Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File:                     6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier:          rlryHKujSjMUIsHHh3m6x0CyGghuirv1m5/NbJ/8P10=
Subject key identifier:   7C:FB:BF:4F:C0:80:A2:11:84:85:97:B4:0C:D1:70:DC:5D:22:6E:A0
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       019F17C2E8E11AEA7CC1C589438B062BDC45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number:          1992
Signing time:             Tue 30 Jun 2026 09:01:17 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:17 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:17 +0000
Files and hashes:         1: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (hash: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8=)
                          2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: Zcc69ppIaiJ8LRhF0GA6GmVaRPe7o54K3VSIKKf5VZc=)
                          3: AHUKnErfTdd73p4bYOK90XDEM78.roa (hash: 5EaqsItxZ1BQsHU9Kr2YPy6oSupY2lc793z7PhSn48k=)
                          4: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (hash: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU=)
                          5: FU6qfDeRGLTUUYPJh9COMZcbYuQ.roa (hash: TB+QrpXIIEHGgswGPR+KyYTjrwKORb9/h3q/s08f8O0=)
                          6: GXUGbRUgHF_wrrQsRndE_u1ZPF0.roa (hash: iTsepqpyUm1VVT1XwxzGIWO+pPFlI7X8SSW23YloZhc=)
                          7: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (hash: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ=)
                          8: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (hash: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o=)
                          9: PebWzmmguc5-4aQZe_HKUETdWLE.roa (hash: TQfr6FtdSj9u4LPbpAXmyw42DJTb7tOsjyKKAu7N3CI=)
                          10: Ps9C6gUFgHi7aaKL-5LqKG1lRNk.roa (hash: r74jkZOlx1JZBy0H3IDqp9qZgEG3W+yD8/XxGtvJxmk=)
                          11: XGfCqgFXc4zN3NEcVdkR_AbqEZY.roa (hash: vrm/Xdu7IdXpfwhj+3D9vsHsNrXWechY8Kxx0iPqPOM=)
                          12: ZBh08H6VA6CHko16OZIamGu1xf8.roa (hash: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM=)
                          13: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (hash: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=)
                          14: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (hash: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY=)
                          15: mFqx7FR9CXpnw3kdZUPrFGbJD1Y.roa (hash: /sd6E/lm/3IAT+F+ugKfMXjWXgoBW3+GutVYmu82Uk0=)
                          16: mP2GOcaU1PjclhV4W2iGXN0sBnY.roa (hash: AXKGTP6zGRcR7DI8dH98N4TRJhL4YCD6kauJs0pK9YI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:e8:e1:1a:ea:7c:c1:c5:89:43:8b:06:2b:dc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Jun 30 09:01:17 2026 GMT
            Not After : Jul  1 09:01:17 2026 GMT
        Subject: CN=7cfbbf4fc080a211848597b40cd170dc5d226ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:6a:8f:b6:10:d1:40:ca:1c:cb:01:e2:1e:
                    c2:18:16:27:3e:df:84:fa:b7:ba:64:ef:05:0a:d0:
                    8d:bb:3e:59:46:69:58:f4:9d:e1:5e:12:9d:43:ca:
                    43:15:f1:18:e5:aa:f9:1d:cb:ec:be:9e:46:85:fa:
                    0c:2b:89:a5:4b:5e:31:1d:ef:68:8d:65:e2:fd:fb:
                    bc:89:09:e0:df:3b:1e:08:52:45:74:cd:57:d7:7e:
                    c7:38:fd:06:1b:8e:24:04:56:e3:55:06:08:9d:b5:
                    a0:49:7a:61:a4:f5:27:a2:2f:c1:11:43:74:3d:7d:
                    ca:db:76:a5:19:f1:8d:68:e6:3c:3e:77:c6:5d:08:
                    1f:4f:89:56:15:99:22:80:a3:14:14:68:6c:d2:2d:
                    ba:b1:c2:23:51:46:46:15:c2:c7:4c:54:ee:64:dd:
                    c7:01:e3:fc:6e:e9:e4:ab:db:97:9e:71:34:5e:aa:
                    2e:1b:f7:11:f5:af:fa:07:ca:cf:d8:dd:4f:7a:25:
                    79:c5:e8:fa:1e:64:89:a2:58:f1:e2:db:70:9c:ca:
                    55:44:c7:02:5e:4b:2d:7c:d4:dd:4f:fc:80:53:7c:
                    93:cb:6d:16:e5:cc:ef:22:3c:0d:ad:d2:3b:ab:9f:
                    c1:41:3d:be:31:f1:66:a2:bc:82:5c:86:3d:43:32:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FB:BF:4F:C0:80:A2:11:84:85:97:B4:0C:D1:70:DC:5D:22:6E:A0
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:4c:8b:9e:08:96:ab:05:5f:d7:28:b8:0e:b2:ab:75:91:
         e6:5f:da:12:1f:13:75:76:90:b8:24:db:dd:3f:6f:f5:a4:9a:
         cd:61:cd:6e:ba:0d:e4:f4:69:9c:9d:e7:44:51:9e:58:05:8c:
         b5:09:59:82:f2:06:30:ea:7d:1c:ea:66:1c:2d:b3:10:a7:1e:
         74:28:c6:f4:1e:e0:7d:7e:74:12:92:09:77:2b:78:cb:6d:6b:
         49:3a:29:c7:90:c7:67:0c:47:35:6a:2b:f5:2f:50:34:69:26:
         de:f9:51:55:a3:a0:9e:39:9b:47:35:f3:f3:68:b4:0a:be:c6:
         ec:64:3d:03:a9:47:cf:1f:ba:65:13:07:11:5a:a6:08:4b:d2:
         30:82:62:08:51:17:1b:e6:d2:1a:5f:df:aa:03:95:b6:e9:83:
         43:3d:47:53:c2:35:cc:06:fb:e6:50:44:b4:70:48:b0:e0:3f:
         08:30:01:16:ee:dd:0e:77:0b:dc:09:fc:9f:3b:a2:f8:c4:f3:
         9d:e9:d2:ab:a5:ed:2b:e1:36:37:d4:bf:95:29:de:bd:72:49:
         6d:b7:14:8e:52:46:b0:84:9c:80:20:3d:02:5b:3a:c9:2b:f4:
         b8:f4:20:85:7d:0c:3f:d7:03:d3:95:2a:a2:46:ca:eb:3d:4f:
         89:da:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:40 2026 by rpki-client