Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          nH1Ky2TYt7VaI5R2/z2MoesfzeeEJxhshoojb5HjGqI=
Subject key identifier:   B9:BB:67:99:B8:0E:BD:13:9D:8A:54:03:E6:D9:30:06:FD:73:BA:47
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       019D9818BEC05D015F1292EAE92B98068580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          1554
Signing time:             Thu 16 Apr 2026 21:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:51 +0000
Files and hashes:         1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: KQY4yD2ILGI+55FMnevG7GrtZoScuVRDpZYrkrgnNrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:be:c0:5d:01:5f:12:92:ea:e9:2b:98:06:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Apr 16 21:00:51 2026 GMT
            Not After : Apr 17 21:00:51 2026 GMT
        Subject: CN=b9bb6799b80ebd139d8a5403e6d93006fd73ba47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:98:4e:82:2e:60:0d:02:21:f0:d7:a7:31:
                    37:91:09:88:4b:58:7f:a7:40:0b:c2:a3:cc:d8:2f:
                    66:52:5a:f8:59:b2:62:89:08:37:7d:4d:27:fc:b1:
                    64:92:23:70:4e:97:77:c7:1d:0c:12:d6:de:51:0d:
                    99:4b:8d:2b:37:f2:aa:cd:ff:4c:1e:52:c7:8a:2e:
                    0c:39:29:d7:b4:e2:56:6f:8c:29:09:58:f5:ed:c3:
                    48:13:a3:f8:85:6d:1e:8a:7c:ab:5d:1b:81:71:0f:
                    bb:c6:3e:23:0a:b3:b1:3b:6b:c8:62:8b:f5:e6:73:
                    ce:42:26:f8:5f:bd:54:f2:87:42:94:85:76:99:b7:
                    d6:1a:95:5d:e8:35:8c:dc:2a:3e:b7:2a:b3:82:38:
                    c6:33:3f:0e:5a:13:81:37:06:84:0a:59:83:c6:00:
                    ec:13:63:ae:ee:7b:70:59:43:7c:61:36:14:f4:0c:
                    34:fb:ff:42:de:e6:24:a3:09:a4:b6:5b:76:db:91:
                    d3:68:bf:71:de:89:9d:17:38:bd:6d:2c:ca:6b:6c:
                    af:5c:c1:47:3d:69:03:23:c8:45:12:ba:4e:11:fb:
                    25:61:2d:ca:ef:2f:3f:d6:f5:2b:e8:42:88:8b:ed:
                    e6:f4:f5:d5:0e:cf:95:53:34:37:2b:53:07:f7:56:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BB:67:99:B8:0E:BD:13:9D:8A:54:03:E6:D9:30:06:FD:73:BA:47
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:75:dc:8d:44:5a:4a:cc:f3:26:e0:a8:3b:b8:fa:62:be:
         69:67:6f:7d:bf:dd:06:d2:20:83:3e:75:64:ef:66:8d:fe:2f:
         e1:04:c3:b0:fb:32:83:7f:b2:c1:c2:22:dc:d4:68:4f:79:d4:
         bc:e5:39:14:0d:81:90:b3:6c:2a:10:31:23:05:2d:66:11:97:
         70:68:f7:fb:25:a0:4b:df:a7:f2:00:63:8b:f2:a1:bc:88:4c:
         d1:4d:35:95:49:a9:17:25:b5:df:57:05:1d:c7:4a:db:f8:14:
         50:b1:ee:78:e4:e2:54:9a:95:00:1e:db:40:4d:f0:c4:6a:93:
         c2:d8:1a:e7:23:0a:e7:b6:34:22:72:76:b4:09:f9:d0:c0:0e:
         57:e8:26:9c:ac:13:5f:7f:b1:90:46:8f:2b:6c:a2:56:6f:ca:
         42:88:89:6b:07:23:02:9b:8f:45:e7:50:d5:8f:a4:96:9f:c7:
         74:7b:56:d2:fc:8a:61:87:9a:8d:dc:93:e2:7f:5f:1c:11:38:
         a4:c3:83:2a:f0:d5:ae:23:bf:88:4a:60:3f:c5:55:45:1c:18:
         d7:18:43:32:81:43:80:1d:42:ea:2c:32:57:55:b2:af:65:ff:
         fc:ee:c8:d3:86:c0:7c:6a:29:a1:ff:c4:e3:2a:9b:a6:4b:48:
         98:ee:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:29 2026 by rpki-client