Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          ieB2kkRJC+zy8wlwXCIwx+mdRtE0GdCF5i1vL/CwrAY=
Subject key identifier:   41:99:05:FA:34:B8:FE:A6:5D:4C:62:1D:79:BE:5B:3E:A0:AC:22:2B
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019D653DFB4DAA67C1D16C3FD2694494CD72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F6A
Signing time:             Tue 07 Apr 2026 00:00:53 +0000
Manifest this update:     Tue 07 Apr 2026 00:00:53 +0000
Manifest next update:     Wed 08 Apr 2026 00:00:53 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 2N+jmmozc6Z+LGS5Fo0JZ1bic9WZD1zL0JOw5yFn4n0=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 00:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:65:3d:fb:4d:aa:67:c1:d1:6c:3f:d2:69:44:94:cd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Apr  7 00:00:53 2026 GMT
            Not After : Apr  8 00:00:53 2026 GMT
        Subject: CN=419905fa34b8fea65d4c621d79be5b3ea0ac222b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:53:1c:7f:64:b6:2b:22:18:f6:bc:50:77:
                    69:93:a4:30:ed:4c:f1:cb:27:1d:51:0b:4f:e6:03:
                    97:3e:d2:3f:39:91:c8:a1:3c:98:f9:47:cf:85:24:
                    73:25:8c:a5:a8:77:1d:54:b1:cf:46:8c:27:93:ba:
                    95:12:04:10:a4:7f:cf:c7:6d:a1:d7:a9:00:98:79:
                    ce:c9:85:c9:4e:9a:00:6c:5e:80:d6:5d:3b:17:d3:
                    c8:ca:43:57:72:01:6f:a8:51:a3:d6:97:35:8c:e4:
                    04:fa:d1:5b:9a:1c:10:d8:d4:f0:90:20:fa:fc:97:
                    11:17:88:c4:49:b5:14:85:4c:19:8f:aa:47:4b:f4:
                    d1:0b:98:7c:cf:b5:81:d6:81:03:ae:db:bc:58:76:
                    c9:d6:ce:30:b8:66:34:7d:7a:38:50:f4:1d:3d:54:
                    79:ee:55:a7:95:0e:ca:d8:12:25:ac:2a:7c:ce:71:
                    06:d3:2c:e1:15:59:1c:55:2b:28:eb:96:87:e9:9c:
                    c5:5a:b4:fc:c9:36:75:cb:77:68:56:2e:f6:80:7f:
                    90:26:af:7b:de:e7:13:88:3c:97:4a:23:c4:8d:87:
                    d8:59:15:b0:a2:4f:e4:51:38:1a:2b:14:05:c1:47:
                    c3:32:63:d2:ef:14:16:9a:49:02:66:e7:db:c8:5f:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:05:FA:34:B8:FE:A6:5D:4C:62:1D:79:BE:5B:3E:A0:AC:22:2B
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:69:9a:ea:94:bf:a2:27:74:a6:39:e5:de:99:11:8a:63:99:
         b4:6c:55:82:a1:df:01:a8:6f:e1:2d:c1:49:12:70:a9:a7:58:
         19:df:ff:bc:82:9e:74:52:75:54:cd:d4:79:2b:dd:2c:5c:53:
         fe:ae:c8:74:a0:dc:1d:a7:9b:f6:76:e5:85:80:81:e6:60:0d:
         22:b8:75:cc:60:bf:df:2a:5a:80:2b:ef:30:13:05:06:13:b2:
         d7:b8:10:c3:ce:12:41:6f:67:7f:6e:5b:85:83:ad:2e:34:65:
         a4:69:cb:3b:13:7d:83:4e:23:fc:25:57:2f:18:4f:00:d4:35:
         5e:5f:45:37:25:4a:d5:ef:2b:4b:63:8e:69:bd:ce:54:b5:8d:
         a3:e2:80:92:ab:d4:d3:47:17:54:73:ff:5d:b5:64:49:4d:9b:
         6b:6a:09:6e:ec:15:ca:5f:26:a3:d3:0a:c6:58:1b:7d:63:c5:
         2f:8e:98:45:86:70:35:f9:a8:9d:6e:eb:50:4d:9e:af:31:a6:
         57:b8:7e:bc:7b:93:12:2c:06:cc:15:e5:73:f3:94:42:f3:57:
         1f:b9:d7:a2:4b:b8:ba:15:22:a2:e3:f1:19:00:7b:c3:f5:e2:
         aa:d4:8b:18:7d:93:35:e5:19:a8:96:9c:81:0b:5e:6a:7d:ea:
         32:64:98:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 09:06:15 2026 by rpki-client