Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          exn1iyuwPTo2MudD6P1l0pIVIV7m6s4FU0r82Nf5nLs=
Subject key identifier:   7A:0D:E4:3D:20:CD:BB:FC:DF:55:53:88:41:AA:37:5B:28:BD:B2:29
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       019DB359282E91E9B48F247FB849CB0508E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          18B8
Signing time:             Wed 22 Apr 2026 04:00:57 +0000
Manifest this update:     Wed 22 Apr 2026 04:00:57 +0000
Manifest next update:     Thu 23 Apr 2026 04:00:57 +0000
Files and hashes:         1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=)
                          2: Cm2yDKipOZ7sHlbR_Hzzd41nQYs.roa (hash: yWZv7NkDFzKo9TIx/TWSen6p9EYZYREsasP3I0CUfzQ=)
                          3: UsjKC7eB_MWBtsUBXJK-RFYAYHU.roa (hash: NGEpFjBcwXvxm7QU0HUsjAWpitcU0iExVxH5Fk2JaRc=)
                          4: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: ueil4YC7rtFuvCtbZ43FxvFsWLdjvRfId5CBixVJs+M=)
                          6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=)
                          7: wZoxcNDPJMq3-uyqVaFl1OpOC5s.roa (hash: LWpdYaFu3wCLKYxI/zQHGuILauK3fDO4Dw9ytsYmVLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b3:59:28:2e:91:e9:b4:8f:24:7f:b8:49:cb:05:08:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Apr 22 04:00:57 2026 GMT
            Not After : Apr 23 04:00:57 2026 GMT
        Subject: CN=7a0de43d20cdbbfcdf55538841aa375b28bdb229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:a7:56:e5:5f:c9:30:1b:4a:c5:1e:69:de:
                    7d:37:f3:4f:62:7c:ec:56:4d:49:cc:1a:b4:21:67:
                    f6:02:2f:49:41:19:64:6d:a1:83:d5:70:17:08:22:
                    a1:5e:be:d2:b8:b2:5d:ff:b2:98:5c:56:34:34:15:
                    7b:96:ab:a9:71:33:5d:91:e9:b4:a2:06:15:45:e0:
                    57:f4:66:14:04:a9:3a:f5:c3:49:38:ef:e8:4e:a7:
                    a9:82:47:f3:14:35:e2:e2:ef:3d:6f:73:46:95:6f:
                    a8:09:cb:35:a4:1a:a4:ff:d9:d2:6f:e0:16:38:7b:
                    57:f8:98:dd:c3:57:18:dc:5a:65:14:53:6a:e9:6c:
                    e6:de:57:6f:01:dd:e0:9b:3c:a5:21:8f:40:b3:a6:
                    0e:dc:3f:fa:79:9f:10:55:39:09:cf:32:9a:0c:6b:
                    8e:82:69:93:d4:a7:6d:84:da:04:06:3a:2e:3e:d3:
                    ed:7c:48:34:7c:bc:4c:9f:77:4b:06:83:15:11:41:
                    92:ec:c3:35:a5:98:d8:99:1f:4b:e9:92:37:97:24:
                    19:c8:b3:10:33:d7:71:5d:f9:9f:c8:35:c8:ff:47:
                    fd:c9:b4:c6:14:1d:bc:67:47:40:9a:61:de:86:d9:
                    71:63:20:36:fb:d5:f9:61:cd:fc:40:2e:72:cd:83:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:E4:3D:20:CD:BB:FC:DF:55:53:88:41:AA:37:5B:28:BD:B2:29
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:30:c4:e8:97:8a:8b:c5:60:fb:43:7b:3f:5a:a1:ab:2c:
         f4:1c:9e:05:b3:fb:9d:e8:36:67:6e:77:8a:a2:e1:43:c2:9f:
         a2:99:b4:8c:09:e4:05:83:c7:f8:64:ca:5e:d5:90:fb:63:60:
         2e:0f:91:19:d8:62:1e:5c:24:8a:99:69:55:47:d6:3e:78:62:
         97:48:d9:67:ed:05:82:af:d0:c2:eb:49:c3:6c:7a:6b:63:0e:
         35:14:ab:dd:7c:c9:16:0e:32:f8:3f:46:95:3b:b7:9a:39:e4:
         06:98:7d:6a:75:16:ac:e6:41:d1:de:c7:88:24:c8:93:e5:66:
         6a:5f:21:13:e6:28:3e:7e:60:d7:cf:91:1a:b1:26:16:5c:2f:
         fc:f3:f2:86:ab:45:c1:36:0a:c6:bf:77:49:26:d8:00:89:56:
         c5:d0:cd:28:c4:92:4f:59:57:4a:36:c1:40:94:9c:56:71:35:
         19:82:b8:5a:29:a6:95:2c:fa:64:80:7e:1a:79:6c:bc:86:cf:
         c6:5d:23:69:4e:57:57:ca:d5:b7:48:d6:3c:e3:67:55:f6:66:
         56:c3:d4:55:4c:d5:68:51:eb:9b:4e:ea:15:67:c8:59:de:8f:
         bb:89:9a:95:f3:45:09:53:2e:ec:75:3f:3c:b4:8a:db:0c:24:
         07:56:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:32:06 2026 by rpki-client