Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File:                     b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier:          +N+56s/8WMHf3rbGAQIkWeBzRCfG6Z7l4T4kHipOMo4=
Subject key identifier:   46:7B:03:92:9E:15:B7:CE:63:22:A1:E5:38:93:42:4A:90:6E:2E:0A
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer:       /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial:       019D97E1754BB767D258F9FBB7E98DAE8398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number:          18C4
Signing time:             Thu 16 Apr 2026 20:00:28 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:28 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:28 +0000
Files and hashes:         1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: VDupkF679Qd22qE5Fcfj2CNwZ6PrkUmaQ54cvZIpTE4=)
                          2: nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa (hash: 7qt1S1ac2mzquZqXIpN+D95+VEOfMXy8eLXHEbsWSgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:75:4b:b7:67:d2:58:f9:fb:b7:e9:8d:ae:83:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
        Validity
            Not Before: Apr 16 20:00:28 2026 GMT
            Not After : Apr 17 20:00:28 2026 GMT
        Subject: CN=467b03929e15b7ce6322a1e53893424a906e2e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:51:64:b1:71:71:fa:0a:d1:d3:c1:a0:21:
                    da:d2:48:b3:ac:3f:02:99:51:7f:62:aa:e6:84:53:
                    98:ce:00:d0:fe:d2:4c:9c:ce:85:e5:d1:c4:3f:6b:
                    7c:16:6e:e7:a8:69:3c:fd:f8:8f:ef:d9:0f:0f:14:
                    06:44:b3:37:f9:9b:13:4d:5f:5b:54:df:d6:fb:8e:
                    86:79:48:16:e8:cb:57:cf:48:eb:a6:bf:97:43:16:
                    e0:b8:b6:d8:10:51:e0:71:0e:e6:30:a6:e5:0a:47:
                    85:1c:51:be:98:61:ce:08:85:c8:08:47:09:0f:08:
                    15:68:41:a3:cb:e5:2d:85:a2:4d:a1:2d:cf:6e:17:
                    6e:32:a9:10:ee:4c:4c:4b:4a:2a:98:95:88:19:fe:
                    66:14:96:b5:b4:c5:62:6a:8c:b9:65:4d:76:8f:35:
                    a5:8a:cb:2f:8f:7f:23:e3:b2:c4:4a:06:a9:8d:34:
                    f1:4e:a0:32:92:11:bc:4e:94:f4:b1:54:ce:68:1a:
                    3e:51:fb:42:af:da:92:14:6f:49:eb:d2:73:d3:f3:
                    bd:bc:63:8b:05:54:82:39:53:17:cd:9c:19:c1:29:
                    87:1e:c3:d7:3e:58:19:37:b8:f0:42:16:93:59:3b:
                    e0:4f:bb:0e:fe:fb:67:a1:30:e3:2d:98:b6:45:fb:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7B:03:92:9E:15:B7:CE:63:22:A1:E5:38:93:42:4A:90:6E:2E:0A
            X509v3 Authority Key Identifier:
                keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:57:e6:f5:f1:d0:14:b6:ad:36:18:c2:75:c8:dd:93:25:
         c8:0d:27:f8:17:ee:86:7b:db:0b:e8:2e:11:e8:b1:a2:c4:95:
         da:98:b2:37:ff:d9:41:5b:e2:72:08:6f:03:22:53:71:d3:f3:
         18:6b:c5:3c:14:b3:5a:3f:47:f3:d3:13:8f:32:1c:1d:37:3c:
         5a:3f:f1:d9:bf:74:67:ba:ac:de:bf:9b:7d:8a:ad:f0:94:a3:
         f6:1a:74:d8:97:ac:23:1b:4e:08:27:42:18:9a:5b:c4:37:d0:
         72:a2:0c:9d:59:41:f5:3f:c9:99:3b:55:68:17:58:18:95:2c:
         e6:ca:79:b9:1a:19:e6:14:8c:9c:c4:d7:60:30:e5:b1:a1:93:
         65:26:f2:46:49:d8:e9:f9:95:40:09:d0:e8:e3:4f:14:56:15:
         e5:e9:ad:d5:e8:67:b9:27:dd:b4:80:ba:97:fe:6f:0a:e3:ae:
         a8:79:de:2e:8d:91:79:16:1a:3f:4d:f2:39:7f:bd:19:13:08:
         b4:4b:91:de:13:db:25:d4:41:0a:d1:14:48:df:58:ef:3c:51:
         45:cf:19:29:bd:8c:c6:1b:1d:05:1a:7b:ca:4c:48:f3:e0:35:
         4b:cc:dc:b9:61:49:63:ff:e1:4a:3b:88:4f:c8:81:90:a2:d8:
         8c:ae:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:45 2026 by rpki-client