Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          5bSvM9UYRA2lFXVFCxxOuivFTBavQLpMVykZjeqV8lA=
Subject key identifier:   3D:A1:A3:DA:4E:6E:DA:F5:1C:70:54:46:B9:60:1C:3A:AD:1C:28:D3
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       019D97E1B274922CDF996B6AEE18A867D37D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          1829
Signing time:             Thu 16 Apr 2026 20:00:44 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:44 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:44 +0000
Files and hashes:         1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: Oom7kBCR3FoTT0kVlfaXj3tOx6wCcM0lxypY6UrvGxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:b2:74:92:2c:df:99:6b:6a:ee:18:a8:67:d3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: Apr 16 20:00:44 2026 GMT
            Not After : Apr 17 20:00:44 2026 GMT
        Subject: CN=3da1a3da4e6edaf51c705446b9601c3aad1c28d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d5:c1:c3:ef:b2:b5:aa:31:f7:d4:1a:1f:61:
                    30:08:56:40:ef:1c:fe:99:d2:81:bc:43:3c:20:0a:
                    a4:d6:03:72:9e:ac:b5:f7:65:f1:e9:f0:4c:f0:d8:
                    9f:f6:d7:2c:2a:3e:6c:e9:43:cc:87:70:32:ae:6e:
                    ef:9d:13:57:fa:a0:50:00:d2:07:b8:ca:85:fb:4e:
                    0b:b5:52:53:96:26:73:0f:65:d0:a7:6d:e3:20:d4:
                    3d:49:e0:f6:39:d2:3a:47:50:bb:03:2c:d2:c7:d3:
                    4e:4b:0a:79:31:a5:e1:15:83:d5:aa:20:a4:80:2a:
                    47:21:18:77:ab:d4:d6:63:9c:55:28:00:76:59:84:
                    94:be:93:d6:9b:fd:a5:79:65:92:c8:cc:0a:8b:c7:
                    5e:b5:0d:8c:89:9d:15:36:a3:0d:9b:2d:cd:c3:0b:
                    4a:4e:fe:98:fb:c8:bb:ef:d6:e7:7f:fc:47:86:e7:
                    b6:9c:d2:ef:44:a5:cc:04:0e:dc:75:e9:01:35:0f:
                    53:17:de:49:32:41:9b:c8:b8:64:f9:2d:fe:11:25:
                    b8:4c:a6:c8:17:47:39:59:c9:2a:f2:80:b1:5a:bd:
                    0c:19:73:0d:b6:22:a3:cc:b0:17:64:59:09:f3:14:
                    20:f8:f2:82:9d:03:85:27:c1:cd:c3:02:b0:b7:fb:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A1:A3:DA:4E:6E:DA:F5:1C:70:54:46:B9:60:1C:3A:AD:1C:28:D3
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:5c:f0:18:d5:29:81:30:8a:3e:55:1b:7d:ce:02:2d:7d:19:
         41:66:5f:37:44:a6:8c:de:cf:0b:a1:60:7c:49:73:5d:d1:1b:
         95:4c:80:36:f6:11:40:6a:82:c7:0f:81:1f:c4:4a:ab:d6:26:
         31:15:06:b1:ed:a6:25:94:64:01:cb:61:9b:bd:f2:90:f6:f9:
         75:68:7d:9b:59:87:bb:92:38:fb:66:ec:f4:99:b7:40:d4:89:
         65:08:a9:94:b4:e0:97:89:f6:62:fa:dc:35:40:9a:bd:ee:b8:
         26:2c:ad:65:ca:0a:8b:1c:e4:a8:48:8a:3f:fa:5d:a9:50:79:
         42:ce:8f:d5:22:63:70:5f:d0:d1:d0:05:4a:8f:d1:c5:52:3e:
         44:68:d9:75:82:bf:a2:e2:76:e3:7b:47:aa:4a:34:34:a7:95:
         9e:49:55:3a:10:91:31:03:09:46:c3:ba:7f:bd:bf:bb:91:9a:
         e1:82:92:c4:ee:67:66:d6:9a:ec:b5:60:8f:37:c0:2b:18:e0:
         ce:f3:c5:0d:64:ce:4e:6c:70:38:f0:6a:c2:6c:88:23:41:36:
         5f:9f:15:05:19:2b:a8:ee:32:f8:a9:e4:b9:20:b8:3b:56:84:
         51:3a:ae:31:6c:eb:8d:c2:1a:76:9c:86:e7:bb:6d:ac:f2:f9:
         c2:52:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:13:06 2026 by rpki-client