Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
File:                     6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json)
Hash identifier:          vMOTfIVE8qbnBqPDgmM4drmzhYv2ePQ8A9kkR/oA7vc=
Subject key identifier:   8E:59:28:AA:3D:88:55:66:1C:CF:6E:17:45:60:D1:26:C5:2B:80:1E
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Certificate issuer:       /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial:       019E2F964DCA4DE51CD5C939EE0DB6599E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 07:00:39 +0000
Manifest this update:     Sat 16 May 2026 07:00:39 +0000
Manifest next update:     Sun 17 May 2026 07:00:39 +0000
Files and hashes:         1: 4dZ5wQsi7U41QTXI2qdC87h3QYA.roa (hash: cdp2Vgo8w6oqF8dBRRawmvhbyMNU+pB+K20SC6qh0P4=)
                          2: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: Ucnc3zbOR9iZ603IJf3KY0Aeo56k29G393xf3CW72pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:4d:ca:4d:e5:1c:d5:c9:39:ee:0d:b6:59:9e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
        Validity
            Not Before: May 16 07:00:39 2026 GMT
            Not After : May 17 07:00:39 2026 GMT
        Subject: CN=8e5928aa3d8855661ccf6e174560d126c52b801e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:98:fb:d3:6a:27:3b:4a:6b:b7:be:4c:5d:
                    af:1a:e4:b3:02:da:44:b9:a5:a8:d5:08:ef:55:f5:
                    0e:31:bd:98:fd:94:f5:7a:f6:ab:75:fe:35:24:f5:
                    2d:f2:47:71:5d:46:04:7f:b5:01:e7:62:d4:04:c8:
                    31:7c:12:14:31:a8:9c:17:6e:b8:46:f6:4f:01:7c:
                    69:22:84:74:9b:1a:11:c0:4e:33:11:b4:e8:59:54:
                    5e:7e:87:82:78:d9:d2:34:73:9c:c2:bb:c6:b5:92:
                    00:a5:cf:19:ce:dc:83:34:98:65:c4:df:f1:1b:f8:
                    1a:be:83:a7:3e:4f:ff:21:b4:20:be:a6:d5:81:13:
                    1c:5c:c7:37:95:a4:b7:d0:f2:d9:79:e5:22:44:bc:
                    b8:2b:1f:55:d1:a5:05:da:d2:fd:8d:d0:10:d5:6d:
                    ed:9e:ba:48:64:51:a6:92:bb:81:3e:bb:35:7b:4c:
                    d9:dc:67:8a:e1:5c:8a:38:6d:2a:66:6d:9b:a3:a8:
                    e2:02:bf:74:d0:62:94:1d:f9:76:48:94:b8:39:ab:
                    b8:d0:d8:f3:5e:86:a2:ee:72:5a:c4:55:3f:0d:f9:
                    ed:fb:b8:81:ea:0a:53:a0:d5:43:0c:bd:83:c8:bc:
                    ec:ea:c6:7c:84:1f:ff:56:0b:8e:50:e8:4b:53:d6:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:28:AA:3D:88:55:66:1C:CF:6E:17:45:60:D1:26:C5:2B:80:1E
            X509v3 Authority Key Identifier:
                keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:05:cb:1a:c6:74:a8:c1:a4:d5:7a:a4:a1:a9:6f:69:f0:69:
         d6:14:e3:9d:93:1b:18:5d:33:a6:a4:77:19:0f:c1:00:5f:d4:
         ac:af:86:49:f1:d0:e5:e0:4d:1e:99:93:ff:04:4d:10:1f:7f:
         d9:fc:53:3d:da:dd:43:27:0c:2a:82:e4:ae:12:a5:3e:1f:56:
         e7:9c:23:fc:c5:a3:fc:31:eb:59:b9:c1:4c:a8:89:b7:a0:55:
         eb:97:4a:f2:af:ac:8c:27:2f:bf:23:db:e6:13:da:76:e4:15:
         33:e2:c0:80:67:c4:6b:60:21:3d:3f:98:9b:cc:5a:12:97:4f:
         b6:40:c0:39:2b:4b:18:57:58:5f:c8:93:83:d5:80:dd:bd:75:
         cb:fa:58:ae:5f:ee:51:64:80:32:e3:b7:a8:61:4b:b5:a4:3e:
         d7:42:60:ba:32:d6:13:3f:d1:71:8e:63:4e:6b:cd:b9:f5:80:
         d2:b2:f1:43:df:99:8e:52:67:39:d0:3a:59:e9:b1:37:f2:aa:
         f0:db:7d:02:86:ac:0f:52:16:0c:7b:8b:9e:82:29:96:84:35:
         1c:f8:83:c8:10:77:91:cb:27:e1:86:cf:9a:59:fe:2e:c2:71:
         91:45:ab:8e:f3:e4:ed:fe:dd:56:8b:25:3e:ee:95:af:06:e4:
         1d:d1:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:07 2026 by rpki-client