Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File:                     M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier:          UM1tup8IuJD9PrgLO9A2i1YTruNHRskLLE62LY2oIVo=
Subject key identifier:   A9:31:CB:CE:A5:3B:39:E5:D6:94:AD:42:E5:6A:51:62:CF:14:8B:25
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer:       /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial:       019E326193E9E17E38512A48FFB024CC8EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number:          0938
Signing time:             Sat 16 May 2026 20:01:56 +0000
Manifest this update:     Sat 16 May 2026 20:01:56 +0000
Manifest next update:     Sun 17 May 2026 20:01:56 +0000
Files and hashes:         1: 1D6YY4AfNvV2NepuuxtkGVV-rLg.roa (hash: LNZLVcujqagQzwW2q2V4qRkT/sBDkvN16A/NWVzLzWU=)
                          2: HOYPj4fxlJpMEgvz-DEwT478Zw0.roa (hash: 7P50ZlqJyO8nhGQCGcuWiJXDncM9pWzrp0URwjErvl4=)
                          3: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: 40MnM5fZYqsgm7QnOhoVnHkeogJNCCPQX/zYW+mnZgU=)
                          4: UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa (hash: eu9hciCdi48z/WHUFfgsqnitXTRgtMV120uloxDdTDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:93:e9:e1:7e:38:51:2a:48:ff:b0:24:cc:8e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
        Validity
            Not Before: May 16 20:01:56 2026 GMT
            Not After : May 17 20:01:56 2026 GMT
        Subject: CN=a931cbcea53b39e5d694ad42e56a5162cf148b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:7a:a9:43:e7:19:61:b0:40:ac:24:55:3f:
                    29:52:f9:7c:72:1c:04:70:7d:72:73:5d:8d:49:29:
                    1b:f6:a0:3e:89:3c:f1:8f:34:03:06:b0:dc:9b:c4:
                    ed:96:af:9d:3b:f7:a8:69:b6:5c:35:6b:6c:8a:b9:
                    32:b9:f2:b3:b7:79:21:56:dd:97:19:35:c9:96:ca:
                    a7:ec:a9:c4:95:1e:b4:ee:92:98:a2:48:88:23:c3:
                    ac:3e:cd:84:c4:34:01:3c:bf:29:45:08:a7:a5:7e:
                    d7:87:3e:16:f2:ce:ba:0e:50:b9:39:c8:d7:25:2a:
                    d0:bf:52:af:e5:62:c7:26:41:55:7a:fd:5d:25:cb:
                    f0:26:8e:8f:12:d7:ff:5c:f0:80:9e:8f:4f:28:aa:
                    7a:89:eb:06:d0:4f:e9:c4:9a:f3:6f:17:8e:e6:b4:
                    ea:3d:eb:64:76:cd:5b:f7:a1:c6:64:1a:af:7d:62:
                    ff:85:0c:bf:5f:53:fa:0e:a6:f0:89:a3:5e:20:be:
                    f9:c7:95:cb:c8:a0:a6:84:ed:53:e8:71:0e:bb:58:
                    7c:63:da:b3:fd:08:fa:a6:b5:0e:e6:23:c2:4c:62:
                    fa:03:eb:71:46:e4:20:7c:24:ad:e5:8c:4e:cd:53:
                    b5:9a:3b:13:e5:d2:17:9c:0d:2d:a4:0e:3e:15:50:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:CB:CE:A5:3B:39:E5:D6:94:AD:42:E5:6A:51:62:CF:14:8B:25
            X509v3 Authority Key Identifier:
                keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:56:1c:a1:8f:e8:ba:02:a8:52:8d:73:42:fd:77:87:ec:
         a7:4a:98:8d:1e:39:fe:a8:a0:a9:65:48:41:90:2d:22:9c:7a:
         50:f6:fc:9c:76:7d:a5:4a:d5:f7:4b:d1:fd:45:85:d6:b5:44:
         67:bf:2a:9d:0a:8d:0c:c8:84:aa:a4:ce:ff:76:e1:8a:e1:3a:
         b8:2f:77:b9:b2:27:b0:78:41:8a:f4:41:3c:fb:40:6d:73:98:
         59:05:6f:d4:2e:a7:a0:76:a9:c5:13:10:7b:09:a9:62:e4:62:
         22:c1:9e:a5:3d:51:7d:fb:f1:0c:34:be:f4:9b:ca:57:f3:74:
         93:9a:b9:2c:01:49:0d:73:38:3d:9c:44:c9:46:04:ca:62:cf:
         84:fb:a4:3a:f2:4d:52:34:b3:90:6f:c2:f1:a1:f6:d0:80:30:
         24:ac:97:42:38:50:be:2b:8c:17:dd:53:7c:ab:42:3c:50:d1:
         c1:4d:18:aa:dc:ad:25:97:1b:15:84:22:ff:45:18:9c:81:61:
         fc:dc:0b:60:74:83:bc:e4:1f:a9:32:70:d4:38:69:73:1b:03:
         36:1e:f2:6d:47:7c:22:b9:5c:23:e7:b1:15:f5:d4:c9:57:64:
         05:fd:b3:d2:98:31:7f:cc:35:d4:e6:38:c6:82:67:87:90:7c:
         a3:02:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:17 2026 by rpki-client