Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          sFFAo9sbSayfCN92YENAQv5SUuCuRoypAGn4ro2uq/A=
Subject key identifier:   7A:E7:28:25:F5:84:87:D9:F5:A1:D7:8E:FB:72:00:EB:30:B8:AC:EC
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       019E60BA853628FA58BB13EE0C7E42922D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          17B9
Signing time:             Mon 25 May 2026 20:01:36 +0000
Manifest this update:     Mon 25 May 2026 20:01:36 +0000
Manifest next update:     Tue 26 May 2026 20:01:36 +0000
Files and hashes:         1: 1llWNK65NedtiWi8qyia848ELaA.roa (hash: 0oTSLbXlh3Ln2/Z2bu7ijN1NRwtM3qIsyO0kzqAkxPw=)
                          2: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (hash: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0=)
                          3: HP5vxDtKtwCDfs6BQB76Wev5z1g.roa (hash: JBqv9H1vhnDV1/7jpMHZRDfH8t8fODjKdebQA7UXUqA=)
                          4: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: kJRwR4JSIxnsWz55c67rc5PQc1KCVQ69FgrHoL2veAA=)
                          5: uXECziQ3smuaIMYTw8iWVQeVWdU.roa (hash: VsTdkO/Hk7J0b6seMmQHukb+tc1WEEkh6Ku5TuQbcGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 20:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:60:ba:85:36:28:fa:58:bb:13:ee:0c:7e:42:92:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: May 25 20:01:36 2026 GMT
            Not After : May 26 20:01:36 2026 GMT
        Subject: CN=7ae72825f58487d9f5a1d78efb7200eb30b8acec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cf:62:c3:f6:01:97:2d:24:a3:c0:30:e1:9d:
                    6e:04:fb:3b:03:e7:23:5e:fb:7d:03:51:57:97:56:
                    a1:2a:87:96:61:7d:53:3a:60:9c:6d:48:93:a7:ea:
                    4b:01:ba:db:4f:49:77:3e:9e:9c:75:e1:45:4c:7c:
                    18:87:9a:50:19:bb:bb:4a:22:ca:86:ff:d2:77:de:
                    dc:39:38:e1:fa:5a:78:cf:63:f8:5a:b1:fe:99:c4:
                    df:9b:7b:51:c5:de:3a:cf:f7:c6:82:96:07:0d:2c:
                    9f:3f:63:a1:ed:7b:7f:22:df:f0:70:c0:60:68:41:
                    cf:ed:5f:f5:4c:d9:b5:8b:78:06:2c:6c:be:bf:c0:
                    fd:cb:38:15:72:8c:01:4a:72:c6:ce:a1:82:f8:ab:
                    1d:f6:c8:2c:6a:af:8c:f0:10:ea:9a:b4:4b:1c:e7:
                    3a:bb:8c:2c:38:24:19:6a:e8:06:8a:d9:ff:2f:3f:
                    d0:51:bb:65:35:0b:9a:bc:9a:ef:b1:9d:b3:8b:20:
                    aa:12:12:c0:b5:ff:a8:7d:6e:b5:12:25:bd:f1:4e:
                    b6:0d:0e:9d:7f:38:92:6d:32:e3:dc:76:34:7e:12:
                    13:84:23:96:9d:e9:3e:5f:71:e1:b7:d2:dc:6c:d9:
                    1a:53:c4:e9:69:41:84:ee:7d:85:10:18:13:6d:1c:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:28:25:F5:84:87:D9:F5:A1:D7:8E:FB:72:00:EB:30:B8:AC:EC
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:84:95:8d:62:df:38:89:28:6a:7e:3c:36:70:d2:a5:4b:
         51:8b:3c:5d:3d:24:33:57:37:96:d4:ce:cd:5e:5b:3c:cc:20:
         e5:ef:9f:7f:8a:7d:bf:c7:ce:83:59:95:af:3e:e0:3d:26:61:
         43:1a:69:1c:e8:1a:c9:dd:b9:24:e9:82:ba:f5:ad:c6:22:b4:
         2d:c9:bf:48:5c:dd:7a:e8:a5:0a:28:51:d1:35:ca:1c:bb:e2:
         08:59:29:9d:10:88:c9:ab:ac:ea:5b:69:0e:d2:b9:4c:7b:f7:
         78:a2:50:34:a8:e4:a1:73:3a:6b:4d:f8:fc:31:79:e4:fd:93:
         e7:9e:72:c8:c4:65:cb:69:46:ce:e0:42:43:e9:e1:a1:bd:b3:
         67:c8:fb:f1:85:d2:8b:52:24:4b:d9:ee:6f:f3:0d:db:df:02:
         b3:5f:22:33:23:73:4f:32:34:47:5e:09:bd:dc:a7:cc:d6:c8:
         32:c6:e5:f5:f3:b9:69:96:c0:d8:f6:d2:2b:f1:1e:d5:7f:27:
         4b:dc:78:f0:30:a5:dc:7c:94:01:7a:82:78:17:98:7f:5b:be:
         a0:e9:1a:9c:6c:47:c9:e2:b1:d2:e6:dd:c2:e8:dd:9e:a8:67:
         92:02:13:fb:a1:4f:9f:73:27:b0:ad:17:21:6d:fb:fe:eb:0e:
         27:8b:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:51:07 2026 by rpki-client