Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          NkwEVGKASxKSHSvbbdzGHBJl6wKWuQHbZtUUHIuCyRU=
Subject key identifier:   43:08:F0:C6:B4:61:81:1D:96:E7:06:5F:B8:20:81:E5:74:BA:03:20
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       019D78587854B0404C2DDB842CA035101F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          1740
Signing time:             Fri 10 Apr 2026 17:02:36 +0000
Manifest this update:     Fri 10 Apr 2026 17:02:36 +0000
Manifest next update:     Sat 11 Apr 2026 17:02:36 +0000
Files and hashes:         1: 1llWNK65NedtiWi8qyia848ELaA.roa (hash: 0oTSLbXlh3Ln2/Z2bu7ijN1NRwtM3qIsyO0kzqAkxPw=)
                          2: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (hash: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0=)
                          3: HP5vxDtKtwCDfs6BQB76Wev5z1g.roa (hash: JBqv9H1vhnDV1/7jpMHZRDfH8t8fODjKdebQA7UXUqA=)
                          4: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: O/ZaoOHDOa+a6U6F0bsBnv4ZXdfG7qO+sGa1xAScNbw=)
                          5: wYQQFIQIglltXxfXQVpxwZ1D82s.roa (hash: aB+z2l6ojQ6PXmjLcXa145T+AmEidbRVU2bYYZOMwPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:78:58:78:54:b0:40:4c:2d:db:84:2c:a0:35:10:1f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: Apr 10 17:02:36 2026 GMT
            Not After : Apr 11 17:02:36 2026 GMT
        Subject: CN=4308f0c6b461811d96e7065fb82081e574ba0320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:8e:7e:f4:9e:e6:8a:61:9f:b5:9a:fb:de:
                    a6:72:ec:9f:48:df:25:56:de:35:8d:6e:54:3a:fe:
                    23:6a:7d:d4:b1:12:9f:45:da:61:aa:e7:18:2d:81:
                    30:ac:0a:3c:cc:d7:cb:81:04:fd:b6:df:a1:db:41:
                    9c:98:fb:57:88:a6:2a:7f:91:b4:46:0b:37:d8:77:
                    0f:2d:a1:70:94:4c:b8:c0:d1:18:b5:19:18:10:f9:
                    3e:a9:e5:b3:2c:79:93:5d:5e:ea:50:b2:47:bd:14:
                    b4:fa:fa:49:cb:86:75:c2:bb:9a:52:c3:ff:60:eb:
                    a2:13:48:37:18:8b:94:ea:3b:cd:8b:4c:35:f3:98:
                    ec:9c:fd:fb:01:74:d6:b4:22:81:f4:ed:0a:e6:d3:
                    c5:74:64:6a:62:86:e0:3c:26:3d:9a:56:28:63:00:
                    65:b1:ed:45:f1:a8:51:d0:31:08:1d:7b:1c:c0:76:
                    a6:a8:04:cd:4f:e3:54:4c:65:aa:f8:6d:7a:03:d7:
                    86:81:e0:b4:73:68:d8:41:00:51:44:1e:59:2f:45:
                    ab:67:aa:32:83:a4:04:6f:f8:90:34:de:f9:dc:90:
                    1b:1f:51:db:13:12:42:ba:da:49:30:b3:8f:50:dd:
                    c0:8e:62:0a:e8:74:c1:f9:63:ca:f5:12:93:e4:8e:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:08:F0:C6:B4:61:81:1D:96:E7:06:5F:B8:20:81:E5:74:BA:03:20
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:25:e3:f8:2d:59:2b:ae:12:72:0d:18:e1:19:6b:b6:c9:
         cb:e1:8a:50:50:e7:e7:8d:c9:d0:d8:53:bc:31:f6:bb:37:85:
         1c:1a:bd:0b:c7:98:7c:ce:2f:50:21:25:a6:ca:68:13:cd:59:
         48:7d:f7:c2:90:c8:4c:80:d8:50:23:6c:6f:3c:d1:d9:56:35:
         16:0f:f6:2a:39:e1:27:6f:ac:57:1c:c8:34:01:2a:60:5e:a1:
         57:4a:66:14:a2:ad:33:a1:4f:f4:a8:bd:ae:18:65:d3:16:2f:
         7b:60:74:08:e7:a5:ca:a7:d6:08:f7:05:7e:aa:cb:04:ee:ed:
         6c:b1:ba:cd:b9:96:3c:43:9f:3a:1f:e2:fd:8d:b9:eb:e6:e9:
         af:ab:21:4a:2b:dd:f4:bb:fc:0e:c9:23:d6:62:6b:97:87:7f:
         2f:d6:96:40:f0:81:ba:a8:e9:f3:57:05:59:02:3a:58:53:ff:
         13:c7:0c:77:c6:ed:29:8b:da:13:3d:4a:f7:01:9e:51:a1:16:
         b2:d7:ba:e3:65:ce:17:62:78:1a:86:34:ca:23:02:bc:0c:67:
         b1:a4:71:0c:66:8a:98:03:d8:eb:c1:b3:e6:0e:93:eb:57:fb:
         d6:89:89:ca:a8:98:f4:98:81:08:28:83:d7:77:ab:e1:5e:a5:
         70:83:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 02:46:14 2026 by rpki-client