Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
File:                     f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft (raw, json)
Hash identifier:          pRY/Tb5b/hcGvW/zCUPdR0vQHYzwYQ2vBA9b05JFI64=
Subject key identifier:   44:12:19:6C:7F:BF:2F:CF:F7:95:C0:46:A8:47:32:E5:AF:72:65:2D
Authority key identifier: 7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
Certificate issuer:       /CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Certificate serial:       019E1EA2E6B345A533C6273760E232E80BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
Manifest number:          A6
Signing time:             Wed 13 May 2026 00:00:52 +0000
Manifest this update:     Wed 13 May 2026 00:00:52 +0000
Manifest next update:     Thu 14 May 2026 00:00:52 +0000
Files and hashes:         1: NwGyrarXznEP79mpSfk4-aoAcss.roa (hash: kWL+oTlCQ4M6RuD7dSjXf+gw9XkHswGxJGJoJ/U5AMw=)
                          2: f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl (hash: dmsaAIIY8tPj5ZcQ0LR5eqssHORzSb+tUhlACV3cEaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e6:b3:45:a5:33:c6:27:37:60:e2:32:e8:0b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
        Validity
            Not Before: May 13 00:00:52 2026 GMT
            Not After : May 14 00:00:52 2026 GMT
        Subject: CN=4412196c7fbf2fcff795c046a84732e5af72652d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:1f:eb:d6:78:b0:53:d6:1c:5b:d1:0b:05:
                    5b:d9:2c:be:ae:ef:da:14:db:43:bf:4e:ce:df:7c:
                    14:f8:7c:6c:c3:61:f0:c3:0c:ea:0b:cc:c3:4e:c7:
                    b9:ba:dc:4d:ff:7a:c0:36:26:e4:b4:27:d6:dc:a7:
                    91:7d:a4:a4:9a:a8:3f:ec:be:3f:9f:9f:31:04:34:
                    e2:a5:dc:12:31:f9:28:1b:47:90:99:01:c9:c8:ba:
                    47:83:23:92:e6:24:a4:82:55:bf:f2:f8:14:2d:e5:
                    5f:5d:3c:36:fe:f3:5e:9c:3f:8d:0d:6f:a6:63:7a:
                    f0:19:62:2d:e5:0a:1b:e7:f4:ef:33:e1:f8:64:44:
                    54:82:45:b3:87:e6:0c:60:4f:a6:b4:43:dd:11:0d:
                    06:6c:ed:a1:67:96:5e:6f:54:1a:f2:60:7e:5d:c7:
                    f8:06:f7:33:f9:c2:68:01:98:e0:8c:a6:c8:93:b8:
                    08:14:84:a5:ff:f9:1f:ed:ea:70:a1:9e:2a:07:34:
                    7d:9c:30:d3:a5:f7:a2:36:0a:a0:c6:e2:39:02:b2:
                    0f:ca:f1:96:e7:bf:8e:e9:29:6d:db:37:b7:0d:37:
                    13:1a:2b:df:ac:e5:5b:1f:e8:d2:f8:a6:2b:0a:46:
                    84:46:77:3a:ec:70:e0:9b:4f:0a:34:26:9a:47:34:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:19:6C:7F:BF:2F:CF:F7:95:C0:46:A8:47:32:E5:AF:72:65:2D
            X509v3 Authority Key Identifier:
                keyid:7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:07:57:e5:fc:e0:54:00:03:45:fd:fe:b7:53:62:b8:8c:
         67:d8:e9:0f:d9:b8:b0:8e:57:20:ff:2b:c4:eb:f3:8a:35:9c:
         e4:26:da:84:25:dd:84:5e:f6:33:f7:0c:13:df:ff:59:61:f4:
         81:ef:2f:15:9e:d6:bb:4e:97:de:72:54:c2:28:52:15:40:48:
         68:57:51:30:bc:94:7a:c4:b0:d7:78:74:92:47:98:bf:2d:46:
         4a:e1:62:7f:eb:99:15:b2:ad:50:91:e4:ab:a4:e0:f3:a1:41:
         09:07:21:8b:1b:7a:74:3e:52:ff:a0:6b:79:92:ce:22:68:00:
         ed:f7:2b:10:7b:c5:92:1d:bc:4b:5b:df:24:54:51:d9:11:0f:
         d2:44:9d:ae:75:78:f2:86:00:a4:73:f1:02:5d:26:9f:78:71:
         35:df:ac:a4:de:71:5c:40:f2:16:d9:f4:7e:7f:bd:45:98:a6:
         7b:da:78:66:d8:d9:fa:d5:6e:72:b5:13:3f:20:d0:b3:0c:69:
         2e:ca:f9:15:de:0f:5e:35:6e:e5:1e:d9:5c:c6:6a:16:a8:7f:
         ff:2d:09:cb:72:f9:61:d9:fe:bc:3c:34:9c:05:fd:40:6b:36:
         74:7c:f7:94:a6:6b:4b:41:aa:7b:b6:22:04:ac:d4:9e:c3:7e:
         9f:da:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:38 2026 by rpki-client