Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
File:                     IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json)
Hash identifier:          gKecswh9lEIb7FlVtt4JDxc7Y5LvBNX3G8J9Ao+tCTY=
Subject key identifier:   59:06:1C:A3:6C:0E:05:03:EC:20:5F:3A:06:37:4C:F1:D8:A0:0C:7E
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Certificate issuer:       /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial:       019DCDBD5D76D943E3D394B77BAEAD35A493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
Manifest number:          11C6
Signing time:             Mon 27 Apr 2026 07:00:32 +0000
Manifest this update:     Mon 27 Apr 2026 07:00:32 +0000
Manifest next update:     Tue 28 Apr 2026 07:00:32 +0000
Files and hashes:         1: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: tUUvQdhjjk6xtl8Sq4UHvIjkF1JhnE0L6tp7zlz+vNE=)
                          2: Mlg2-dFb_pDIGLBjBDPo1_IYStc.roa (hash: 3gsMMrCsLQ277PtzM/yqX0/jKqAoyQGVpd57kpWn5Y0=)
                          3: Panm1LrJmzFbCeMY6auzDqltMH4.roa (hash: pK/SKAriGKfng+iefu9gjvhHjR0adoVJ2FdRhaw344s=)
                          4: p0Xs1g2gPrpuR1TetywC5LyG04w.roa (hash: Z4fC0K+qHQ0x60Cz0JhKoddXxrrHYGk8WlzQTKAj6OU=)
                          5: t1JuJqtlm5tkcuv11rLCrZPDDhA.roa (hash: W72v12TOiNZdKxjgiVDf5vxJzfgbF5c3IIwEwUVHgBQ=)
                          6: uXzbb7T22o7J6EkVQREXQcswsLw.roa (hash: ydW5n2G12ZkBLCFYY+WI/eQDK/fBHPVgfipaLbRLN/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:bd:5d:76:d9:43:e3:d3:94:b7:7b:ae:ad:35:a4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
        Validity
            Not Before: Apr 27 07:00:32 2026 GMT
            Not After : Apr 28 07:00:32 2026 GMT
        Subject: CN=59061ca36c0e0503ec205f3a06374cf1d8a00c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:88:01:62:f4:12:d1:a0:28:47:ac:2c:a7:
                    ae:03:3f:70:19:84:9c:15:23:96:5b:90:75:2f:44:
                    f5:32:7b:7f:0c:20:c3:91:62:05:f5:07:26:52:a7:
                    28:64:d8:d3:42:ae:91:81:e9:84:03:70:8c:d4:45:
                    bc:80:77:e0:0d:5d:d6:89:fd:ea:33:cd:22:d0:36:
                    01:ad:48:5f:86:f7:4f:1c:03:28:63:20:a0:33:d9:
                    e8:0e:3c:00:04:63:04:42:a8:77:77:35:53:cf:8b:
                    e2:0b:1c:9a:ba:e8:de:48:28:80:b2:a7:4f:2f:f2:
                    74:d2:e5:bf:f6:8f:bb:00:f5:b0:f9:7d:73:aa:9e:
                    15:bf:1a:86:c7:1b:4f:7c:34:1a:dd:5d:51:de:1c:
                    dc:a1:a1:ed:37:27:17:1b:ba:59:c7:49:a7:fe:5c:
                    3a:95:49:95:05:39:df:96:5b:c3:49:10:49:0a:83:
                    19:28:75:27:d4:8a:3f:70:22:91:51:5b:07:c6:ea:
                    90:16:f3:c5:5c:46:cd:56:7e:a9:5a:7f:e3:1a:f1:
                    73:f5:9f:17:9c:2f:82:fc:9c:7f:d3:0d:33:5f:54:
                    77:e5:2b:c8:c3:53:f6:79:26:19:bf:2c:ac:ee:b9:
                    a4:1f:3d:f4:b5:cd:8c:43:dc:47:e4:de:bb:2c:05:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:06:1C:A3:6C:0E:05:03:EC:20:5F:3A:06:37:4C:F1:D8:A0:0C:7E
            X509v3 Authority Key Identifier:
                keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c4:6a:de:91:05:0e:79:2d:d9:8c:a9:e3:4f:84:76:be:d6:
         ad:1b:35:90:6c:c5:81:3e:52:62:75:08:1b:b2:46:1e:b5:88:
         3e:3a:7e:01:17:55:5f:a8:31:df:d6:6a:c5:68:4e:78:27:3f:
         2c:99:e2:0d:23:74:81:08:b0:07:8a:9b:ad:77:e2:4d:a1:bb:
         15:d9:ae:e4:ab:64:3e:bc:ca:a9:6e:8f:db:7a:0f:76:24:f2:
         c4:5b:4b:9f:b4:1f:00:de:7f:fd:ba:c0:07:93:ff:93:36:0f:
         4c:c7:5e:25:72:ab:ed:b8:81:5c:11:1e:8a:6c:dd:3b:f2:b0:
         d9:9e:c3:62:f9:35:8e:26:71:fa:bb:3f:d3:70:cf:0f:84:b7:
         77:19:9f:f5:3d:2d:a7:8e:da:76:a3:7b:64:31:70:47:95:ca:
         6b:6a:bd:b3:60:1c:f9:7a:70:17:d6:e9:95:31:56:d2:51:38:
         08:b8:6e:7f:0b:aa:04:f0:37:88:df:6c:8e:f5:81:fc:2f:b8:
         cb:f6:14:1e:f4:37:a6:c2:cd:f5:eb:27:d0:10:55:7e:13:eb:
         cc:56:06:d4:38:af:5a:4b:6f:6c:67:74:00:9e:e1:4e:b0:84:
         3b:3c:dd:12:d3:98:62:c7:4d:c8:dd:70:68:30:0c:b0:da:30:
         5f:59:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:29 2026 by rpki-client