqVQT/ZRsrZB3sS5Y01AqyxHy/mB6E=
Subject key identifier:   62:FB:AB:D0:6E:1A:02:F5:6A:BB:4A:B9:99:8C:A4:3A:C8:99:21:2B
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer:       /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial:       019D9B8790EA5D21A41AC78543446EE1268B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number:          146C
Signing time:             Fri 17 Apr 2026 13:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:46 +0000
Files and hashes:         1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
                          2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
                          3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
                          4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
                          5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
                          6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: 936UJXf1peuwoaetRbx9SwyagW/AK0UewX+TzYsPsZg=)
                          7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:90:ea:5d:21:a4:1a:c7:85:43:44:6e:e1:26:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
        Validity
            Not Before: Apr 17 13:00:46 2026 GMT
            Not After : Apr 18 13:00:46 2026 GMT
        Subject: CN=62fbabd06e1a02f56abb4ab9998ca43ac899212b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:43:c5:4a:b6:12:3d:7e:95:2a:f2:b8:96:
                    c5:59:e1:c3:90:7c:f2:6f:cc:43:81:bf:73:1c:8b:
                    63:bf:bb:13:05:46:e7:b5:df:ab:2f:7b:a3:ab:b1:
                    a1:44:06:2d:e5:08:22:49:d5:31:53:76:8a:35:1e:
                    a4:dd:26:fc:c7:0c:1d:1c:55:5d:c4:ee:62:b7:07:
                    88:e9:14:54:32:d4:ae:1e:33:04:e5:42:5b:50:a1:
                    81:80:43:9f:6a:ca:5e:41:1a:81:de:bd:80:f5:70:
                    03:32:c4:0c:7d:f9:f3:8c:e4:5d:16:a8:03:cf:85:
                    96:32:43:d3:a1:67:8c:e8:ad:26:89:dd:21:fe:59:
                    0f:d4:88:32:ed:ad:3e:15:64:10:24:a7:f8:0b:a7:
                    8e:26:bc:3a:ac:eb:e4:70:bb:37:99:5d:d8:8e:56:
                    6d:3c:11:63:15:d6:83:f3:e5:59:24:c4:ce:e0:bc:
                    21:e6:d9:82:f1:58:5e:84:a3:73:61:04:9e:9e:54:
                    8c:59:f1:34:2e:0d:b3:99:89:e1:fe:0b:81:e8:ae:
                    f6:8e:da:d6:0b:81:f1:23:07:8e:42:79:5a:75:54:
                    58:49:c3:1f:83:6d:6d:e9:da:3a:81:e7:c7:78:7f:
                    8b:96:69:e6:b4:9c:8e:07:57:66:df:ee:11:c4:8d:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FB:AB:D0:6E:1A:02:F5:6A:BB:4A:B9:99:8C:A4:3A:C8:99:21:2B
            X509v3 Authority Key Identifier:
                keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:eb:16:1e:69:12:d4:d5:15:6a:7d:5b:f5:c7:cf:e9:03:06:
         1c:f0:aa:49:b7:ce:d9:be:28:10:d0:36:43:4c:34:ec:31:4c:
         e9:4c:6c:51:05:fd:51:ad:80:d9:27:7a:95:75:e3:b5:07:48:
         44:1e:0b:20:06:80:d6:6b:58:2f:2c:f1:cb:49:3f:61:df:d6:
         a4:b1:81:0e:2c:bf:69:89:3a:97:a9:9f:a5:36:af:9c:26:9c:
         b6:b5:9f:e7:06:da:08:d3:d8:2c:e7:28:99:23:37:40:06:4b:
         79:ed:90:6d:2e:f7:bb:b2:bb:61:c7:0b:ea:63:fe:a6:88:7c:
         d7:4e:8c:4b:f3:3e:3a:f5:b2:79:27:2e:5c:7e:77:01:65:4b:
         ef:7f:db:ca:fe:d0:91:28:67:72:c1:50:bf:3c:50:ec:a8:f9:
         e2:7e:b2:ba:59:88:0b:8e:c7:b5:16:0d:2c:f6:36:bb:61:e5:
         38:86:3d:20:c5:3b:2f:90:46:e0:e4:20:88:67:47:35:a9:0d:
         d0:00:31:ed:60:51:a9:a0:cb:0c:e8:5b:69:60:ab:b3:58:ee:
         a9:30:f8:66:33:85:2e:9a:93:72:b3:3d:3a:35:ec:5d:88:6a:
         76:72:33:fb:e1:b9:59:79:07:40:d6:00:4d:bb:ce:54:cb:ee:
         aa:78:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:58 2026 by rpki-client