Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          OFenuRu3QkGmf453xGIAJBy8G5itiKzM6sUJfSUVjFM=
Subject key identifier:   F2:12:16:A3:37:4D:D8:8B:83:45:93:4E:17:17:6F:E0:57:D9:64:0E
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       019E2FCDF3CBE66358E54479F9D76F4E8F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 08:01:26 +0000
Manifest this update:     Sat 16 May 2026 08:01:26 +0000
Manifest next update:     Sun 17 May 2026 08:01:26 +0000
Files and hashes:         1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: Ti1MZpTNIiUkKh9HqU9yO4hMocGeE8q6FC13Uo3SXgk=)
                          2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:f3:cb:e6:63:58:e5:44:79:f9:d7:6f:4e:8f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: May 16 08:01:26 2026 GMT
            Not After : May 17 08:01:26 2026 GMT
        Subject: CN=f21216a3374dd88b8345934e17176fe057d9640e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:31:cf:fe:4c:7a:7a:a8:f4:42:49:d8:f8:
                    97:46:b1:91:36:7f:b3:27:1a:d2:2d:24:c1:37:75:
                    18:89:04:9e:db:a2:b6:8a:71:82:27:bb:2c:55:d8:
                    a8:ef:f0:cb:90:88:28:d3:4b:49:e4:99:27:6a:e7:
                    43:81:0a:79:4c:7d:2b:c0:da:1c:58:98:18:87:1a:
                    d1:6d:78:32:64:84:84:4d:e0:58:df:6f:9c:c7:60:
                    22:bf:ee:7e:1e:e1:9c:22:9f:a3:f9:4c:e8:2b:71:
                    19:12:3c:89:03:5f:bb:fe:f6:63:2c:fb:9e:11:84:
                    4f:d1:67:b0:98:34:7c:bf:2c:b3:23:73:c5:06:5b:
                    eb:85:4b:da:2f:fb:b8:25:5a:d4:43:73:89:44:93:
                    33:87:f7:d9:36:b7:78:84:fd:01:59:49:58:20:39:
                    ff:42:80:b6:0b:26:25:80:2a:2f:55:10:90:63:68:
                    ad:5a:87:0d:ca:0c:97:2c:63:79:85:f8:8a:4b:ec:
                    07:88:fc:f5:5c:69:7e:f5:f7:8f:9f:1f:61:4d:01:
                    c9:bf:de:9c:e7:0f:07:bd:4a:55:36:5c:50:10:9c:
                    8c:cb:1c:76:80:e3:0b:6d:a9:a2:59:47:1f:bf:51:
                    6a:8d:c3:5c:5c:88:06:e7:7b:39:e8:05:d0:a4:45:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:12:16:A3:37:4D:D8:8B:83:45:93:4E:17:17:6F:E0:57:D9:64:0E
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:4f:f4:90:a1:72:c3:fe:e1:a4:02:35:ee:ef:e5:5c:bd:
         d6:87:b5:d4:d1:64:39:17:8e:73:f6:ad:3e:6a:e0:67:b1:3b:
         ef:9d:d8:50:7b:b9:1f:03:32:e2:05:11:68:8d:a7:cc:ff:da:
         15:16:1e:c0:5f:84:cc:52:9d:12:6f:c5:bb:5d:61:af:70:45:
         18:aa:6a:d3:d6:04:3b:2e:65:60:3a:1b:22:6f:56:f6:9e:cc:
         fe:16:db:f4:3d:5f:73:63:22:a4:eb:1a:34:25:83:48:70:3d:
         0e:c7:5f:ff:82:ba:55:51:c2:66:85:3a:8b:b7:bc:ff:b2:74:
         70:0f:37:9f:0c:20:f6:b4:ac:0d:63:17:d6:ea:15:5f:92:06:
         d7:e3:99:03:9d:4a:1f:f9:cf:bc:a3:45:e4:bc:7b:ed:73:4b:
         35:cb:b5:19:2a:31:74:89:06:2d:48:db:ce:6a:5a:c9:77:36:
         d6:ab:5b:e1:15:8a:6b:e3:00:a1:3f:ad:41:a3:a9:a8:f0:0e:
         ce:ba:76:9f:76:2a:f7:1a:08:2c:1c:a5:1a:21:b5:ed:b5:74:
         36:7e:5d:17:33:3c:03:c7:aa:ee:ce:fc:8f:55:57:83:64:6e:
         84:19:ad:fa:6e:58:40:c0:d7:cc:a5:a4:71:d9:74:d3:65:85:
         e9:0b:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:09 2026 by rpki-client