Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File:                     aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier:          kND2S8r+wwNAt2G8nJGU0dHP9ICjUuGw0YL/cGx6wEA=
Subject key identifier:   F6:D3:78:07:85:62:CD:97:75:DF:6C:FA:E9:6C:9C:11:13:86:BA:A0
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer:       /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial:       019D98864F029E33E50380E5CDD64601B878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 23:00:31 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:31 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:31 +0000
Files and hashes:         1: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: rs1ngt64MCBQyHnnIYsjuQAWEixks3A/eoMlatnZNMg=)
                          2: lomzg8TRXkBkQAJV3SYj7kC0l0k.roa (hash: gnOZFo1e3nzIFcl3On+9oUhEAr2nhDp2g8Ki0TCHhqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:4f:02:9e:33:e5:03:80:e5:cd:d6:46:01:b8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
        Validity
            Not Before: Apr 16 23:00:31 2026 GMT
            Not After : Apr 17 23:00:31 2026 GMT
        Subject: CN=f6d378078562cd9775df6cfae96c9c111386baa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:c8:5a:6d:8c:d2:af:b1:ee:95:97:a2:39:
                    d5:22:48:c0:2b:11:7f:e4:a3:31:6a:c9:b6:a4:55:
                    12:50:71:cf:44:06:63:a2:bf:f6:42:de:cf:a1:a0:
                    35:0c:a9:41:ac:70:21:ee:e7:33:ab:ca:ef:05:cd:
                    b6:75:e0:0c:3f:de:c3:11:f4:70:5b:69:69:d8:bc:
                    76:78:c1:05:e4:fe:5b:fc:e3:91:68:01:dc:59:a8:
                    a9:e2:a5:ef:7e:d9:3d:9b:42:31:ee:0b:d3:c3:b7:
                    a5:66:75:c2:f5:d7:95:8a:d6:75:ca:14:30:64:45:
                    bf:13:22:34:2e:eb:72:66:2e:33:5c:b8:1a:d2:99:
                    9e:1c:02:fd:fa:28:51:64:ce:98:f4:21:59:75:e3:
                    59:af:38:c5:c3:ce:a0:d3:10:11:b0:77:2b:97:8e:
                    ef:6c:02:94:f7:26:19:7b:6b:07:af:cf:87:7d:e2:
                    86:52:e4:b6:56:91:e2:28:09:ab:45:60:6f:eb:ae:
                    06:6a:83:34:7e:78:71:14:1d:32:d9:d1:03:71:2c:
                    24:59:15:d5:f5:a5:a1:3f:a9:c1:b0:2d:d1:41:49:
                    97:41:10:21:07:a6:41:e3:72:ae:9c:a3:ae:e0:1f:
                    5a:b1:ee:1e:25:bc:a3:d1:fa:8c:13:ce:a8:4a:d3:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:78:07:85:62:CD:97:75:DF:6C:FA:E9:6C:9C:11:13:86:BA:A0
            X509v3 Authority Key Identifier:
                keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:e4:8c:d6:e4:5e:2f:02:1c:d4:d7:85:62:ef:d0:02:7b:
         9a:60:a8:76:3f:24:d7:e2:a4:99:55:42:86:77:40:64:c2:a8:
         50:8a:e7:27:8f:51:39:a4:9d:fb:b0:12:05:52:48:bb:f6:2a:
         96:21:a2:7e:05:e7:00:58:4c:2e:78:aa:c3:78:6f:36:66:b6:
         02:0e:40:9a:7d:05:f7:56:e2:2b:03:a9:59:46:35:71:f5:24:
         78:72:48:e2:d0:a3:90:5f:9b:0d:1c:31:25:36:24:e0:27:7a:
         e9:f5:4a:a9:5f:37:fa:66:1b:01:75:04:34:d6:2a:4f:f2:05:
         7a:b1:7e:b2:70:4e:37:df:07:1e:da:07:5a:dd:af:64:5b:98:
         99:4a:3c:4d:17:00:73:b2:06:69:1e:49:f8:3a:e1:10:19:23:
         c9:8b:bf:60:04:1e:58:90:80:ef:e9:f7:e2:71:4e:33:9a:fa:
         d9:e4:d1:c9:20:10:ba:88:5d:ba:ff:13:6a:a0:50:8a:8c:91:
         b5:d8:93:a3:62:da:81:ee:d1:32:d0:2e:d3:0f:24:f4:df:e3:
         df:b6:04:c6:aa:67:2b:07:d9:48:a4:46:b8:a5:c5:d2:d4:2f:
         eb:4d:45:cb:52:df:7c:77:12:d9:72:2c:af:6f:6d:80:57:32:
         a3:fb:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:53 2026 by rpki-client