Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          YeQuIh2Cd9W+Hzqxwxp5VxmyNdI5/J+ZsVQlkA5n+z4=
Subject key identifier:   93:F8:FE:6D:44:0B:9D:8F:96:0B:6E:36:79:57:2A:BE:E8:D0:F3:C6
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019DF8036E96803B7D973EB131549EAAC2CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0FB6
Signing time:             Tue 05 May 2026 12:01:07 +0000
Manifest this update:     Tue 05 May 2026 12:01:07 +0000
Manifest next update:     Wed 06 May 2026 12:01:07 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: /FRomiWLI2r1zRxaGzOnZmueILcDfSb9WLVrWx4EIH4=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f8:03:6e:96:80:3b:7d:97:3e:b1:31:54:9e:aa:c2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: May  5 12:01:07 2026 GMT
            Not After : May  6 12:01:07 2026 GMT
        Subject: CN=93f8fe6d440b9d8f960b6e3679572abee8d0f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:ff:dc:67:f1:64:59:00:a2:7c:dc:d1:22:
                    5d:a1:04:02:9f:f0:07:2f:0b:0b:0b:77:86:8a:57:
                    66:27:e8:51:94:3d:46:8b:44:3a:a0:3c:0b:75:f5:
                    8a:2d:55:82:6a:81:a1:06:75:b0:e0:fa:6d:0d:cd:
                    d8:fc:89:37:71:1f:95:59:43:cf:b7:d6:3d:62:d1:
                    1d:cf:bf:28:5f:c9:b2:45:20:84:7c:de:c4:45:32:
                    a0:e5:d1:8d:1f:24:7a:b0:ad:a3:84:7f:ba:3e:04:
                    54:29:bb:8e:5e:00:9e:6f:f6:7a:a5:de:a8:4d:44:
                    7f:b0:f6:3b:e0:b9:ec:33:43:f9:82:3d:0f:6a:60:
                    8a:04:17:64:78:f3:a3:a2:13:cb:e7:69:c7:a3:01:
                    7a:23:9b:34:3a:12:a1:4d:15:a0:ba:b2:7f:eb:e4:
                    f2:d5:bf:37:6c:86:08:63:54:12:e0:df:fd:0b:5e:
                    ed:3a:26:08:8a:10:0b:ea:64:6c:d0:05:01:aa:f9:
                    83:d7:9a:fb:46:3d:b4:96:a1:b9:18:f1:23:1f:cf:
                    81:c1:49:13:51:e5:d5:8d:88:fe:36:22:d3:e0:15:
                    e8:91:75:e8:8d:f0:4e:c8:16:88:f8:45:d6:c6:db:
                    24:09:33:f3:f9:2a:58:df:dc:78:e8:26:ed:3a:79:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:FE:6D:44:0B:9D:8F:96:0B:6E:36:79:57:2A:BE:E8:D0:F3:C6
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:91:da:45:24:0a:e7:fc:da:c4:13:e5:06:b0:92:8c:b2:7e:
         e4:d8:11:16:1a:fc:aa:a1:d6:eb:1d:f3:27:06:4d:d2:5b:96:
         c8:1a:80:1d:51:61:92:17:e7:a8:af:55:81:19:9a:1e:7c:5a:
         69:45:9b:09:f4:99:d7:1f:df:d5:f1:89:eb:da:90:c4:1e:7a:
         53:bd:1d:4c:b2:ad:f8:9f:6f:a4:76:91:b7:d0:7e:88:a6:41:
         14:a9:f4:d5:64:9c:7c:6c:a0:32:09:25:66:75:cd:e8:13:ef:
         46:4f:6e:45:f9:ab:0e:7b:79:8a:42:c0:6d:c8:f1:c3:0c:be:
         2c:da:a5:30:0b:e9:cc:2d:53:6b:1c:c1:8c:e4:76:f7:14:84:
         c9:98:1b:f1:62:68:2c:73:61:30:a2:00:6d:fe:ff:b7:f0:fd:
         bd:1e:39:c6:a1:d8:7f:bf:83:ef:c3:fb:a0:37:8f:12:e7:82:
         c1:fd:40:d8:51:d6:e5:9c:51:b0:c3:a0:2c:fd:3f:fc:85:85:
         9a:6f:ca:c3:8b:a9:47:0b:99:07:86:90:ea:7a:a7:11:a9:53:
         a4:13:25:1c:d8:74:86:fc:3a:29:c4:1c:7a:fa:67:e4:48:a0:
         2d:de:cc:b7:98:f3:5b:09:f8:58:36:b8:b0:8f:69:73:88:0a:
         8e:c7:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 20:48:30 2026 by rpki-client