Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          QtN7UOGBOwO4jbiJ3i0iqP5sYO9caO1jDhb/ZKdQCU8=
Subject key identifier:   50:06:0B:9B:88:0F:84:08:00:46:C5:D5:53:BB:BB:76:BE:BB:D6:29
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       019D97AAC7CD9F2CEBC19BC03AAC76FA28DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          18A0
Signing time:             Thu 16 Apr 2026 19:00:44 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:44 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:44 +0000
Files and hashes:         1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
                          2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: SVk29vYeZ2NX83vXN9dsY0z9HWWSLwjCluiMajApRZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:c7:cd:9f:2c:eb:c1:9b:c0:3a:ac:76:fa:28:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Apr 16 19:00:44 2026 GMT
            Not After : Apr 17 19:00:44 2026 GMT
        Subject: CN=50060b9b880f84080046c5d553bbbb76bebbd629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:5e:61:76:e9:d5:25:9f:f7:5d:d3:df:a3:
                    af:fc:da:ff:c1:79:02:8d:44:ff:1d:13:e5:d6:76:
                    54:3c:0d:9a:43:5a:6a:08:21:c6:09:13:b0:3e:dc:
                    a1:36:c2:07:ff:d7:a2:03:de:67:e9:a6:92:fc:d5:
                    80:18:39:f0:d1:a5:e8:52:c0:64:be:38:16:c5:fe:
                    5e:4a:1a:d3:8f:29:94:4d:71:5c:8c:45:f3:77:75:
                    4c:d7:3d:cb:5d:d6:e9:9b:77:c4:1f:16:de:cf:dc:
                    5d:74:f3:7b:e5:93:89:39:18:bb:6a:98:fe:f2:1f:
                    42:06:1e:86:44:92:5e:8e:b6:14:51:8f:c0:b1:6f:
                    e6:7b:36:cd:0e:75:c2:ea:3c:03:90:18:87:c3:48:
                    2f:bc:ff:f7:e1:2d:ba:94:8e:13:17:9c:73:1b:b8:
                    d2:6f:d9:fe:a3:a5:65:39:db:9b:57:56:c0:84:2d:
                    a7:22:5c:bf:74:ca:0f:dc:8b:19:e4:e5:77:1f:a5:
                    17:ff:f8:3b:f3:76:21:09:0f:86:4d:58:eb:cf:4c:
                    4a:ae:ae:e5:fd:e9:c0:93:ea:53:45:de:3c:a6:a6:
                    4d:99:75:64:b8:e1:b9:70:84:7d:ba:56:7e:35:4c:
                    e3:67:66:f0:79:bd:0d:58:ea:61:dd:14:5c:c5:ab:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:0B:9B:88:0F:84:08:00:46:C5:D5:53:BB:BB:76:BE:BB:D6:29
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:74:a8:e6:97:ca:47:4c:98:10:45:d4:c0:da:78:52:a1:
         77:c3:7b:03:ee:09:26:15:4f:79:50:14:9e:24:e0:3d:5e:44:
         c3:6f:34:7f:a8:a4:c0:3e:ac:69:ad:b6:9b:24:47:d8:3b:3d:
         f8:5f:c6:03:42:79:92:cd:86:63:81:44:f6:e0:86:b7:d1:c5:
         a9:66:04:fb:ef:8b:bc:c4:2f:90:e9:c1:6d:48:3c:b3:f8:61:
         34:12:3f:73:0d:d3:4f:9f:2b:03:15:d3:a2:41:03:b2:eb:5a:
         34:e6:e5:6e:b6:63:ab:c5:6b:7b:b5:5b:73:a7:73:bf:a3:8f:
         13:7d:0b:3a:ff:93:90:9c:d4:cc:a1:4b:80:52:33:06:c3:62:
         27:65:f6:2c:a7:ab:86:0a:0e:0b:88:15:98:af:5e:a4:8a:b7:
         b3:10:ae:51:4e:37:6b:4d:2b:a4:45:f5:e3:bd:75:27:19:ea:
         db:99:04:fa:fd:10:20:b6:02:e6:3b:fe:54:c4:e9:41:06:0c:
         08:98:9e:d6:af:04:93:d2:61:2a:b1:0b:af:43:4d:0b:3a:5b:
         13:b4:7a:02:ff:a3:62:60:3b:12:c7:fd:de:42:b5:13:a6:fd:
         d9:0c:a7:8d:03:16:96:ca:56:06:31:32:92:5d:d0:24:bd:41:
         68:14:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:14:54 2026 by rpki-client