Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          O6H1eeiBOH0pmmKytg9F1i1lhJhzU6xRc05QXhChPtI=
Subject key identifier:   A5:E3:F8:43:90:69:BC:44:FB:F2:5F:DC:C4:B6:4D:0F:2A:BB:E9:E4
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       019D9A74AAF7B557BC7AB5DFA81EAC347F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0F53
Signing time:             Fri 17 Apr 2026 08:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:30 +0000
Files and hashes:         1: B6alie6EioBSI4GRuYA153USJyU.crl (hash: 2SJwZAYuXlq+xYSzXKyX1DtK7Z7kLGyMt7h6Tzw2fFI=)
                          2: Wkq5mVHI9Kov9WutxltADYyKbjI.roa (hash: dcD60AjT9AYOCFQPLaVcEDoHiuV5FyWG3g4HkGOvigQ=)
                          3: t9vvWYRPeToATeVWr4VSq8ee-Bg.roa (hash: ykKWvPxw03+JwAzaQkW4enMVJbdZNrE/vLvG44Vy5as=)
                          4: uxuYZ_f6aWaxaC82KUMAv_QaxnA.roa (hash: AHIAZkO88MIw/Jonn2+RvT3gl4wyE+yeli6wGOjt5vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:aa:f7:b5:57:bc:7a:b5:df:a8:1e:ac:34:7f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Apr 17 08:00:30 2026 GMT
            Not After : Apr 18 08:00:30 2026 GMT
        Subject: CN=a5e3f8439069bc44fbf25fdcc4b64d0f2abbe9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:0e:b5:75:01:2a:5e:c8:1d:2f:bc:f1:da:
                    71:12:8a:30:ca:80:97:fa:25:68:37:76:ae:1b:80:
                    12:12:31:5b:71:d6:8d:9d:4b:af:ff:72:19:d0:f4:
                    fb:16:b8:50:c8:23:e7:66:15:97:f2:bc:9a:6b:60:
                    4d:53:51:a3:71:49:44:a1:b4:a2:3b:e1:d9:e7:b7:
                    f5:20:48:cb:e5:bd:04:17:39:36:ec:75:ad:ec:6a:
                    59:12:98:08:f3:33:46:d3:68:d5:00:4f:77:f2:5a:
                    57:c6:94:2a:31:5b:32:6e:36:d7:ff:74:b9:7c:62:
                    d3:05:11:e9:a3:91:41:5c:0e:ec:95:6c:43:b0:6c:
                    f8:12:00:30:85:93:12:a0:8b:9a:63:3d:c2:1f:11:
                    ff:81:e5:f5:89:6a:f1:ee:e7:84:3f:89:9a:f6:dd:
                    c0:31:bb:8f:17:67:66:e2:10:dc:b4:0e:d9:43:e6:
                    03:b4:83:45:e7:da:4a:c2:f1:ee:f4:8c:e9:b8:24:
                    74:47:ef:77:49:a7:c2:23:23:30:67:fa:68:a0:96:
                    cc:f9:01:5d:0c:21:af:d6:ca:30:11:04:79:5d:a8:
                    29:79:fb:89:c8:2c:37:3e:00:76:49:1a:3d:b7:35:
                    25:b9:d7:6e:a8:9f:0a:9f:38:e5:61:05:22:17:2f:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E3:F8:43:90:69:BC:44:FB:F2:5F:DC:C4:B6:4D:0F:2A:BB:E9:E4
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:62:ce:89:f8:9c:27:ab:bf:11:90:d8:42:8d:e0:ee:7c:12:
         32:17:5d:da:fa:b9:3f:ed:c1:47:e3:e3:a5:bd:07:1b:8d:69:
         10:57:42:8c:5c:6e:2f:c3:35:d6:fd:5e:29:4b:49:fb:ef:fc:
         50:21:ad:47:1c:aa:c4:a8:3e:f9:eb:29:3e:87:f4:70:94:ea:
         27:a1:c2:f0:88:d7:2b:dc:05:34:79:45:67:52:c5:a0:c5:35:
         f2:60:60:cf:26:2b:3f:c8:e5:7f:ae:04:ca:2b:d2:6e:e4:2c:
         c6:89:f0:04:e9:c6:b5:75:2d:f4:59:02:af:bf:c0:53:8a:88:
         3c:d1:a7:82:f0:6f:f2:fc:aa:e7:e8:d7:a4:1a:e0:e9:d2:48:
         37:3c:fc:c8:2b:f9:ee:f0:e8:44:44:b1:f3:cc:6e:57:7b:d8:
         ec:a6:e9:a5:ee:28:f8:86:61:f0:1f:9b:28:0e:88:ae:a3:76:
         67:db:cc:d6:b1:84:7c:df:b6:eb:c2:75:d8:cd:36:61:28:fb:
         1a:ce:a6:33:a1:6e:42:4c:45:54:49:b2:59:22:43:4d:ad:f0:
         0e:41:a4:3c:75:27:cb:40:a1:bd:f4:d9:14:d2:7d:16:65:c2:
         8a:a0:63:78:51:73:29:12:02:61:0b:1d:dc:12:82:28:dc:4a:
         10:c9:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:19 2026 by rpki-client