Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
File:                     q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft (raw, json)
Hash identifier:          ZkVhRo/eSTbbSQrAqFCpyvZFeoTBRwFQRf4CxPuzRLA=
Subject key identifier:   01:F7:9C:98:BD:D8:EB:4A:3F:3C:8A:3C:57:0E:64:30:D3:A7:4B:D0
Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
Certificate issuer:       /CN=ababd67e3e108c19f34fc00c76c6005993233512
Certificate serial:       019DB16AB45D54183BC57C4ED58E9E3E96D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
Manifest number:          FB
Signing time:             Tue 21 Apr 2026 19:00:53 +0000
Manifest this update:     Tue 21 Apr 2026 19:00:53 +0000
Manifest next update:     Wed 22 Apr 2026 19:00:53 +0000
Files and hashes:         1: pGugAdUz5p-YAsFMIka9-wuebXc.roa (hash: YdqhZ0Mq4ECgTaBnJBwjKT9BiKBYB9QUoZqYUPVe6yI=)
                          2: q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl (hash: 98rqBj5WpzAnHgiijPBs3Enbp++sxi7ZJYajEhvW0bQ=)
                          3: sk8j4ooIq_6310cgpT7JHgS__6Q.asa (hash: rnR8JO7Sl7gfRDV7P8yjIvScF3IAyOEjWduQgbXRoFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 14:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b1:6a:b4:5d:54:18:3b:c5:7c:4e:d5:8e:9e:3e:96:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512
        Validity
            Not Before: Apr 21 19:00:53 2026 GMT
            Not After : Apr 22 19:00:53 2026 GMT
        Subject: CN=01f79c98bdd8eb4a3f3c8a3c570e6430d3a74bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:47:35:ef:14:78:4a:a7:d1:4d:23:74:d7:
                    57:b8:77:f6:bb:21:3a:3b:86:88:f6:d3:b6:eb:0a:
                    e7:81:59:9c:5e:c3:b0:9f:cd:bb:e5:22:61:d5:28:
                    e9:51:37:83:bd:6d:19:75:d8:ff:f0:f5:48:9f:69:
                    36:35:99:30:15:36:03:ec:65:5f:f0:19:f3:09:0a:
                    b2:b2:e7:56:c7:15:d2:ea:bb:41:c8:4b:83:d0:07:
                    75:04:1f:72:a8:91:6f:72:e2:43:9e:f3:6d:75:9a:
                    35:9f:ed:36:7b:e2:64:0b:d1:a4:08:65:6b:9d:35:
                    2d:6e:8d:8e:50:28:c9:b3:c6:46:e9:35:ab:ff:31:
                    90:9f:3d:1e:54:43:8f:14:32:02:8f:c1:48:ce:00:
                    06:df:44:49:56:aa:cb:b4:eb:28:88:c4:76:28:5d:
                    95:ec:bb:47:e5:c0:95:26:7b:b9:3a:c8:3d:b8:00:
                    be:20:59:e0:b9:67:e0:ae:f6:51:6e:24:c8:89:e2:
                    76:a4:f4:da:3b:cd:12:d3:69:ad:ed:00:6f:47:c5:
                    04:e7:fb:35:79:5f:f0:98:8b:89:cd:9b:36:00:68:
                    3a:26:92:3d:e1:97:99:7f:17:0e:60:dd:67:0c:0c:
                    4b:8f:fa:4f:ba:a9:42:82:b8:3b:67:8c:9c:08:7a:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:9C:98:BD:D8:EB:4A:3F:3C:8A:3C:57:0E:64:30:D3:A7:4B:D0
            X509v3 Authority Key Identifier:
                keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:31:61:a8:ba:fb:9a:56:cf:83:c2:0b:c9:f2:dd:5e:e4:
         89:f2:b3:c3:26:21:6b:63:c3:bd:7b:4f:b9:a4:9d:9d:4d:8a:
         ce:f7:f8:57:7d:f5:ed:6a:ec:e6:f0:d3:13:a3:60:21:ae:ac:
         86:e2:0d:ca:fe:23:f1:99:a2:92:25:5a:32:c5:d4:ce:d0:fc:
         3c:c7:3c:06:dd:ea:ef:5d:62:f2:84:f8:7d:b1:8e:c1:b4:c9:
         b9:e0:5b:80:15:03:b2:61:b6:15:f9:45:28:67:f1:74:0e:17:
         60:18:6e:fa:ad:ca:8c:d3:3a:f8:96:93:0b:3f:28:0a:18:05:
         67:52:ce:98:41:d2:7a:4e:51:40:23:70:19:f6:33:5c:31:24:
         2d:14:a5:95:f6:4e:58:ae:d3:be:d8:42:b7:ca:6d:de:f6:76:
         6a:eb:4d:2c:e1:0d:a0:00:d7:51:7d:8c:0b:01:27:cb:25:5f:
         9d:8d:80:8b:a8:87:2e:b0:11:fd:5b:34:00:a1:bb:a4:f4:96:
         72:91:44:c1:0b:a4:ae:b9:66:1d:73:8a:7a:7f:37:11:1b:0f:
         1e:63:8b:65:f9:c3:dc:0a:0f:d2:06:37:23:f6:5b:50:6f:6e:
         a3:9a:f1:c6:f6:09:b6:44:a9:97:72:e9:17:b5:63:7e:cc:bd:
         fe:b8:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:17:18 2026 by rpki-client