Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File:                     6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier:          WN4nvkZErilrp5uEVwjR4oQeH8767w6KCdv8xsJmCqs=
Subject key identifier:   89:D4:97:67:C5:E2:5C:8C:1B:CF:BA:E2:28:3F:2B:9F:CF:FD:32:39
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       019D9A06CBCBB0D44E9921389D3CEBC1C157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number:          1862
Signing time:             Fri 17 Apr 2026 06:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:29 +0000
Files and hashes:         1: 3V-oI545qzWJJ_b9C5qCJ8LoZ70.roa (hash: dBqoxgKCcb3Bb3rl4SUwmiuxUnl7cOt7xFGOUiVmfSc=)
                          2: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: UIoQ2R7YZGKV5jNhA7Q5bguW/vFWqblxY73BWIpfLuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:cb:cb:b0:d4:4e:99:21:38:9d:3c:eb:c1:c1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Apr 17 06:00:29 2026 GMT
            Not After : Apr 18 06:00:29 2026 GMT
        Subject: CN=89d49767c5e25c8c1bcfbae2283f2b9fcffd3239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:3c:c8:39:17:a3:f9:57:39:6e:37:a7:59:
                    66:6f:27:a9:19:e1:77:6d:78:f7:16:e9:63:71:ec:
                    63:67:2b:0e:1b:0d:f4:05:07:d9:21:5e:9a:09:8c:
                    8f:06:c9:fb:93:c1:f0:7b:3f:70:ca:e8:44:b9:03:
                    e5:8a:f9:b2:78:92:29:68:0c:c6:75:b0:7c:a1:a5:
                    b0:3c:37:ae:e3:65:5e:f6:ba:61:13:ea:88:ee:f9:
                    8f:e2:41:54:40:b0:76:00:cc:68:0a:1c:19:0d:db:
                    45:c6:70:f4:8a:e6:94:13:39:ec:15:9c:70:30:11:
                    94:73:83:ee:af:bb:9f:72:c9:0b:73:81:35:77:bf:
                    96:f1:6f:78:b3:69:0c:5b:ac:9e:a6:2f:c1:07:42:
                    ae:9c:bf:f9:c5:25:08:36:f0:fb:7d:40:30:15:66:
                    fd:dd:a1:4e:2f:86:eb:f4:7c:e1:83:16:eb:cd:49:
                    7f:8b:62:54:3e:a2:29:b1:87:43:ef:1d:38:2d:3f:
                    d8:dd:49:a6:3e:e4:5d:6e:2f:56:d0:82:31:e7:f9:
                    6c:b2:96:1b:89:73:37:ef:76:06:07:1b:c6:73:98:
                    6a:6c:4e:b2:ad:7c:0b:94:79:09:70:15:db:87:21:
                    e5:22:7b:ef:d6:9d:73:43:2c:8a:9f:47:1e:f6:ae:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:97:67:C5:E2:5C:8C:1B:CF:BA:E2:28:3F:2B:9F:CF:FD:32:39
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bb:7b:f7:ca:70:32:c9:3c:64:f0:91:45:15:2a:91:8e:89:
         ba:e2:82:a9:ca:7b:38:31:3c:f1:4e:00:f8:6b:d3:da:62:c7:
         50:4c:40:12:db:8c:f1:60:07:86:49:f2:14:a0:e2:cb:7f:39:
         a5:62:7f:70:e2:c1:e6:70:d2:74:6e:48:1c:07:84:b2:7d:3b:
         de:47:3b:78:b0:35:87:e6:92:ba:6f:20:82:ba:6e:96:00:0e:
         db:01:db:d5:a6:fd:e5:49:e5:64:27:af:c2:a2:55:7d:bb:25:
         4e:6a:7e:e1:9f:af:84:b8:8a:40:87:8d:25:14:15:93:56:4c:
         95:3a:24:d2:8a:21:fe:3d:b5:1b:13:92:6d:8a:d1:01:92:af:
         53:40:c3:60:ad:4c:c9:47:6c:ed:3d:14:4b:e7:91:c3:72:fa:
         a6:49:b1:73:e4:e0:22:fc:31:2d:da:96:f9:cd:3f:60:dd:97:
         e8:e9:62:4a:9a:ed:07:03:10:c4:45:3a:1b:da:6a:9b:cd:ec:
         4b:6b:30:03:ec:3c:d2:64:fb:5f:31:a7:4f:cf:7b:d5:59:d2:
         d0:00:77:fb:86:6b:3a:ff:ac:73:69:8e:61:2d:53:d2:f1:18:
         0f:08:96:9d:c6:8e:a0:64:32:83:ff:1b:88:b8:f1:66:03:7a:
         12:42:5f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:34 2026 by rpki-client