Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
File:                     a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft (raw, json)
Hash identifier:          41N9tlLW9qiLLNHtKsoMYiU/6aWvwHNwIQeG/DRfzgI=
Subject key identifier:   A9:16:71:8E:1E:BA:36:11:2B:4A:77:89:6A:54:82:6D:3B:E8:F2:9D
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Certificate issuer:       /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial:       019D39AEE272D7BBC3E1FBECB5D2F95C48F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
Manifest number:          18B7
Signing time:             Sun 29 Mar 2026 13:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:55 +0000
Files and hashes:         1: Xh2eVCLOmh-b7dzcqXzhFXQY0XE.roa (hash: rT3BoHAE/71jjEpABQI+u7InkXN1Mn9nKrrh+Z9B8m8=)
                          2: a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl (hash: ofpTVvU+2ufLzguUtBtFnrUm7jOIddcKIu/+HAg2nJY=)
                          3: cQs3AdIYxtQkf-UCcR9A6gUyGHU.roa (hash: XWBTr8jol7euXpdEvtLfDqK/TeI11GkVcT1lv4t3JuE=)
                          4: n1a6LkWWBYXv3xOK1kSp0WNucpU.roa (hash: obbHB0NOYZL+bKj74fglH+G2+FmY39/Gan1NwCxdrf8=)
                          5: xxw4g7IqAMokWvpsEpsZbBAYs0I.roa (hash: /LwhAx0DNt5cAADOZVhtgoYOlUHNGAj6EwLSIPsc/p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:e2:72:d7:bb:c3:e1:fb:ec:b5:d2:f9:5c:48:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
        Validity
            Not Before: Mar 29 13:00:55 2026 GMT
            Not After : Mar 30 13:00:55 2026 GMT
        Subject: CN=a916718e1eba36112b4a77896a54826d3be8f29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:1f:f7:30:e5:b3:67:3a:5c:73:9f:72:a6:
                    f3:d0:05:e6:b6:dd:26:0f:61:a6:4a:27:61:e8:fe:
                    13:df:21:74:c2:f1:1a:e7:f8:1d:8b:47:64:9b:db:
                    be:07:f5:58:be:f2:e9:9d:64:91:a5:f7:83:b6:28:
                    ad:56:fa:9f:2a:92:f3:c5:98:25:0a:c9:0e:4e:a7:
                    3e:54:44:4d:84:8f:f5:38:24:80:e3:10:e7:6f:ca:
                    9c:5d:48:4c:6b:32:02:86:ca:9c:22:39:02:8a:41:
                    9e:b2:e8:0f:ad:98:2b:8a:ac:7a:26:a6:c9:00:ff:
                    85:d0:82:74:68:33:c3:d2:86:82:43:47:c3:d4:85:
                    d8:0d:da:78:a4:2d:8f:27:2c:5f:7a:c1:21:98:13:
                    c5:7f:49:6b:41:17:7a:18:d7:65:fb:37:b4:db:da:
                    de:42:21:fd:48:c7:95:6a:11:c7:5b:95:5f:27:ac:
                    7d:73:1e:6c:4e:81:ce:74:46:ca:56:c9:83:ba:e2:
                    f1:bb:a7:68:70:09:9a:36:1c:dd:86:6f:c5:4d:70:
                    23:81:6c:ae:99:6c:bd:6c:53:c4:ca:38:12:03:4e:
                    68:cb:1a:15:cb:64:ff:8f:f2:2a:d0:ba:e6:ef:4c:
                    c4:b8:71:a6:51:ec:6b:2f:ad:2e:a2:e2:ca:2d:0a:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:16:71:8E:1E:BA:36:11:2B:4A:77:89:6A:54:82:6D:3B:E8:F2:9D
            X509v3 Authority Key Identifier:
                keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:54:57:e7:c5:bd:8d:41:c2:33:74:15:f7:a0:e1:d4:34:
         2b:9f:aa:df:27:ba:be:31:72:22:b3:02:3b:3c:bd:53:60:8d:
         dc:34:c0:fc:18:38:8c:36:e1:eb:8d:51:c2:da:62:b6:9d:43:
         84:73:77:f5:70:84:d7:42:d2:1d:61:74:9f:58:c3:b9:7c:0b:
         f2:52:19:18:06:c3:66:e9:1a:8f:ce:bb:05:00:39:20:bc:6e:
         4d:a7:7f:a5:3d:41:3b:88:d6:8d:71:83:44:5a:15:f2:93:34:
         e0:bd:f6:2a:be:4e:9b:35:a8:5c:ac:a1:9c:27:3d:42:f8:96:
         fd:3e:6c:b0:d9:3c:b6:33:bc:52:28:eb:16:67:40:5c:c8:17:
         64:3e:c7:27:3f:46:1e:c1:c8:9f:df:5b:bc:3a:12:29:aa:dd:
         70:04:c0:64:17:fe:77:b5:42:59:5d:bc:cd:cf:4a:04:10:83:
         60:8d:a3:d6:42:f5:1d:14:5c:af:6d:27:09:b8:39:9e:4f:80:
         3e:b8:c4:c3:8d:8e:0d:76:3c:53:04:54:52:60:ac:80:ef:c7:
         cf:6d:ee:57:21:f2:28:9c:6e:b0:0e:d5:b5:09:63:4c:11:21:
         90:12:ae:40:45:fd:d0:4d:12:da:39:61:b8:42:a7:d4:cc:8a:
         1e:78:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:54 2026 by rpki-client