Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          n/NcbB6RijTD5C6vFlQmX6jvdd6Yoc+70HA6QDlf1ko=
Subject key identifier:   F1:84:22:B7:0E:E9:C0:A6:37:26:C1:52:1B:C3:CF:3E:D4:6A:CC:D1
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       019DA4C1423363248ED26A049FEED2AD9ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          18C6
Signing time:             Sun 19 Apr 2026 08:00:21 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:21 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:21 +0000
Files and hashes:         1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: hMh0emZHqVQ7l49g3bJ4g30y/Bn0nrP+X02kLVN5YPk=)
                          2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:42:33:63:24:8e:d2:6a:04:9f:ee:d2:ad:9a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Apr 19 08:00:21 2026 GMT
            Not After : Apr 20 08:00:21 2026 GMT
        Subject: CN=f18422b70ee9c0a63726c1521bc3cf3ed46accd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:fd:70:ca:0e:ff:66:cd:e4:f3:28:5a:21:
                    02:f2:ea:a5:4f:a9:06:9e:97:f3:27:4c:9b:0a:4a:
                    8c:ee:33:7b:dd:c4:d2:dd:01:77:70:2d:2d:b5:1b:
                    78:29:98:71:55:39:41:ae:75:a9:3d:e0:b9:59:5c:
                    a0:76:dd:d0:74:ca:bb:a3:81:b6:dd:bb:a0:63:1d:
                    93:ca:fc:67:27:5a:ab:a3:8a:85:38:19:e8:b3:b7:
                    ac:9a:82:37:8c:1b:b0:d6:4f:c8:22:a0:9e:4b:77:
                    6c:1f:c6:2c:33:27:84:b1:6a:b5:30:a2:86:28:1b:
                    d8:35:27:a8:e6:07:8d:51:af:2e:8a:f1:e3:d9:eb:
                    a1:26:3f:23:a4:a4:01:7c:e2:3b:5d:2c:e2:da:36:
                    8f:9d:f8:66:77:b9:bb:5e:04:23:17:f5:fc:f9:d5:
                    b0:bf:bd:28:f2:78:a2:c3:0a:9b:c2:a3:68:b1:19:
                    51:0e:f1:c8:0b:d9:4f:dd:4f:f3:d1:89:64:9f:46:
                    58:9f:61:59:21:17:fb:a3:bb:a4:ce:9b:41:72:61:
                    21:b1:83:9a:48:cb:36:3c:c7:68:ef:c9:f2:1a:ec:
                    c2:ec:b7:cb:e2:4b:38:59:9a:75:46:e5:49:a0:1f:
                    e7:a3:b6:b1:e8:92:65:32:f2:16:d2:48:98:eb:7e:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:84:22:B7:0E:E9:C0:A6:37:26:C1:52:1B:C3:CF:3E:D4:6A:CC:D1
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:b5:a1:92:fa:87:2b:79:9e:d0:77:3a:87:b6:95:39:c2:
         c7:a3:7a:6d:f5:ed:d8:a4:99:52:17:c8:01:d0:25:e2:b8:5e:
         8f:78:a4:db:eb:91:f5:80:c7:5f:3a:f7:71:0a:2f:21:90:68:
         2f:f9:24:6b:64:81:3d:92:da:ef:d6:4d:6a:64:6b:18:60:01:
         3d:6e:5c:57:55:8a:51:6b:70:d2:74:82:2d:29:b8:b5:56:36:
         2a:89:ed:a8:c4:43:0f:59:17:44:d8:04:23:fe:91:10:48:38:
         18:2c:73:ac:04:de:5d:65:75:02:85:aa:88:4f:86:62:93:a6:
         7b:4e:a4:da:b5:22:36:d8:fd:4d:5f:8a:ea:9d:24:38:aa:aa:
         50:6b:88:77:9f:75:d8:48:59:29:d2:0d:80:bd:73:1e:2c:86:
         f0:e6:ad:64:ba:fa:cf:aa:e2:32:c3:0f:85:9e:f4:8c:40:5e:
         6f:31:ab:e1:22:ce:81:c5:6b:51:cf:8a:e7:33:24:cf:fa:b4:
         b3:44:42:ac:4f:31:06:c5:65:90:4f:24:04:88:73:8e:bb:9d:
         ca:27:eb:b6:2a:b1:2e:c4:d1:52:32:33:15:0a:12:b9:31:e6:
         8b:6e:3c:b4:4b:6a:47:c1:63:55:39:a5:8d:74:85:9b:92:b1:
         6e:26:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:49:41 2026 by rpki-client