Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          tcvZEmL5X5YAheNn1L4GniVmi/tRASDyFSUIsHQKZqw=
Subject key identifier:   CA:2A:F3:B6:0E:75:7D:19:57:62:76:72:A8:66:8C:05:96:38:02:3E
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       019D97AB00360B4B42252B40BD2E901327CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          09DA
Signing time:             Thu 16 Apr 2026 19:00:59 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:59 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:59 +0000
Files and hashes:         1: 3lrznUDu_RYJXoCA6T2-RqC6f2U.roa (hash: hPVXT+slJzISzm2tkyQwcR1eVSvzD3ViRToSxorCndY=)
                          2: C_5yyZCFvKCe1q25gF_5oZ_pygY.roa (hash: blUVsXaM11h0aXpR0/ZhyzARymiUeJDD6sZq8PuA4SY=)
                          3: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: Zu+lrIJ523OCKHqhKUWYd4w2fttyWJlFbR9spGZH73c=)
                          4: U7dOPr8aIxZqqFvoN6CicfjLnZI.roa (hash: va8TN3ROTz1PexP26HjmTHBuqhoh3cPlg+O3J7QZ94E=)
                          5: qoYEAqhri4bUdYVpI1skjqF8iFo.roa (hash: XRgJrR2oLoLBzNI7/ZXQmYkUAt4y3ZosqwuZaOVv078=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:ab:00:36:0b:4b:42:25:2b:40:bd:2e:90:13:27:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: Apr 16 19:00:59 2026 GMT
            Not After : Apr 17 19:00:59 2026 GMT
        Subject: CN=ca2af3b60e757d1957627672a8668c059638023e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:69:ec:66:ae:06:6a:ef:4a:dd:a2:bc:cc:
                    a3:54:0e:64:f6:5d:b3:3b:40:ec:70:0c:ee:59:d9:
                    ef:c9:e0:b6:44:d5:6f:98:47:46:cb:8a:20:bc:15:
                    d8:2e:5e:91:f7:f4:7b:09:25:77:67:6c:6a:6a:01:
                    c6:cd:04:2f:58:92:19:0e:38:b0:5d:bf:4d:43:40:
                    43:bd:42:4d:50:4f:1f:7e:43:b6:b6:61:50:57:db:
                    77:cb:07:3e:29:44:f1:1e:81:3f:a7:5e:ef:c1:82:
                    bf:29:2a:a2:43:45:8d:14:4d:07:44:72:74:5c:b0:
                    46:d3:79:f1:8a:07:da:92:d8:53:8a:6d:c0:41:bd:
                    14:41:2e:b5:87:49:1e:6f:50:09:ad:17:83:b6:94:
                    a5:e9:72:a8:07:86:98:48:d4:8b:e4:0b:0a:62:5f:
                    2d:a5:69:72:7f:ae:28:9c:30:c7:f8:01:7a:ed:20:
                    31:2f:cc:3e:cb:ac:49:72:bf:73:46:7b:50:8a:58:
                    d3:73:4e:c7:d3:4d:ef:5d:43:49:2a:95:bb:72:7f:
                    af:72:2f:5e:86:38:c1:64:fe:86:45:f2:06:03:b3:
                    f9:06:39:20:bf:ef:92:d3:8b:bd:53:dc:ea:93:e0:
                    23:5f:5a:9e:6c:d7:3c:ff:26:92:f6:ab:45:b7:76:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:F3:B6:0E:75:7D:19:57:62:76:72:A8:66:8C:05:96:38:02:3E
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5e:4c:00:19:a3:d8:3c:50:d9:63:01:89:b4:57:fd:59:93:
         60:32:17:31:ed:c7:5f:14:81:b4:57:a5:ba:0a:36:e1:f9:39:
         7a:7e:94:0d:a0:c6:ff:be:f5:e4:57:7f:9f:56:ff:63:27:a8:
         10:e6:f6:94:a6:de:d3:60:7f:9d:8c:ee:44:d8:19:89:25:15:
         9e:18:18:41:b4:41:90:2b:59:82:36:f8:3f:41:cc:1a:a2:fc:
         52:3a:6a:f8:7e:21:65:b5:ef:3b:b7:df:9b:ba:30:60:0d:2c:
         e7:7b:cd:00:37:64:21:82:47:d0:f9:73:01:73:3c:cc:79:a3:
         60:79:de:6a:c3:28:16:10:94:2c:ca:bc:43:78:3e:c2:dc:d5:
         a9:88:29:48:35:30:c4:01:8e:f6:90:eb:23:92:3d:49:e7:03:
         9f:60:84:ce:17:48:28:78:3c:af:df:ca:cf:c2:9c:7d:70:ae:
         4a:81:6c:b0:26:63:f2:16:84:00:02:4a:86:91:fc:17:4a:92:
         f3:f3:3e:9d:55:2c:41:b8:fa:8c:51:cc:4b:50:16:d1:f9:e6:
         9b:60:e8:f6:92:8a:fa:7a:56:05:6f:59:ef:13:05:c9:e5:15:
         a6:9b:be:f6:27:e0:fc:13:ae:81:c8:40:ee:b6:3a:d3:16:82:
         9c:15:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:01 2026 by rpki-client