Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          6k84UnIAnGZeJ9ZXoLV3mgQMJQ3OK3xh3S6k7vmd4kg=
Subject key identifier:   7A:CC:AC:A5:4D:0B:98:42:5B:F4:E3:56:AF:C8:B8:44:32:F4:0F:37
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       019D9999153ED781D6E17B3BF5238AECA1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          1935
Signing time:             Fri 17 Apr 2026 04:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:39 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: aa8F1o/pRW2bUPmM9/M0d7joHiopTrK2v9z7IqqexCA=)
                          2: 9qw7otosSIxdL3aCqQeP90SREjU.roa (hash: 9xNU7kC0RTtahLdPXxnLWSDGxTvK4fW3RYlWbOy4Y7U=)
                          3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
                          4: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
                          5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
                          6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
                          7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
                          8: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
                          9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:15:3e:d7:81:d6:e1:7b:3b:f5:23:8a:ec:a1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Apr 17 04:00:39 2026 GMT
            Not After : Apr 18 04:00:39 2026 GMT
        Subject: CN=7accaca54d0b98425bf4e356afc8b84432f40f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:7b:12:92:5f:85:e2:dd:d6:06:a9:94:f2:
                    6f:58:e3:96:d6:ad:90:56:c5:d7:14:68:20:d9:c7:
                    b1:4f:e1:54:a0:93:be:9c:92:61:ee:da:9c:da:61:
                    e0:44:c8:42:33:20:6c:80:59:8f:e0:2b:df:15:55:
                    5a:5e:46:12:98:6d:f5:83:9e:e9:09:d9:11:36:66:
                    57:21:e0:63:67:08:8c:76:9c:90:39:dc:1b:2e:37:
                    94:f9:49:4f:5b:8c:b9:92:ed:ed:f6:ea:f9:9e:1c:
                    39:a2:7d:f3:bf:db:31:2b:7f:c0:73:2e:0f:a5:3a:
                    a5:d9:5f:bf:57:2f:73:e9:0d:60:85:d6:9c:52:cb:
                    57:0d:1b:d0:ca:6e:63:30:b3:a9:44:db:c4:e8:72:
                    0d:74:2b:33:de:8d:e4:6a:98:da:c6:78:eb:f1:f2:
                    8b:63:4d:f5:04:ee:7d:d8:47:89:d4:e8:41:5c:e8:
                    e1:df:9b:0f:ed:56:87:26:d0:69:5e:bc:e3:3d:76:
                    dd:e3:39:fb:2b:8d:bc:b8:6b:5b:04:0e:ec:ca:b9:
                    eb:6b:19:c2:2d:2f:1e:6d:e2:36:94:cb:ff:ae:d3:
                    ee:99:4a:19:9b:08:b4:e2:89:a2:74:f7:51:ff:1f:
                    a3:8d:44:32:46:27:fb:2d:70:06:6f:89:3d:2a:7a:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:AC:A5:4D:0B:98:42:5B:F4:E3:56:AF:C8:B8:44:32:F4:0F:37
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:b2:ad:e0:9a:a0:6b:63:26:cf:e1:79:38:ef:92:a0:67:
         21:e6:c7:63:f1:3e:6f:02:66:07:10:80:71:05:78:2f:c9:09:
         91:fa:a7:8a:43:40:ef:bf:9e:83:06:c3:be:a9:32:9a:23:ba:
         3a:55:aa:13:48:81:58:13:8e:dc:b3:99:91:1f:85:76:68:c8:
         0f:9b:75:1a:17:e7:32:d9:df:bb:fa:59:a2:fe:3e:b9:10:93:
         1d:c0:82:4d:2e:88:ae:1b:a3:cb:0a:aa:58:e1:1c:9a:f1:3e:
         5c:c8:12:9d:24:7d:d8:d0:7c:ca:f2:4f:50:94:c8:4f:c2:53:
         a0:91:96:e9:f1:63:b3:7f:07:83:49:f7:72:3e:e3:61:be:88:
         23:99:90:44:24:a2:6c:ea:76:5c:a1:cb:fc:e5:b8:46:1c:30:
         86:ac:ba:8e:03:6a:a7:b6:2e:57:c1:2f:14:eb:7a:2f:4a:f9:
         99:b1:10:e8:de:8a:73:9b:9c:57:51:96:e2:0b:66:bb:44:98:
         b3:49:4f:20:52:84:f8:2d:5f:19:0c:15:a7:38:d8:d9:8f:c3:
         fa:31:4c:af:cb:a3:f8:47:97:2b:20:f4:81:17:65:8c:97:53:
         77:f2:08:0a:3e:b8:7b:97:5f:14:67:d7:b8:45:14:1b:90:f9:
         82:58:0b:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmRU+14HW4Xs79SOK7KHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi
NmJkZjcwHhcNMjYwNDE3MDQwMDM5WhcNMjYwNDE4MDQwMDM5WjAzMTEwLwYDVQQD
Eyg3YWNjYWNhNTRkMGI5ODQyNWJmNGUzNTZhZmM4Yjg0NDMyZjQwZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz997EpJfheLd1gaplPJvWOOW1q2Q
VsXXFGgg2cexT+FUoJO+nJJh7tqc2mHgRMhCMyBsgFmP4CvfFVVaXkYSmG31g57p
CdkRNmZXIeBjZwiMdpyQOdwbLjeU+UlPW4y5ku3t9ur5nhw5on3zv9sxK3/Acy4P
pTql2V+/Vy9z6Q1ghdacUstXDRvQym5jMLOpRNvE6HINdCsz3o3kapjaxnjr8fKL
Y031BO592EeJ1OhBXOjh35sP7VaHJtBpXrzjPXbd4zn7K428uGtbBA7syrnraxnC
LS8ebeI2lMv/rtPumUoZmwi04omidPdR/x+jjUQyRif7LXAGb4k9KnqbrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrMrKVNC5hCW/TjVq/IuEQy9A83MB8GA1UdIwQY
MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt
ZDNlMjgwMGJkNjQwLzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw
LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN82yreCa
oGtjJs/heTjvkqBnIebHY/E+bwJmBxCAcQV4L8kJkfqnikNA77+egwbDvqkymiO6
OlWqE0iBWBOO3LOZkR+FdmjID5t1GhfnMtnfu/pZov4+uRCTHcCCTS6Irhujywqq
WOEcmvE+XMgSnSR92NB8yvJPUJTIT8JToJGW6fFjs38Hg0n3cj7jYb6II5mQRCSi
bOp2XKHL/OW4Rhwwhqy6jgNqp7YuV8EvFOt6L0r5mbEQ6N6Kc5ucV1GW4gtmu0SY
s0lPIFKE+C1fGQwVpzjY2Y/D+jFMr8uj+EeXKyD0gRdljJdTd/IICj64e5dfFGfX
uEUUG5D5glgL+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:51 2026 by rpki-client