Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          C8EypNLpyz1Egl3aPK8VGNYn6z7jRMez8xhc8Pc/U/A=
Subject key identifier:   3C:FA:4B:56:54:46:B2:01:E0:9A:54:C2:D8:8F:6B:E6:63:21:7D:24
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       019D9962B5E92BA7A2BC4788F43E713B0863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          16A6
Signing time:             Fri 17 Apr 2026 03:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:16 +0000
Files and hashes:         1: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: 2GyWV2WGHBjcPBnvc2SyzaVvUnf9M80ebHS8nUHzQU4=)
                          2: 7loClnPIcUbtAbx6mGh0lsGW48o.roa (hash: yOcHIjd7oPv+N53vYMQlYvden0DATni198YCMHAm4lo=)
                          3: OdOsnmY7mFWYl3NneL7smCsUfBk.roa (hash: 3ZUW45T9dWsqHLezKT+QoIPnfwMwqZBKXn6daUP8VPY=)
                          4: RpFQVqs6AhWj2RTqUCdH4sWGuGU.roa (hash: j5JWbGxhiLws6+4v7Q+xQtpFTmvjadNSZy3J+QPjD2E=)
                          5: bJ1xftCeyWl4bXChZCw5Xi3s6aY.roa (hash: OVR8awV0iRm5IfM/UmEnkKeqOwpzIAzrZDkyNT/4Rhw=)
                          6: feRgJ8Tgs02CST_94QIydWyNOqI.roa (hash: 6/iSawmzTOEL47ThEXqsqngTOM3QKDo/dxI2Dx6rGEM=)
                          7: gsF1NmgMnu9Ca4ZyyOypgxhgV0g.roa (hash: TJu260zcK4vOdWrtlvkrVASOWCULxHs+p/9+8TiE4mQ=)
                          8: yli3cmEKkG3rbScNRHGblhqAvA8.roa (hash: qAidfk/RnX+PDBXeHtXjoHlHJ126KLvwshcghnEBZqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:b5:e9:2b:a7:a2:bc:47:88:f4:3e:71:3b:08:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Apr 17 03:01:16 2026 GMT
            Not After : Apr 18 03:01:16 2026 GMT
        Subject: CN=3cfa4b565446b201e09a54c2d88f6be663217d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b7:ac:7e:36:3a:0d:f9:fc:ab:e8:02:c8:53:
                    fa:e9:75:02:78:22:b6:da:9f:b3:b3:34:59:24:2e:
                    41:f2:04:f2:09:1e:80:b5:0e:aa:a2:02:03:86:14:
                    7b:a3:17:b5:49:01:d9:a6:f0:66:b3:3c:51:9b:db:
                    91:b1:fe:3b:c2:eb:fd:a4:ad:97:c9:2a:9b:88:bc:
                    05:17:fd:77:6e:7f:40:e0:ec:11:6e:e6:d7:44:1a:
                    de:18:de:97:52:93:32:80:f6:02:4b:a1:40:d5:b2:
                    7f:d9:d1:1f:be:3c:ec:41:87:c8:59:3e:d8:c4:37:
                    c6:06:10:26:b6:4b:06:0e:7c:92:5b:e9:b7:a0:78:
                    ba:dc:01:7f:4a:74:aa:f1:7a:88:c0:3a:d8:2e:6c:
                    ad:dd:42:0c:3d:f5:25:99:ea:4a:db:2a:50:84:4c:
                    2e:39:67:07:62:3f:5c:51:a0:1d:5f:1f:d7:f8:d5:
                    dd:02:29:9a:60:b4:50:71:35:c0:44:a7:65:f8:ff:
                    34:ce:51:da:13:86:39:a3:32:3a:ce:db:ac:a3:5b:
                    04:f4:4b:11:1f:f6:91:e7:4b:90:21:a3:46:ec:f4:
                    9e:20:13:a8:11:bd:5b:c6:b9:93:54:27:22:d8:c3:
                    b4:fb:c9:51:ad:5f:d9:e5:30:ac:c2:95:0c:57:63:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FA:4B:56:54:46:B2:01:E0:9A:54:C2:D8:8F:6B:E6:63:21:7D:24
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:38:56:f9:a2:bc:ad:bb:9a:a2:f7:25:8c:26:ea:a1:be:
         52:f9:58:08:37:0a:8e:88:20:d6:75:82:82:e0:44:44:94:fa:
         f6:5d:26:d2:22:ee:82:fa:e4:38:88:57:b4:d1:f0:d6:8c:05:
         6a:6f:78:1a:0a:9c:dc:06:82:55:a9:0e:39:70:4f:97:0a:49:
         9a:0b:5a:8d:b6:9c:35:e3:f2:1a:71:09:55:8b:9e:b6:44:7b:
         70:f1:08:46:89:df:7a:81:f4:26:f4:c2:c7:d4:cc:54:d5:64:
         e4:cf:28:bb:f4:10:0c:75:3a:af:80:52:7c:d8:15:bc:09:39:
         9c:e4:a9:db:40:73:86:05:bf:df:c6:29:d2:50:84:4e:69:6c:
         8f:f5:29:c2:9e:5f:32:17:ab:23:11:4e:9e:66:44:74:0f:51:
         2f:77:7a:50:f4:9c:e8:1c:a1:de:29:5d:2b:df:66:57:79:0a:
         df:73:0d:7c:79:2c:1f:b6:1a:8f:70:48:88:ff:b4:68:ea:ed:
         01:31:2c:fd:d1:36:a6:96:9d:54:64:ba:e7:c3:24:c7:02:d8:
         49:66:0c:5c:ca:84:79:2c:71:5c:05:d5:c1:1a:1d:14:a6:3c:
         82:41:c5:d6:63:ea:65:7c:be:7f:9f:c7:a5:3f:7b:ab:a3:37:
         b1:f3:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:32 2026 by rpki-client