Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          fWZSml7OFt1KYpiMCQonBaKFWGN20i2AVb65v1UsOH0=
Subject key identifier:   F4:AD:E2:E6:DE:F5:5F:FF:88:3E:65:CC:19:92:96:0E:40:8F:67:7C
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       019D9A06C1FCE974FA45175CFF4E97B32EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          0C2D
Signing time:             Fri 17 Apr 2026 06:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:27 +0000
Files and hashes:         1: Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa (hash: f1v3DQ+f28VV3rL9c+CaytHItkv+65iYkUhizFS/GxE=)
                          2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: Wp9EeVSSqfQtoA0JH69CJ1WeZVIOK4XW5JRCcq9iJmE=)
                          3: xWhq4pJqpBDCOAn9j2p-jZnUVxw.roa (hash: 1dUwvyE89fb3mgfozy7QJGPfLkBx30lg9K5/pQzltFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:c1:fc:e9:74:fa:45:17:5c:ff:4e:97:b3:2e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: Apr 17 06:00:27 2026 GMT
            Not After : Apr 18 06:00:27 2026 GMT
        Subject: CN=f4ade2e6def55fff883e65cc1992960e408f677c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:ba:ad:68:16:a8:17:11:eb:17:c0:d7:8d:
                    73:fd:d8:5e:1f:49:c3:94:82:02:a4:d1:72:3e:87:
                    40:26:b3:4e:a0:9f:a4:04:64:85:8d:7f:49:68:6f:
                    f4:6f:a2:78:f8:fe:5e:9a:88:25:3d:2b:81:3d:d7:
                    3c:c8:05:08:91:e0:ed:df:1e:b0:c0:e7:93:9d:9d:
                    f5:a3:c1:d5:e3:1e:75:40:43:3e:ad:7b:6c:e2:31:
                    1e:b7:8d:8a:a0:74:82:b3:aa:e9:2f:01:38:cb:0b:
                    e3:ff:95:fc:b6:62:37:6d:ef:5f:e1:ba:44:d0:d7:
                    18:e9:b3:b9:3a:f6:e5:bd:44:7c:51:ce:74:4e:fd:
                    44:0a:25:e3:cd:6b:6b:e7:46:1e:08:f2:af:9e:ce:
                    cd:ab:e4:3a:21:2e:d1:c3:62:cc:b7:ce:60:15:72:
                    be:b4:88:22:b2:8e:7d:e2:90:3b:2c:68:6e:3b:63:
                    37:04:08:63:76:de:66:31:a4:63:d6:00:07:17:07:
                    34:f0:4c:12:e7:95:e1:72:b2:97:5a:cd:3b:22:54:
                    6c:e2:69:00:7b:2d:d6:96:cc:9b:d9:f0:96:bc:be:
                    81:86:5a:69:d1:32:92:fb:8e:68:b5:d7:93:b8:3b:
                    a3:d8:00:27:8b:fd:fb:9e:ab:05:db:0c:4a:9b:e9:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:E2:E6:DE:F5:5F:FF:88:3E:65:CC:19:92:96:0E:40:8F:67:7C
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:95:2f:26:65:a3:89:65:51:4c:67:fa:5b:89:8b:46:9d:5e:
         d7:6d:b3:0c:aa:f7:92:ac:b5:97:4e:77:2c:ce:c1:4d:15:cd:
         4b:07:81:a8:5d:31:68:58:89:c6:2e:e1:32:fc:3e:66:f5:23:
         b3:49:85:9e:56:8d:40:4e:5f:48:be:75:0a:ec:07:aa:77:3a:
         30:ec:e7:9f:a3:73:de:1d:18:1f:8d:fc:4b:92:b9:23:f5:a4:
         ac:6e:7e:9e:95:7d:5b:bf:34:43:98:34:64:57:7e:47:04:fa:
         e6:d9:4e:0d:ce:f5:e9:d6:32:ae:0a:e4:a2:f1:94:8f:7e:ac:
         e9:11:35:f8:c2:ed:10:78:49:9a:92:fb:b5:bc:71:3c:c7:21:
         94:0e:41:eb:36:8c:a2:cc:d5:16:45:a1:93:68:96:c5:86:a0:
         b9:fd:b4:a5:eb:84:b8:54:e7:71:d8:3e:c1:b3:2c:b2:e1:73:
         25:b9:e1:12:da:a5:2c:0c:e3:6a:16:6e:5e:76:7a:35:34:f1:
         7b:de:a7:0c:3a:4b:49:52:e0:3f:45:be:89:4e:bb:12:bf:26:
         f1:38:67:f4:f5:c0:df:3d:8f:ab:eb:8d:77:7a:9a:81:aa:03:
         45:0c:df:9f:73:fc:03:fd:ef:4a:24:85:f9:99:0e:47:78:1c:
         3b:08:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:25 2026 by rpki-client