Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File:                     ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier:          slulKjeJgx5jV/676dbtizrYndYX5csfMwqDFw0lWzA=
Subject key identifier:   0A:F1:7B:AB:B7:13:FB:31:7D:2C:27:F3:E1:AF:7D:32:C6:51:BF:81
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       019E91A5CF5E217B10DB748BF68E92105240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number:          16C5
Signing time:             Thu 04 Jun 2026 08:00:23 +0000
Manifest this update:     Thu 04 Jun 2026 08:00:23 +0000
Manifest next update:     Fri 05 Jun 2026 08:00:23 +0000
Files and hashes:         1: 1bncdI1HvWegkfkOeeoa5nOljr8.roa (hash: NfbtKL/fM/sWFvyUIB3zJxF3TY7oHsHrb3iWZHcFnF8=)
                          2: 3EanmD6DodOa3OjQ9Kx0qn9ri6Q.roa (hash: 4kaL0cFBeCDq0v8h0ILY1h3bjLeCtgIe5E5jCClpBsI=)
                          3: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (hash: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg=)
                          4: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (hash: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw=)
                          5: 96nhW7fwQ_laWKSgwpcxi24MuvM.roa (hash: N6W5Ek/wK4Pm3whmGHtixWn1/HYkCfQdvQqhfZHUqC4=)
                          6: BfVNHWqEPlzaLXAUxndKGpZQISo.roa (hash: iPfjs5sAMs8Z6poczMNyYY8Bje3i0GDrHxRTpq3hZxY=)
                          7: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (hash: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI=)
                          8: Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (hash: qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=)
                          9: FBci10I6aG73ENuNfx7xpq1wj1I.roa (hash: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0=)
                          10: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (hash: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I=)
                          11: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (hash: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0=)
                          12: QG5DFr6piY7-9vaaVhpr5PmFziU.roa (hash: azODlTEeVfmyD9EHvQMxn8h5bi9MvzrkVrf2cKim+E0=)
                          13: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (hash: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0=)
                          14: UK_V3N1epsugIkAcmcr5ieNfjeU.roa (hash: 4iAgS9C2I2C1YIUY6TIsSDC8YFSx7TeJEyw2cxl8uo0=)
                          15: YBpN3TQ1JzwNzB0-jsj_CckejPU.roa (hash: 8A8QBdzrHSSwGIlNYxFd7VC285mnazoMY8ZTK0EOh18=)
                          16: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: acRRxknEvry63t/4CK8pPVjDYcud1qeNgNdv+bMb/M8=)
                          17: g7ekW7Iduxu77xQC5YeDKlzDolg.roa (hash: 1i8oYWr41cqY5QxX4lrK50XG0eGpHG2KFqU3cEnm8E8=)
                          18: hPPUJEU66HUzBCdsMKPjv4y6kCw.roa (hash: ZcjMLqy1z7bp5wMo9CeMXm4svFAsNX9iyFgfU+2xru4=)
                          19: icFNxm6-PTi48L2vXKiDHN-axp8.roa (hash: BdFj1k1TZoLMU1HBgixKhNdJTHKY90rp1IYePTyNxUE=)
                          20: kx1p1slIxkJTxYn4OAj06CJUsf8.roa (hash: HkJZcVcAXKQ3R00x2VbaFry/zdm9SDMa5rLM9eNsbGo=)
                          21: q4DCvIiS6THJXZg00ACbcwTs9to.roa (hash: BzDZyZi3DK/fRXztW3cj1XBtDtFZup20v6Mda//O7qY=)
                          22: r1Lm-dX1qz59WOfpWgSU33XPmSM.roa (hash: 6oVzYKTRmw48EXPMuELo04geZt6gGCfSZv5bRmChJw8=)
                          23: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (hash: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:a5:cf:5e:21:7b:10:db:74:8b:f6:8e:92:10:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Jun  4 08:00:23 2026 GMT
            Not After : Jun  5 08:00:23 2026 GMT
        Subject: CN=0af17babb713fb317d2c27f3e1af7d32c651bf81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:17:a5:0c:1b:6d:56:38:1e:68:4a:e9:40:
                    ad:32:0c:5d:7e:69:2b:19:39:41:da:04:5f:c5:9e:
                    39:d3:49:ca:1d:ab:86:3a:d4:b4:c1:02:9e:4d:42:
                    cc:d8:a2:ff:18:29:00:23:e8:7e:3b:58:7c:cc:66:
                    59:74:6e:b6:59:4a:64:92:89:35:71:bd:50:49:d2:
                    a9:ca:8a:92:b3:2c:ff:eb:7c:2b:db:ba:e3:88:78:
                    6d:73:2f:54:68:80:ab:4d:a8:69:f3:ed:1e:ed:9b:
                    0e:8a:32:ac:45:c7:22:ca:dc:73:08:61:c3:f0:aa:
                    09:f2:8f:bd:8b:d3:0c:db:97:18:0d:40:49:d9:09:
                    e1:e0:88:36:1f:b8:01:6f:04:41:51:5d:7c:d1:6c:
                    0a:fd:80:ba:78:cc:b6:9a:0b:b0:5f:7c:25:49:dd:
                    9d:e4:45:41:54:e4:72:cd:b8:a3:56:a1:2d:ce:33:
                    4d:82:a5:96:f9:ca:82:c7:0d:5a:78:7d:6d:bb:0d:
                    0b:40:ca:e7:e4:2f:f1:23:1d:63:15:f8:ab:c1:f7:
                    16:e5:c7:60:d8:53:1a:86:42:12:2d:c8:3e:51:76:
                    f5:84:8d:1c:b2:d5:42:9c:65:6c:a3:99:fe:13:95:
                    f4:43:ae:69:f8:12:12:df:f5:bc:48:26:38:63:22:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:7B:AB:B7:13:FB:31:7D:2C:27:F3:E1:AF:7D:32:C6:51:BF:81
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:ae:04:50:45:08:c6:14:d0:af:b6:97:b5:5e:40:9b:8d:
         70:72:d8:d0:10:81:b9:e3:c7:4f:7b:8e:06:c3:2a:75:79:d9:
         fb:8d:04:38:74:e1:16:e7:4b:6c:df:ca:ca:a5:c8:94:0b:e1:
         fb:0f:78:83:aa:11:10:8b:53:a2:9c:b3:5a:81:b6:7c:17:4a:
         39:d8:72:7e:bb:81:d2:08:a6:ea:e2:74:15:d9:ff:e8:94:df:
         2a:4d:e9:00:ee:13:44:db:ef:fc:d2:83:e1:eb:7a:98:6b:e3:
         38:ed:fb:6c:c6:85:81:5e:8a:6c:5e:da:9f:60:d9:f3:60:fc:
         89:2f:e1:1e:02:83:6b:6a:94:bb:b8:c4:a7:71:9d:79:71:00:
         ce:66:04:e6:ea:c6:f7:c0:14:62:09:a9:be:19:52:03:10:63:
         66:68:d8:23:74:4a:ee:83:22:95:1c:ca:9a:e5:ae:b2:cc:c0:
         7b:38:2b:39:0c:de:4e:29:0d:8b:44:db:06:99:01:c3:0a:ea:
         3c:84:8c:dd:d4:92:2f:f6:39:04:22:33:a9:76:8e:7f:8a:83:
         24:f0:96:cd:64:36:e9:9a:ef:4c:2a:2d:32:35:ae:10:ba:aa:
         c7:96:69:8c:9e:88:6e:5e:53:98:f5:ea:06:34:f2:da:e8:48:
         ae:92:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:01:20 2026 by rpki-client