Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File:                     T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier:          QwIurSuVgyFbGyz/5vd7J6ms5ry4Md462hN1EcsqAbU=
Subject key identifier:   A6:DA:52:1F:8A:ED:C1:9C:36:E5:07:07:88:01:F3:5D:39:72:69:AD
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer:       /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial:       019D8C83AFB493ACBBDDC3ADFF561389FE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number:          085E
Signing time:             Tue 14 Apr 2026 15:02:13 +0000
Manifest this update:     Tue 14 Apr 2026 15:02:13 +0000
Manifest next update:     Wed 15 Apr 2026 15:02:13 +0000
Files and hashes:         1: MOJaIJywd4otTZyKbZejB0v6ay4.roa (hash: rNI1pa9edpkFYBr17tGN9Tys1Z0tTlj1MmWq7ZO4iao=)
                          2: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: 0SnQTzVV/mP1oWFMGXZ6JiucVrnHPHp5ZkBBW6ubq5Y=)
                          3: mfXbQXByPJPp7zX33-P_nEyA7pw.asa (hash: vbrHO7MLkLBiT3RBDfJV+Hh6ozoURTvz1tPkV6hsSa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Apr 2026 15:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8c:83:af:b4:93:ac:bb:dd:c3:ad:ff:56:13:89:fe:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
        Validity
            Not Before: Apr 14 15:02:13 2026 GMT
            Not After : Apr 15 15:02:13 2026 GMT
        Subject: CN=a6da521f8aedc19c36e507078801f35d397269ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:35:bf:02:e2:5b:8c:d4:ac:41:64:ac:44:
                    b1:41:13:4d:17:e7:13:f8:a1:f8:c8:27:85:7e:a6:
                    c9:05:1c:ba:95:9e:08:77:ff:1a:7c:85:2d:be:f4:
                    81:cd:7d:0a:1d:28:6d:43:47:ea:4f:c1:ea:80:c2:
                    cc:fa:fc:17:3d:1b:2d:f7:c9:95:40:f3:7d:86:94:
                    5c:89:19:d5:e0:62:6b:80:07:6c:2e:f4:8a:09:38:
                    a7:38:97:ba:a0:3e:da:be:a2:9f:b9:e3:60:38:2e:
                    26:f4:ef:c4:c8:c0:5e:7f:fb:42:6e:b3:2c:36:f5:
                    8d:9f:94:c0:91:e6:c1:7b:e5:31:dd:f1:6e:be:6d:
                    64:11:42:12:c1:9d:7a:5c:1c:89:45:ab:6e:d2:10:
                    db:b7:d3:43:4f:ed:ad:2f:80:a6:67:31:e7:aa:98:
                    43:61:3b:17:a8:fb:55:34:82:31:f6:e9:58:7a:58:
                    98:6b:3f:f1:a2:f8:af:0b:61:cf:76:da:eb:4d:00:
                    c1:29:84:d3:0f:07:2a:88:6d:63:6c:47:41:37:21:
                    7d:27:12:70:d1:ff:a8:48:c3:58:4b:33:ac:34:e4:
                    43:ad:1c:8e:5e:8a:fc:5a:19:bb:ba:09:27:92:80:
                    c0:38:39:1e:62:b0:cd:99:0f:5d:07:77:9f:be:f1:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DA:52:1F:8A:ED:C1:9C:36:E5:07:07:88:01:F3:5D:39:72:69:AD
            X509v3 Authority Key Identifier:
                keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:c2:6a:c8:b2:2b:3d:e7:f7:44:ee:4c:7f:16:67:2a:28:
         f2:61:7b:54:0b:8b:09:c1:60:09:92:74:38:f3:74:53:bc:65:
         90:25:ba:ae:a1:39:85:26:3b:3a:7a:59:3a:4d:fd:60:22:1f:
         41:c1:76:1a:13:b3:8a:c5:75:50:7b:a8:20:56:e5:39:c9:d9:
         c1:af:a0:5e:c7:9f:03:9a:4a:a0:af:f4:88:46:fe:51:87:e3:
         a5:ff:e8:1d:9e:41:f0:12:12:0b:37:2f:27:ff:b8:f9:aa:64:
         a8:7d:c2:e2:80:43:cd:1c:1e:e2:51:65:b1:73:4e:e5:9d:07:
         74:4b:98:aa:d4:4e:1b:a8:ee:9e:63:0f:a3:f5:ac:f9:ba:08:
         c5:37:e6:a6:c1:7b:cc:34:1f:eb:80:81:bb:99:30:2c:d1:7d:
         08:9a:90:bf:56:2d:61:65:6d:39:3d:fa:20:2b:95:de:a0:62:
         ab:50:9e:d5:b4:ba:ba:02:83:62:05:17:7b:35:4f:ea:73:83:
         c9:43:76:9e:b6:d0:80:c4:ee:4f:2a:c4:ad:aa:7a:3f:0a:3d:
         0a:e0:cd:61:d9:4c:e0:a4:70:a3:da:0a:fe:24:0d:95:af:93:
         fe:27:15:c6:3a:0b:78:dc:d5:8a:63:9f:5e:4b:d4:97:4b:e2:
         5e:05:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 00:50:34 2026 by rpki-client