Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          rAef1pwawf2LKWrrmnFtkSb5gu+bCYo+i9A9Zy6Oj6Y=
Subject key identifier:   64:38:CF:DD:FD:FB:90:8C:2F:1F:EB:59:43:62:23:84:9F:42:0C:61
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019E1F10EC9A50A2935EA1CCFF190B5FD196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          18D4
Signing time:             Wed 13 May 2026 02:01:03 +0000
Manifest this update:     Wed 13 May 2026 02:01:03 +0000
Manifest next update:     Thu 14 May 2026 02:01:03 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: U6EWM4sIvw10RbCjCk+H692Z3aEoQaqokNHufK24/h4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:ec:9a:50:a2:93:5e:a1:cc:ff:19:0b:5f:d1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: May 13 02:01:03 2026 GMT
            Not After : May 14 02:01:03 2026 GMT
        Subject: CN=6438cfddfdfb908c2f1feb59436223849f420c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:03:f8:c2:91:c8:2c:ca:1a:7c:e0:ed:02:
                    db:f6:71:99:5f:22:f9:e1:7e:b1:05:28:ae:4b:b0:
                    1d:f5:0b:bf:5b:b6:e0:14:fd:e6:d4:84:be:5c:45:
                    ad:ec:e5:24:c9:9b:96:94:95:cc:1d:3a:6e:56:28:
                    28:55:3a:0c:f6:71:2d:6d:13:c5:dc:31:f8:fd:87:
                    aa:f5:19:32:42:29:8c:1a:f0:ae:65:7a:5b:51:22:
                    e3:f7:f5:65:31:40:cd:a4:8d:a0:a3:b2:7d:0a:c5:
                    be:9d:9f:61:8e:a0:81:24:bf:61:22:90:3e:23:07:
                    b7:c9:6f:8a:7c:7e:99:25:73:2f:7c:21:1b:6e:69:
                    db:33:c0:e6:80:e3:aa:23:1c:55:6a:15:1c:1c:21:
                    e4:f7:93:78:92:43:32:0a:c9:03:4b:3f:91:e7:0b:
                    3c:aa:a3:99:f2:1f:2f:4f:54:08:f5:fb:1a:bd:f5:
                    65:2c:94:90:e0:a2:28:19:f9:f1:11:07:48:2e:d5:
                    a6:a0:49:e4:49:f4:4c:7a:2c:38:7a:a3:e8:e0:cf:
                    e2:38:63:e0:6d:69:65:ca:55:58:b5:4f:f8:21:5b:
                    a5:c6:46:ef:21:13:bb:c8:4a:6f:54:2f:6d:4e:d5:
                    3f:5a:c2:b6:4c:68:bd:67:29:57:a2:5b:fd:0a:6a:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:38:CF:DD:FD:FB:90:8C:2F:1F:EB:59:43:62:23:84:9F:42:0C:61
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:36:02:9c:f3:e5:a1:9e:71:93:2a:a3:05:29:94:f4:38:
         22:7b:0b:2a:2d:c2:d7:9b:28:56:03:12:6f:70:36:43:03:ac:
         97:41:76:6c:95:56:45:45:5d:ab:1a:63:a6:b7:76:1b:ea:66:
         8b:67:c8:44:b3:18:97:97:55:a6:02:be:77:22:10:fe:7d:fd:
         ac:77:19:14:20:78:01:e4:8c:9f:b6:ee:83:65:63:8b:b0:be:
         6a:e4:46:1e:9d:b9:35:e3:d5:85:3c:16:f8:18:ec:bf:f9:0e:
         80:d6:3e:ca:98:1c:a2:4b:22:7f:20:9b:26:2b:7a:62:86:dc:
         2e:1a:af:32:06:4e:27:27:39:6a:46:02:bf:b4:68:14:07:48:
         b1:06:ff:79:6f:23:93:9c:2b:70:4c:02:2c:16:12:85:60:82:
         2f:57:b6:5b:06:30:51:ac:9b:d6:58:5f:d3:fc:14:1c:9b:88:
         2d:be:9b:15:48:f6:e6:65:55:d7:cc:e6:06:ce:af:24:84:2e:
         01:df:ce:de:e9:20:bd:28:19:de:09:54:61:f9:7a:a1:1f:40:
         ff:21:ba:94:5d:f0:c4:fc:49:f3:56:fa:18:a3:19:ba:c0:b4:
         41:3f:fe:cf:55:f8:8e:21:d5:6f:81:a4:0e:84:70:df:5d:d1:
         d9:37:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:48 2026 by rpki-client