Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
File:                     6u6iC7vbml0c3HEU4q9RjnaxQm4.mft (raw, json)
Hash identifier:          tDwdekFoLUcrFAb9jdzl1e8SfyvpUVwOiQ1BXYDEDoc=
Subject key identifier:   7E:85:51:91:87:1B:AC:24:24:07:87:51:1C:8A:23:87:7D:6B:00:EA
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Certificate issuer:       /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial:       019D99CFF1801C357A174E917AA85D01DB46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 05:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:34 +0000
Files and hashes:         1: 6u6iC7vbml0c3HEU4q9RjnaxQm4.crl (hash: TLHa0QTlZ2ez+9hFHmhkrviEQh0eXT8GazGcjCa/RdQ=)
                          2: LZEBPluhCoborF_O0Fk61GdYTw8.roa (hash: zfbx+QvXX+SeMAX2wWC1OWFd4i1WRuUBcXy9UiFHCF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:f1:80:1c:35:7a:17:4e:91:7a:a8:5d:01:db:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
        Validity
            Not Before: Apr 17 05:00:34 2026 GMT
            Not After : Apr 18 05:00:34 2026 GMT
        Subject: CN=7e855191871bac24240787511c8a23877d6b00ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:6f:9e:5f:85:80:fa:f8:23:6c:9a:9f:ec:
                    7e:e7:40:c7:96:81:5a:79:8f:5c:1e:53:49:7e:65:
                    bc:6c:45:06:a6:79:36:7a:04:b9:0b:4c:38:2e:9b:
                    85:63:6b:a1:d7:dd:15:fb:6a:33:f2:06:8f:6b:79:
                    b7:45:31:52:23:cf:a4:f6:35:e2:ff:e2:34:d0:03:
                    6d:d7:60:61:0d:6f:6d:3b:64:52:c1:2d:71:fa:58:
                    e8:8c:3f:a7:ea:0a:30:86:3f:bf:78:46:15:59:1c:
                    1a:26:5b:20:b1:35:e2:0d:e9:f7:af:94:10:ea:54:
                    6a:52:15:d3:87:61:fe:bc:f4:3a:c0:dd:fb:8b:88:
                    7c:01:38:b9:e0:10:76:52:83:b4:c8:37:58:0e:14:
                    36:80:5c:42:9d:f6:4d:1f:97:8b:4c:80:0b:73:07:
                    2c:2f:f0:a2:75:37:fd:f4:01:c2:8f:ca:55:db:cd:
                    10:26:a7:ec:3e:f8:d9:69:5f:7c:0c:1a:0d:d2:7c:
                    82:fd:73:da:0f:65:ad:c8:7a:2a:8e:c0:97:c1:9a:
                    35:01:8a:8b:a4:88:bc:5c:73:3c:0f:16:97:ac:6b:
                    b9:a5:fe:b5:aa:a1:40:dc:1e:ec:9a:2f:fa:fe:ac:
                    90:93:22:ce:ac:eb:9d:ba:1a:23:c6:9a:d9:62:42:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:51:91:87:1B:AC:24:24:07:87:51:1C:8A:23:87:7D:6B:00:EA
            X509v3 Authority Key Identifier:
                keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:71:c0:0d:29:12:05:eb:9c:64:e3:f7:28:cb:f2:e1:05:
         a4:54:26:54:6d:24:bc:d5:94:d7:4d:5f:32:02:21:1f:0a:db:
         52:e4:a8:c8:c1:45:0e:4f:07:58:a8:ff:62:b7:78:5f:fe:dd:
         f4:09:39:48:65:ea:db:0b:04:db:2c:ce:53:6e:92:0a:9c:fe:
         be:38:e9:63:0f:19:a1:c3:2e:e1:b7:61:af:ee:f7:cd:43:c8:
         42:1b:f4:33:64:dd:64:20:e1:d1:9c:8e:ae:12:6c:33:c3:64:
         b2:46:83:3c:0e:ea:79:9b:ec:60:1c:5f:a9:63:b8:5b:27:b9:
         d5:16:45:7f:bb:9e:31:98:e6:17:59:62:f1:fe:90:f2:33:78:
         a5:c6:df:a1:d6:a1:7b:3f:08:6b:86:f9:03:2c:5e:c0:b2:e6:
         45:5c:f7:b0:29:0d:31:f7:f7:a4:0c:44:b3:5a:1d:2c:b7:3b:
         4f:25:cf:ac:e1:03:cd:f0:6c:88:be:ca:8b:94:8a:d6:36:e6:
         fc:67:e3:2a:2c:11:dd:fe:20:00:5b:01:16:bb:c0:e4:42:d3:
         bf:67:46:0d:20:af:59:a5:74:d0:0b:9d:5a:b9:9a:ee:ae:53:
         44:31:ef:9b:7b:c1:96:ed:01:c1:f7:97:cc:5d:02:eb:82:6c:
         ed:df:14:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:25 2026 by rpki-client