Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          zS7+Pder+Fb18zfqgBCWawisLsatXlK6850hCTxweTc=
Subject key identifier:   5F:B4:65:BF:52:DA:09:DC:E4:C4:BB:FD:49:76:06:8D:9D:F4:9A:B9
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019E2881CBFBFE3B214FB4BD29140D149E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          1921
Signing time:             Thu 14 May 2026 22:00:55 +0000
Manifest this update:     Thu 14 May 2026 22:00:55 +0000
Manifest next update:     Fri 15 May 2026 22:00:55 +0000
Files and hashes:         1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
                          2: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
                          3: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: /+NkaXOI/X1DfGU5l01KiIAvejYFjrfaYXQSwmZ4z1I=)
                          4: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
                          5: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
                          6: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
                          7: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
                          8: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
                          9: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:81:cb:fb:fe:3b:21:4f:b4:bd:29:14:0d:14:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: May 14 22:00:55 2026 GMT
            Not After : May 15 22:00:55 2026 GMT
        Subject: CN=5fb465bf52da09dce4c4bbfd4976068d9df49ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:16:a2:80:a0:6e:a4:bb:8a:db:23:e4:63:41:
                    e8:25:2c:10:08:b5:69:78:8f:61:c2:1a:e7:70:a9:
                    1d:f3:50:11:60:3a:30:1f:1a:47:a9:5c:d0:aa:ef:
                    c1:cf:07:de:83:04:e2:39:34:bb:6b:18:e7:f5:eb:
                    44:b4:1e:4a:e9:1a:61:ed:a0:53:ef:f3:2a:32:dd:
                    95:33:f2:3f:0c:e5:cd:17:e4:34:b2:e6:38:87:49:
                    c7:9a:5f:9b:78:9c:4e:85:8d:a1:cd:3a:58:e5:36:
                    d1:2d:7a:42:ec:8c:31:47:49:45:9f:59:65:93:7e:
                    f4:63:77:41:1f:92:c0:84:53:d7:8e:07:25:8d:0f:
                    ad:88:3a:ed:79:52:35:c7:f0:00:87:3e:0b:15:04:
                    f1:81:a0:34:c0:29:7f:ff:04:89:b7:ff:44:73:9d:
                    a5:39:87:11:ea:79:71:e4:17:dd:f0:70:fe:c7:06:
                    8e:a5:d0:63:eb:c9:de:96:53:05:0e:0f:6b:eb:f5:
                    da:3a:ea:b9:26:98:f7:a9:87:7e:da:01:97:ae:a5:
                    b7:2d:2d:71:5e:e1:a0:60:f0:42:cb:db:e3:0b:19:
                    95:91:40:8e:dc:d1:d6:d9:be:26:b2:06:3e:27:7f:
                    c6:14:f3:4f:ef:1e:d9:3e:cc:6d:8a:f3:d2:ec:39:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:65:BF:52:DA:09:DC:E4:C4:BB:FD:49:76:06:8D:9D:F4:9A:B9
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f3:9d:2b:29:89:0b:0f:f3:88:68:85:8a:17:c6:70:2f:5a:
         ed:1f:70:06:19:0d:bb:8d:91:a9:5d:3c:6b:ae:2f:db:9b:de:
         a1:69:b8:c6:fe:4f:32:06:07:5e:fb:65:39:c3:6e:6a:77:d5:
         b8:38:fd:43:9a:97:a5:51:ba:1f:d5:2d:dd:db:c9:78:9c:4d:
         aa:72:8d:64:1e:d9:f0:ee:3a:a9:c7:1f:c8:cc:6d:2b:9e:05:
         83:d8:c0:ad:5c:88:87:0d:38:47:ca:58:10:20:12:a1:10:6a:
         48:11:5a:fc:bb:5d:24:06:c2:31:7b:ae:7f:7f:d1:b6:ef:b2:
         73:5c:0d:34:64:1c:99:b4:9c:b6:bd:01:ec:60:40:09:07:cc:
         d8:6d:af:b4:f5:ac:0d:bf:62:b7:3c:f9:cf:c5:f9:fd:b9:bb:
         42:1a:c7:2c:07:c8:65:16:5b:77:7d:05:80:7e:2d:d0:a7:bf:
         fb:c0:36:61:76:62:39:3c:2f:ce:a7:25:51:d2:a0:59:a4:2e:
         0c:aa:2b:f3:37:26:25:36:33:8a:b0:e1:8b:c2:a5:e6:7f:29:
         20:68:14:3d:cc:39:2f:bc:c1:1b:67:f6:fd:91:5e:05:8e:56:
         08:e2:e5:43:45:23:d2:d4:ff:20:32:93:aa:e9:f2:2a:8a:fc:
         50:dd:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:59 2026 by rpki-client