Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File:                     1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier:          VqJku3lZzi1oLUP1L5mGZTUjbib8zhQ4kvWth4fLpXo=
Subject key identifier:   50:A1:D0:A4:97:A6:44:0A:AB:61:5F:F1:A9:76:F8:39:33:97:77:7D
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer:       /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial:       019D9AABBBEA18A8159A9B4F509A22EEB515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number:          1851
Signing time:             Fri 17 Apr 2026 09:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:39 +0000
Files and hashes:         1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: hTnastWSVSOcW4Zyk+INF2Q9CFA6+fDq6wXPOlzzPrg=)
                          2: GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa (hash: pJa6GuoaHJHw4hKMbDO80uXWDKK7cJe4mwiQpI9C0zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:bb:ea:18:a8:15:9a:9b:4f:50:9a:22:ee:b5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
        Validity
            Not Before: Apr 17 09:00:39 2026 GMT
            Not After : Apr 18 09:00:39 2026 GMT
        Subject: CN=50a1d0a497a6440aab615ff1a976f8393397777d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:ce:ff:e9:90:d4:7a:9f:11:de:37:2e:09:
                    9f:d5:90:69:b4:ba:cc:fb:7d:e5:1a:f2:86:fd:91:
                    4a:d5:53:75:80:c5:51:60:0b:21:fd:57:67:89:f3:
                    65:e4:1c:1e:c6:a4:4c:b8:cb:00:54:24:67:93:c4:
                    0f:c3:9f:3b:82:c5:7a:4a:d7:bd:98:53:03:34:a9:
                    db:fe:b3:96:af:45:81:fa:8f:ca:d9:39:4b:96:fd:
                    2c:31:22:d8:1c:57:0a:89:c3:3e:bb:d0:e4:4a:99:
                    ad:70:ad:b2:b7:64:ee:df:fb:49:45:dc:4f:ab:5b:
                    e9:9d:be:d0:86:6d:bf:69:5d:73:b1:3d:cb:8d:e7:
                    be:77:8e:93:33:3f:fb:70:e9:bd:56:2d:8e:e5:51:
                    e0:3e:2d:13:f7:fe:a3:44:f7:44:f6:9e:b9:86:dd:
                    d3:ae:0c:b6:d2:c9:df:98:fb:a9:c6:00:1e:6b:7b:
                    a6:1c:2c:11:3f:04:78:28:99:18:8e:b8:51:8d:52:
                    b6:23:a5:f3:81:da:1c:2e:01:59:77:38:ef:9c:e4:
                    41:93:8d:80:49:ab:3a:45:a2:3c:81:68:f0:00:c0:
                    db:ad:61:68:ac:6b:28:33:0f:47:7b:78:f2:3a:bd:
                    43:af:81:a9:fb:1e:a7:6d:54:84:f9:a0:ae:04:92:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A1:D0:A4:97:A6:44:0A:AB:61:5F:F1:A9:76:F8:39:33:97:77:7D
            X509v3 Authority Key Identifier:
                keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:29:57:7f:5c:44:8d:21:53:c3:46:28:54:45:3c:39:db:
         2a:b1:61:44:74:64:17:bd:1d:35:3d:83:cc:11:ff:fa:be:e7:
         49:50:5c:a3:cd:fe:e3:9a:be:9b:3c:13:46:3e:22:77:72:5f:
         59:13:29:ae:60:b2:f2:3f:fe:81:e9:3a:7b:79:b2:44:fd:07:
         7d:e7:f3:b7:a4:f7:89:18:23:ef:e7:10:76:6e:32:48:ab:9f:
         0f:ba:dd:54:c4:2a:66:cc:94:1b:39:a1:7e:00:5c:ec:7f:b4:
         f7:ec:d9:5f:5d:d3:a5:3a:dc:e1:d6:74:80:a1:12:16:00:50:
         d8:cd:cd:79:ab:73:7b:4f:89:ac:e1:6a:63:93:c0:07:2f:44:
         3e:81:1d:68:e8:ef:87:af:e3:84:cb:1b:e9:ae:e3:b7:3c:d0:
         a8:ca:38:3a:63:0c:2c:d9:b8:77:6d:cc:04:8b:59:ce:35:ee:
         f1:6a:da:df:3c:b6:a4:f1:c6:48:76:ec:65:bf:ca:38:c5:a3:
         25:2e:22:ee:34:74:d1:ad:d1:11:af:a7:4b:c1:fd:58:b4:22:
         0e:b9:9b:0f:9d:44:f0:41:1e:dd:87:aa:b0:4d:91:0b:47:07:
         6e:fa:59:aa:cd:cd:25:9c:1e:9a:f6:3c:e8:a3:be:c1:2b:06:
         39:6b:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:57 2026 by rpki-client