Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          W0oNthtYtslbV+G7L8AwN+jmNB54lj+jeP1yTpyLfJY=
Subject key identifier:   9A:DA:ED:96:B6:0C:DF:C5:05:4B:30:85:A1:C8:45:2A:32:15:FC:06
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       019D99629563B133A9B121152C5ADE375565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 03:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:07 +0000
Files and hashes:         1: 5Iruj7Q04-dIh4ZGTzY2lg5RxnQ.roa (hash: x1HpRiyK6tLqJ4m++Ue3xBke0BVmx3kiw0XUNo5+ScQ=)
                          2: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: xL+l1J4XhH+t+ZvN1togNrbVrYQIZRgSMhr41rjEhU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:95:63:b1:33:a9:b1:21:15:2c:5a:de:37:55:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Apr 17 03:01:07 2026 GMT
            Not After : Apr 18 03:01:07 2026 GMT
        Subject: CN=9adaed96b60cdfc5054b3085a1c8452a3215fc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e3:28:ce:b2:4d:aa:1f:72:7e:c3:57:5a:8f:
                    9a:1c:48:b1:37:03:87:cf:45:29:4c:25:9b:d1:68:
                    7e:0f:3f:b2:63:ed:7e:5b:04:e6:01:02:fb:fa:d6:
                    ff:7c:fb:95:20:e4:bc:d7:d7:58:89:19:4f:fb:7f:
                    e2:17:8f:51:c4:14:a8:30:c1:17:12:1e:df:02:79:
                    27:4e:23:83:43:40:6a:18:9d:1f:02:d5:93:d2:a5:
                    d8:f7:c8:65:3c:df:10:75:d9:8f:27:c9:de:a4:d2:
                    15:7f:02:35:6b:a2:98:40:4c:5c:1d:5e:24:04:ea:
                    37:28:ee:ff:f6:97:77:a3:bf:59:1f:ca:e8:d5:62:
                    43:e1:e4:21:52:cd:5b:91:52:52:f5:d1:44:33:5f:
                    15:0f:c9:0a:f9:f2:0a:a1:23:43:70:57:26:61:b9:
                    3e:40:7a:97:0b:40:cd:bd:2b:b8:78:23:b9:c1:03:
                    74:9d:a8:81:ed:9e:58:0a:fe:6b:04:13:37:65:67:
                    0a:60:1e:4e:49:10:02:ba:41:3d:b8:b4:a8:38:ea:
                    2e:e9:24:31:e2:fe:b7:fc:7f:86:bf:cd:0b:43:32:
                    53:44:24:9f:7b:38:a8:b7:70:b8:1b:84:03:c5:9a:
                    9c:0e:32:61:b0:3b:10:7f:02:cb:65:f8:8b:2e:77:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DA:ED:96:B6:0C:DF:C5:05:4B:30:85:A1:C8:45:2A:32:15:FC:06
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:39:dd:80:d5:9d:87:e4:29:48:48:18:d5:96:ef:c4:27:5b:
         39:76:a8:ec:f8:57:84:7f:a2:1d:77:c5:a5:3b:27:db:57:f5:
         c4:29:96:e2:82:a1:41:f7:53:2f:bf:29:49:b1:d8:28:6e:49:
         d2:12:5a:94:7a:ca:e7:a2:5a:4f:b6:e4:49:ff:35:d8:ef:d9:
         38:d3:2d:fa:ab:bd:e4:ca:7d:e0:e2:ac:b2:8a:f3:d4:b8:b4:
         45:6c:f6:b8:c0:30:32:6c:ee:80:73:11:f3:5d:f5:f4:b0:45:
         e3:2a:7b:6c:8d:26:9e:b2:be:a1:d1:33:f4:47:db:6f:b4:58:
         0b:bd:ef:f3:4f:8f:6c:55:86:81:e3:19:71:43:95:44:d9:db:
         37:ca:cf:8d:0a:1c:79:80:8f:a4:71:e0:11:4b:69:e8:15:e2:
         67:05:7a:b1:92:b6:b3:f7:06:36:bb:4f:82:83:a3:06:07:ef:
         1e:a6:dd:5e:30:af:f9:5e:8f:7e:4f:35:7b:af:bf:df:6d:45:
         62:5a:38:7d:8d:34:7a:15:87:69:51:5d:69:8f:ac:fe:b6:76:
         34:b2:13:c7:04:a1:4d:70:ca:ce:fa:95:9f:78:ce:78:9d:0f:
         6c:77:35:69:b3:c3:87:93:d0:87:c6:93:54:29:2e:05:04:21:
         60:a6:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:19 2026 by rpki-client