Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File:                     M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier:          DpqVRmcFNrDxKRmZxGTP4hrwxShhDvDENpOjgSM+8cA=
Subject key identifier:   A8:30:9E:5B:A1:C8:A3:00:64:80:7E:01:DC:66:08:D1:05:51:25:4E
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer:       /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial:       019DCF7555E8D151281B399EE1B792395380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number:          186F
Signing time:             Mon 27 Apr 2026 15:01:06 +0000
Manifest this update:     Mon 27 Apr 2026 15:01:06 +0000
Manifest next update:     Tue 28 Apr 2026 15:01:06 +0000
Files and hashes:         1: L1EgWlcecAT3ZJCSD7dsxRrS5gY.roa (hash: XjCdltafvkU+W0HTZ2Gpfs3P+GnUcAc+4fU6I9YL5EE=)
                          2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: YHJCNFZzFscvCScOZ1ZdXzY743qSZ7WEb/Ze0cMS/gQ=)
                          3: dKuH0lj-FcvTEnVQ3b_1AAvtcwM.roa (hash: IdTgVOkZiNhxtZ6mU+Z1OJOU/QZ/1eAxm1oF//XLXhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:75:55:e8:d1:51:28:1b:39:9e:e1:b7:92:39:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
        Validity
            Not Before: Apr 27 15:01:06 2026 GMT
            Not After : Apr 28 15:01:06 2026 GMT
        Subject: CN=a8309e5ba1c8a30064807e01dc6608d10551254e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:02:24:45:e2:61:10:24:39:7a:83:b4:aa:
                    09:d9:02:97:20:77:c7:36:60:56:fd:f7:3c:cc:1f:
                    17:f2:ba:ce:70:14:c9:13:e7:6a:23:fd:8d:09:0d:
                    ab:0d:e4:39:23:41:d8:b4:a5:de:3f:e4:b0:c0:0f:
                    b4:17:80:e2:de:61:c9:1d:6c:c2:c6:9d:71:58:7c:
                    d8:8b:d4:77:1b:f3:fc:a4:e3:21:51:ab:56:e2:dd:
                    65:89:80:8a:76:a4:41:99:be:3d:66:f4:38:26:12:
                    45:d9:27:2a:a3:19:41:8c:fd:d7:78:6c:ea:31:74:
                    ee:64:14:66:8c:19:56:5d:c5:2d:93:70:30:4c:af:
                    e6:8f:a5:f2:66:2a:4f:cf:0f:b9:97:bb:28:ed:3b:
                    1e:59:6f:af:2c:12:6f:e7:ad:5a:a3:12:c6:03:4c:
                    dd:92:34:3d:cb:cc:16:4c:3a:d6:cd:00:84:9b:d1:
                    9f:e2:33:d4:20:ff:94:2e:89:25:90:d1:d3:9c:e3:
                    b0:be:21:9a:71:7f:14:78:74:22:aa:1d:82:25:e5:
                    f7:7f:d2:cd:c4:1b:f3:0f:ec:2c:66:69:f5:d2:f7:
                    46:1e:64:f4:d9:c7:ef:4d:97:5d:2f:2a:2a:c3:e0:
                    36:0d:90:4d:75:10:5e:f3:81:ed:cd:4d:d7:b4:5f:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:30:9E:5B:A1:C8:A3:00:64:80:7E:01:DC:66:08:D1:05:51:25:4E
            X509v3 Authority Key Identifier:
                keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:13:69:a8:1f:58:5a:7b:42:33:1c:b5:fa:8e:ac:ed:c1:f8:
         06:83:33:1a:cf:7b:6b:0f:6b:7a:c2:9e:4d:08:ed:77:3a:6c:
         7b:dc:6d:e0:d2:f3:de:e9:1f:93:11:eb:ff:15:ad:37:97:5e:
         b7:f9:98:4e:af:89:38:4d:66:c8:08:c8:43:59:64:ee:92:4b:
         33:d8:57:76:c4:47:28:6a:63:ec:22:6a:13:da:3b:c7:cc:c7:
         10:c6:19:61:4d:5b:02:9d:75:f7:e4:4e:7f:c0:10:62:44:59:
         b6:4d:1b:f1:8b:87:22:2f:01:4c:d4:7d:20:41:42:19:bf:28:
         fd:be:45:d8:e5:93:8e:25:b5:bf:51:7d:ae:c5:c6:2e:3c:83:
         2f:96:0d:2f:f3:7f:2b:a2:bf:05:ed:ca:8f:28:0d:80:1c:a3:
         cc:06:10:e6:4a:07:22:6e:6a:a0:5b:d3:8d:5f:49:bc:bf:fa:
         7a:9a:b9:32:fc:ab:93:85:f7:9d:f8:de:08:45:6d:f3:35:4d:
         a7:01:d7:69:71:ec:50:fa:a4:05:59:cf:47:71:d7:b6:0d:41:
         61:a5:0c:46:b1:b0:ef:5c:e4:b7:75:7d:5e:16:c8:a2:17:5f:
         00:42:a8:86:99:20:ab:5d:c5:31:2f:12:29:22:b7:ba:89:87:
         c2:aa:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:39:03 2026 by rpki-client