Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File:                     6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier:          G3MYZthrsn1ZJ+3MYR51Zu4D7iPUR0uV+KFGuppDYCA=
Subject key identifier:   F0:25:4A:1C:73:D0:59:DC:EA:F7:1C:DE:7C:11:14:79:C1:04:95:D5
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer:       /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial:       019E30A8F0E2D01F38B70192D66616AE2EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number:          1915
Signing time:             Sat 16 May 2026 12:00:38 +0000
Manifest this update:     Sat 16 May 2026 12:00:38 +0000
Manifest next update:     Sun 17 May 2026 12:00:38 +0000
Files and hashes:         1: 1-uAgTFytjfQ2ckH7_TAX-TvGxDw.roa (hash: xn38BGRi79f6/jqPvFZVsKi+tmY/L4hGFFUPT+YH0JI=)
                          2: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: cbwSWO15RomQRkkduFp+VPcptj/q6zjEdm67zF+re8I=)
                          3: M9gXh3Ye6TS9xUzQp1X1eJno0dg.roa (hash: lAB0vTky9FECb8JWHkfQm6v4LaD80/MiZF2Q6KaOlC8=)
                          4: jTpwteJckLxk88W-0IFWft0YYq0.roa (hash: qmbAR8GlWHjPRVsTXR8d6LEMmz3CLKUUkjmNaODWk7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:f0:e2:d0:1f:38:b7:01:92:d6:66:16:ae:2e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
        Validity
            Not Before: May 16 12:00:38 2026 GMT
            Not After : May 17 12:00:38 2026 GMT
        Subject: CN=f0254a1c73d059dceaf71cde7c111479c10495d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:8d:76:20:3d:35:9f:62:c5:e2:9d:e8:47:
                    dd:84:4d:1f:a0:3e:18:b2:2e:e2:7a:df:ec:7f:9c:
                    4e:83:63:df:52:3e:91:25:62:d6:46:4a:04:ca:53:
                    c1:7e:2d:9a:01:0d:91:cc:82:ca:81:de:b6:47:62:
                    a3:a7:a8:f1:37:b6:7e:88:90:0d:09:f4:9d:2e:ae:
                    15:b3:8d:1d:b2:3c:d7:bd:8f:c7:4f:72:c6:ff:b7:
                    df:a1:13:46:9a:3b:8c:b3:8e:14:36:fe:3d:fc:69:
                    05:a2:c9:22:6e:fc:67:02:74:bd:50:ed:3e:85:ef:
                    ae:0d:92:73:67:b8:f5:c0:a5:d1:b4:5d:2b:dd:fa:
                    ea:b9:12:70:cd:f1:b5:fa:5f:e9:bb:dc:9f:52:b8:
                    d9:b1:98:f1:03:c4:39:e1:88:14:a5:a2:f0:15:67:
                    c7:84:b5:6e:fc:0e:38:6f:e1:e8:dd:2a:6c:81:3c:
                    ee:c9:cd:a8:d4:73:59:3e:1b:00:31:5b:b6:99:cd:
                    97:88:1d:61:42:6a:30:c5:7f:b7:ab:2d:d3:37:f4:
                    dd:4e:d9:0b:ac:9c:77:55:5a:0b:28:22:39:f8:02:
                    aa:82:4d:1f:3e:16:0f:9c:50:51:00:01:09:0e:b2:
                    d2:5c:2c:0f:e9:a2:b6:8a:2d:08:84:08:5c:01:7f:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:25:4A:1C:73:D0:59:DC:EA:F7:1C:DE:7C:11:14:79:C1:04:95:D5
            X509v3 Authority Key Identifier:
                keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:e6:22:76:22:25:e9:c3:de:86:c7:81:63:da:9c:86:a9:
         bd:1c:80:8b:5a:71:b9:d5:bc:88:e8:ed:c1:34:6f:bb:2a:8c:
         73:62:52:bd:d0:bf:66:84:d7:0a:61:44:af:a6:6b:e2:79:0a:
         0e:b9:13:5b:9d:82:74:30:84:fd:5d:79:15:de:2d:4b:31:57:
         cc:90:c0:63:78:e8:a7:a3:fa:c7:05:5f:78:13:cc:59:9b:11:
         67:ab:9e:72:f8:0f:19:2a:51:2a:74:87:9d:4f:66:02:8e:90:
         00:63:dc:e6:97:33:5c:85:55:7a:8b:6f:6f:43:d6:ec:40:21:
         54:5f:6a:2d:95:99:85:89:d2:0e:d3:68:f0:e1:c9:5f:2c:19:
         e7:5d:c2:35:d7:11:59:6b:3b:a5:2d:b5:4e:d3:06:c8:99:e5:
         af:ff:93:52:3e:e1:f2:6c:d4:1e:2f:61:2e:ad:b7:55:0f:7f:
         81:6d:92:a6:58:51:1a:f2:f4:5a:2c:d4:5d:a1:58:18:80:c6:
         bd:8c:90:f3:90:63:50:cc:51:6d:8b:00:09:b3:45:5d:46:69:
         b6:56:7f:30:c1:71:76:04:70:3a:66:f7:bd:f6:0b:68:72:ec:
         a2:50:ed:e6:65:12:4e:bd:47:10:0b:b9:a2:bd:c7:de:69:0f:
         4b:d4:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:44 2026 by rpki-client