Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          3iOzPsLcmteHwdfQekeP6Y5YcTqC3Rs0l7YDbtaBb78=
Subject key identifier:   27:F9:50:1C:7C:4D:A9:D5:6A:D0:9F:36:0B:D5:87:AD:55:93:30:85
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       019E9B17469743DBB6776681830C49D2EED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          1930
Signing time:             Sat 06 Jun 2026 04:00:54 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:54 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:54 +0000
Files and hashes:         1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=)
                          2: Cm2yDKipOZ7sHlbR_Hzzd41nQYs.roa (hash: yWZv7NkDFzKo9TIx/TWSen6p9EYZYREsasP3I0CUfzQ=)
                          3: UsjKC7eB_MWBtsUBXJK-RFYAYHU.roa (hash: NGEpFjBcwXvxm7QU0HUsjAWpitcU0iExVxH5Fk2JaRc=)
                          4: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: 392w2QH92JH+1LcLaoz3aR9OMjJpR0+mhaUYgZ+/99M=)
                          6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=)
                          7: wZoxcNDPJMq3-uyqVaFl1OpOC5s.roa (hash: LWpdYaFu3wCLKYxI/zQHGuILauK3fDO4Dw9ytsYmVLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:46:97:43:db:b6:77:66:81:83:0c:49:d2:ee:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Jun  6 04:00:54 2026 GMT
            Not After : Jun  7 04:00:54 2026 GMT
        Subject: CN=27f9501c7c4da9d56ad09f360bd587ad55933085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:be:9f:a5:14:8b:47:ab:2d:23:4e:d3:71:
                    f0:0b:f7:01:cb:f5:ad:8d:d9:6b:e4:e9:0b:6a:40:
                    e9:2e:a0:95:c7:ae:26:7c:4f:1b:fe:13:ec:ab:26:
                    ae:f7:2c:d3:2c:eb:58:a1:4c:50:b5:3a:48:c2:7f:
                    6d:6e:8a:da:63:da:76:e0:85:bc:fb:37:bb:2e:64:
                    18:f7:a6:07:12:30:e8:7d:87:06:79:44:3a:3b:ec:
                    1b:63:84:a6:2e:10:51:01:8e:49:99:4e:03:7e:fd:
                    93:c4:7f:b8:62:29:a4:50:79:4a:f6:e2:57:b0:c3:
                    53:4d:9b:c4:3d:f5:f0:e9:2f:46:d0:75:91:59:6e:
                    8c:62:ee:7d:02:41:e5:27:18:67:e7:f1:e0:82:b1:
                    9a:2b:66:9a:17:ea:39:a3:c2:c1:5f:f5:20:2d:09:
                    83:fa:52:96:c6:87:fc:95:36:37:f9:f2:66:1c:81:
                    79:11:b2:d4:d2:2e:ed:bb:9a:22:9b:b5:4b:6d:10:
                    96:e4:54:b9:3f:1e:7a:57:c7:87:12:a1:e8:e2:42:
                    c8:3b:ca:2f:c5:8b:98:72:f2:87:7d:e0:32:45:80:
                    3e:c6:f6:8e:46:04:be:e9:ff:7b:8c:66:26:87:24:
                    70:f1:05:3c:23:ca:95:a2:c4:27:95:e7:65:44:05:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F9:50:1C:7C:4D:A9:D5:6A:D0:9F:36:0B:D5:87:AD:55:93:30:85
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:71:13:ab:a0:8a:7c:7a:71:00:4d:a6:0d:2f:d3:77:f8:
         10:bb:e5:c2:de:9a:0a:f5:83:6f:89:63:bf:2b:f3:91:91:46:
         d3:5f:bd:d9:da:ce:c1:80:6b:f9:05:74:ce:a2:21:35:b9:eb:
         25:93:aa:18:05:4d:b0:26:ba:b4:7b:33:a4:6a:eb:a5:91:2d:
         a6:f8:b2:31:e8:cd:01:ed:e4:46:eb:1a:0b:91:a7:6d:f5:56:
         7f:8b:34:72:a5:36:7c:13:7b:95:57:8e:e8:99:d4:80:13:b9:
         fb:30:b2:12:d3:96:16:b0:a8:89:ed:28:1a:d6:56:b1:9b:1d:
         5a:c8:5a:38:b7:41:10:a6:63:da:08:6e:10:ab:5b:3a:52:16:
         df:b6:12:90:ed:b3:76:15:c1:aa:71:14:2e:dc:96:e7:06:d6:
         87:06:8c:02:e4:2f:fd:1f:a9:de:7e:86:72:1c:b2:ed:bb:dd:
         c8:e9:55:04:c8:a3:f2:4d:97:dc:f7:85:4a:4c:ed:ee:34:7d:
         1e:f4:78:3d:2a:9e:16:ce:c0:c7:93:a5:2b:a3:57:49:5b:89:
         8b:26:60:74:6a:05:17:46:21:03:54:6b:5d:43:1f:69:c5:19:
         1a:9c:6e:2c:50:d5:20:76:a6:d7:63:cb:14:00:4d:73:2f:79:
         ec:be:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:58 2026 by rpki-client