Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          skXfXQE/wCY+1XQ0fyNWnOx36Ja5YzccQ+Hvlad5tfU=
Subject key identifier:   9E:E8:72:87:79:87:06:1F:30:0D:74:B1:FF:BB:6F:15:DD:74:69:D0
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019DB3226039E5CC692FE714D6AE820B37F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          18E5
Signing time:             Wed 22 Apr 2026 03:01:07 +0000
Manifest this update:     Wed 22 Apr 2026 03:01:07 +0000
Manifest next update:     Thu 23 Apr 2026 03:01:07 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: 40JcIBYC9q+p+qe8ERfCBNPWCjh9r3QJcNW1YjQ1X8Y=)
                          2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=)
                          3: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=)
                          4: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=)
                          5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=)
                          6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=)
                          7: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b3:22:60:39:e5:cc:69:2f:e7:14:d6:ae:82:0b:37:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Apr 22 03:01:07 2026 GMT
            Not After : Apr 23 03:01:07 2026 GMT
        Subject: CN=9ee872877987061f300d74b1ffbb6f15dd7469d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:9f:47:db:81:5f:73:da:27:ce:1b:11:22:
                    41:7a:e9:75:e0:b8:6b:34:c8:1d:25:dc:2a:70:65:
                    a6:30:89:b1:7b:35:f3:bc:2a:34:c9:f2:f5:85:8a:
                    56:6d:e1:67:94:4e:ba:ca:1d:b6:e9:f1:9c:9b:4d:
                    7c:1a:a7:37:5a:16:4f:ae:4c:42:a6:98:ff:25:40:
                    8b:81:41:0b:09:6c:bb:89:e0:9b:e1:14:61:4a:61:
                    3a:b9:7d:cf:6a:12:b1:9f:af:26:4b:80:07:15:81:
                    d6:54:64:92:32:c4:5f:70:d1:bc:db:84:bb:c5:9e:
                    70:06:02:1f:a5:3c:f0:ef:04:44:38:8f:75:a0:be:
                    1b:59:05:2c:bf:e7:71:da:57:cb:4c:c9:94:95:6a:
                    90:90:b3:c1:5e:59:34:df:0b:2d:37:ad:f6:73:97:
                    14:44:c3:1d:b8:1a:46:ab:cd:c9:01:5e:e4:9a:e7:
                    73:94:c9:bc:c1:3e:86:89:c2:aa:27:99:b0:b3:4a:
                    b8:86:f7:d3:c1:56:2a:68:0d:c9:4b:ca:58:9d:14:
                    de:83:43:5f:84:f8:60:2f:d1:ca:92:56:9f:2b:65:
                    02:04:a6:c7:33:b8:01:62:b9:f1:85:9d:70:51:43:
                    dc:4e:3b:d7:1e:34:8e:db:8b:20:f8:c9:ce:00:e5:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E8:72:87:79:87:06:1F:30:0D:74:B1:FF:BB:6F:15:DD:74:69:D0
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:54:b0:c5:aa:d5:c2:2e:23:65:0f:a5:f3:5d:f1:75:3d:12:
         ee:f9:44:66:f1:dd:b1:bf:81:db:4b:d1:8b:46:b8:e6:89:5b:
         a3:1a:0d:5d:89:54:26:99:32:0d:39:70:5a:73:6e:44:8b:c2:
         08:fe:c1:9a:da:5b:72:9d:3f:f0:fe:87:ae:bf:ef:10:0d:f8:
         ae:12:47:67:bc:53:ce:1f:36:d7:91:0a:ef:af:20:35:9f:14:
         36:d4:d1:20:d7:21:74:ce:0d:b7:bf:b5:1c:fe:c6:33:94:e3:
         1f:66:0e:3b:db:c9:28:ac:a4:f7:99:a3:dc:14:05:21:7d:31:
         78:bb:d3:85:41:ff:50:46:7a:8b:a0:0d:c4:61:f1:ef:59:10:
         35:0a:a5:da:e2:d6:46:fb:72:74:43:68:9d:73:29:f0:11:b1:
         95:fe:6f:19:8c:1e:c7:22:e7:12:0d:c1:7c:ad:01:6f:24:df:
         a2:6c:79:0d:99:00:3b:3b:43:9b:fd:00:51:68:34:e1:06:98:
         32:5c:21:a5:d9:1e:31:92:c6:32:6d:03:1e:b5:b0:e0:d3:eb:
         42:b5:f3:60:58:76:05:1e:0b:ba:06:a7:b6:e4:8a:bf:53:22:
         50:c5:bb:cb:ee:37:bb:57:da:bc:f6:40:53:a6:50:84:2f:fd:
         10:23:18:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2zImA55cxpL+cU1q6CCzf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjYwNDIyMDMwMTA3WhcNMjYwNDIzMDMwMTA3WjAzMTEwLwYDVQQD
Eyg5ZWU4NzI4Nzc5ODcwNjFmMzAwZDc0YjFmZmJiNmYxNWRkNzQ2OWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqCfR9uBX3PaJ84bESJBeul14Lhr
NMgdJdwqcGWmMImxezXzvCo0yfL1hYpWbeFnlE66yh226fGcm018Gqc3WhZPrkxC
ppj/JUCLgUELCWy7ieCb4RRhSmE6uX3PahKxn68mS4AHFYHWVGSSMsRfcNG824S7
xZ5wBgIfpTzw7wREOI91oL4bWQUsv+dx2lfLTMmUlWqQkLPBXlk03wstN632c5cU
RMMduBpGq83JAV7kmudzlMm8wT6GicKqJ5mws0q4hvfTwVYqaA3JS8pYnRTeg0Nf
hPhgL9HKklafK2UCBKbHM7gBYrnxhZ1wUUPcTjvXHjSO24sg+MnOAOUfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7ocod5hwYfMA10sf+7bxXddGnQMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1SwxarV
wi4jZQ+l813xdT0S7vlEZvHdsb+B20vRi0a45olboxoNXYlUJpkyDTlwWnNuRIvC
CP7Bmtpbcp0/8P6Hrr/vEA34rhJHZ7xTzh8215EK768gNZ8UNtTRINchdM4Nt7+1
HP7GM5TjH2YOO9vJKKyk95mj3BQFIX0xeLvThUH/UEZ6i6ANxGHx71kQNQql2uLW
RvtydENonXMp8BGxlf5vGYwexyLnEg3BfK0BbyTfomx5DZkAOztDm/0AUWg04QaY
MlwhpdkeMZLGMm0DHrWw4NPrQrXzYFh2BR4LugantuSKv1MiUMW7y+43u1favPZA
U6ZQhC/9ECMYfg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:51:10 2026 by rpki-client