Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier:          JwIH+mUTjkkqtZwBoBFaUU26o/+AQufMpDz7bYFuH3w=
Subject key identifier:   A7:B6:C0:85:B8:34:5E:D3:B0:BB:B6:6F:F7:57:B5:5E:30:B0:14:08
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       019E3229D279FEE14F9392239B21F797462E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number:          18DE
Signing time:             Sat 16 May 2026 19:01:01 +0000
Manifest this update:     Sat 16 May 2026 19:01:01 +0000
Manifest next update:     Sun 17 May 2026 19:01:01 +0000
Files and hashes:         1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: MiMHSkfNaRd1eFLG0rcZcML9MPElPGQuSBmsR3sWy/g=)
                          2: p1kohFb8KaXP2aXevlAW3obI0Mk.roa (hash: MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:d2:79:fe:e1:4f:93:92:23:9b:21:f7:97:46:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: May 16 19:01:01 2026 GMT
            Not After : May 17 19:01:01 2026 GMT
        Subject: CN=a7b6c085b8345ed3b0bbb66ff757b55e30b01408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:2a:c3:5e:0c:4e:fd:0a:ad:6e:01:a1:93:
                    f0:f3:52:54:84:d7:e1:bc:3d:f3:69:ab:b2:54:c8:
                    4c:f0:d8:52:20:54:b6:07:07:b3:7b:83:82:4b:f0:
                    dc:29:83:34:c3:43:3a:5b:23:78:2a:68:4f:58:6b:
                    85:ce:ce:7b:66:ef:78:01:b0:ad:ff:80:86:25:9d:
                    26:e0:c9:21:48:71:a1:74:2b:2a:7d:9d:06:25:e0:
                    02:52:b0:2d:6c:22:14:83:b8:74:ce:94:d9:a9:ea:
                    ea:79:bd:32:95:f8:7a:b2:4d:55:c5:99:1b:e8:76:
                    84:9c:e0:d2:39:25:fa:c9:f5:0c:a7:68:ed:c2:9a:
                    5b:8a:4d:bb:20:fa:4f:42:a0:0d:85:a7:a9:3a:b1:
                    8b:93:b5:6c:43:f9:e8:1e:ab:56:db:5c:76:ae:a2:
                    d4:7d:d3:c6:92:fb:e7:42:db:e8:d8:e3:b0:37:d5:
                    4d:92:a5:c3:76:6a:bc:2f:4f:e3:de:ff:81:3e:79:
                    d6:3b:42:1c:35:c6:ac:65:77:06:e5:ff:f9:56:f6:
                    65:ee:4a:37:f9:26:f3:4f:ee:4b:fd:f6:28:6f:31:
                    2c:ea:f3:e2:d4:cf:48:a6:f9:38:6f:9f:0e:de:10:
                    7e:14:45:ed:2a:8b:d2:2e:99:43:ab:20:4a:96:7b:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B6:C0:85:B8:34:5E:D3:B0:BB:B6:6F:F7:57:B5:5E:30:B0:14:08
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:06:1c:40:1d:4b:ed:1b:a2:26:e9:fb:42:4c:a3:ea:91:10:
         d4:9d:21:d6:29:cd:aa:4b:eb:83:dc:fa:85:43:d1:b0:ce:98:
         bb:ef:97:58:63:99:69:0d:51:6d:9c:cf:b5:e7:22:d0:bd:cc:
         67:99:f0:f7:7e:6b:1f:5b:da:f0:5a:83:c3:4c:61:cf:15:bd:
         c9:15:0e:fd:65:be:54:e9:8b:f9:75:aa:a4:4c:12:d2:4c:24:
         ca:6d:2f:c3:cb:54:47:b5:b7:39:66:32:33:8e:01:04:11:a2:
         d9:87:20:99:09:f9:90:9f:3f:f6:19:aa:bd:4b:ec:35:0b:1d:
         d3:03:41:07:da:3c:2b:6a:c2:ec:e5:81:d9:c9:4c:e1:81:2a:
         14:40:7b:97:28:05:0f:e6:fb:06:4f:b0:b3:7e:05:29:cb:10:
         8f:97:8e:23:67:d1:4a:53:75:5a:05:5c:08:ba:41:1a:98:af:
         8b:1c:7a:fe:4e:cb:d9:07:d4:7c:5c:d5:51:dc:10:28:e0:44:
         3f:c7:7d:f4:98:dd:6a:c4:2e:8a:63:57:9e:1c:26:fc:df:88:
         d5:4e:43:4a:c6:8e:d8:74:16:a8:ea:7a:77:11:07:6f:93:8c:
         27:fd:25:b4:2e:09:89:c2:8b:d1:51:a6:eb:10:11:a0:a4:f4:
         5b:b9:d8:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKdJ5/uFPk5IjmyH3l0YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NTgzMzhkZWE2YWU0ZGRiYjI0ODUwYTA3MDdmNDNhYTE3
OTRjM2YwHhcNMjYwNTE2MTkwMTAxWhcNMjYwNTE3MTkwMTAxWjAzMTEwLwYDVQQD
EyhhN2I2YzA4NWI4MzQ1ZWQzYjBiYmI2NmZmNzU3YjU1ZTMwYjAxNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHgqw14MTv0KrW4BoZPw81JUhNfh
vD3zaauyVMhM8NhSIFS2Bweze4OCS/DcKYM0w0M6WyN4KmhPWGuFzs57Zu94AbCt
/4CGJZ0m4MkhSHGhdCsqfZ0GJeACUrAtbCIUg7h0zpTZqerqeb0ylfh6sk1VxZkb
6HaEnODSOSX6yfUMp2jtwppbik27IPpPQqANhaepOrGLk7VsQ/noHqtW21x2rqLU
fdPGkvvnQtvo2OOwN9VNkqXDdmq8L0/j3v+BPnnWO0IcNcasZXcG5f/5VvZl7ko3
+SbzT+5L/fYobzEs6vPi1M9Ipvk4b58O3hB+FEXtKovSLplDqyBKlnvE6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe2wIW4NF7TsLu2b/dXtV4wsBQIMB8GA1UdIwQY
MBaAFOhYM43qauTduySFCgcH9DqheUw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMt
YTFkY2U2YWQxNTBjLzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMtYTFkY2U2YWQxNTBj
LzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwYcQB1L
7RuiJun7Qkyj6pEQ1J0h1inNqkvrg9z6hUPRsM6Yu++XWGOZaQ1RbZzPteci0L3M
Z5nw935rH1va8FqDw0xhzxW9yRUO/WW+VOmL+XWqpEwS0kwkym0vw8tUR7W3OWYy
M44BBBGi2YcgmQn5kJ8/9hmqvUvsNQsd0wNBB9o8K2rC7OWB2clM4YEqFEB7lygF
D+b7Bk+ws34FKcsQj5eOI2fRSlN1WgVcCLpBGpivixx6/k7L2QfUfFzVUdwQKOBE
P8d99JjdasQuimNXnhwm/N+I1U5DSsaO2HQWqOp6dxEHb5OMJ/0ltC4JicKL0VGm
6xARoKT0W7nY9A==
-----END CERTIFICATE-----
Generated at Sat May 16 21:14:54 2026 by rpki-client