Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          PSHSldxfCXt2Hyib3KP0BJSkASNzlN52EFhrtJ+8EX4=
Subject key identifier:   6A:50:0B:72:12:45:E5:26:1C:E9:94:2A:4C:D1:DB:3F:E2:E1:C4:22
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019E1FB5715E9FEA9E765EC92A1D2042DA90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          191E
Signing time:             Wed 13 May 2026 05:00:45 +0000
Manifest this update:     Wed 13 May 2026 05:00:45 +0000
Manifest next update:     Thu 14 May 2026 05:00:45 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: pfKWmOoqzgpoj5jz5upRyWW+jzEkRA5GbS8I054Q/xU=)
                          2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=)
                          3: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=)
                          4: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=)
                          5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=)
                          6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=)
                          7: vSQI8aeWI14r_sJ8b9o2QgEO_BI.roa (hash: oiaQsMRtgp1rem+ZyltK5SLqiX97thYBgEBpvq3aaYc=)
                          8: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:71:5e:9f:ea:9e:76:5e:c9:2a:1d:20:42:da:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: May 13 05:00:45 2026 GMT
            Not After : May 14 05:00:45 2026 GMT
        Subject: CN=6a500b721245e5261ce9942a4cd1db3fe2e1c422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:da:11:23:8c:3e:4b:5f:2d:b0:d0:a9:96:
                    88:97:d7:6b:f6:89:1d:ae:4b:25:77:f3:d1:f8:85:
                    73:eb:74:5e:6f:3b:40:0b:31:ec:cd:14:17:c7:45:
                    99:31:7a:e1:f9:44:fc:c7:5e:02:91:d1:8b:63:90:
                    eb:d9:d0:c0:d4:cb:d3:71:1f:0f:8d:04:e4:4b:31:
                    ab:be:48:ed:cf:f4:00:95:e2:b4:9d:9c:42:b7:c6:
                    ee:a7:92:90:f4:e4:29:d6:53:d6:54:0a:c3:2d:29:
                    05:7a:0f:cb:34:2c:9c:94:9f:75:79:26:bd:4f:17:
                    a8:90:9b:95:ea:66:11:d1:6c:7e:15:33:8a:49:df:
                    cc:91:97:e0:16:ce:67:30:b8:26:d2:cf:4b:82:ed:
                    53:40:d9:72:1c:41:ff:a8:50:ec:f8:44:d1:44:a9:
                    60:65:d3:a9:04:14:a7:dd:9b:2f:cf:8e:1c:2e:1e:
                    c5:a6:6c:6c:2b:c1:fe:eb:93:ae:05:74:a5:c2:c7:
                    60:91:e5:c2:bc:86:96:46:4c:c2:b2:57:f4:d0:78:
                    6e:cb:45:3b:40:c3:83:7f:63:95:49:9e:c6:a7:3a:
                    8d:45:f1:26:6d:5d:be:d0:b7:93:7e:d0:88:c9:7f:
                    6e:d2:cd:fb:27:7b:40:2d:a9:ff:be:8d:66:b8:e4:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:50:0B:72:12:45:E5:26:1C:E9:94:2A:4C:D1:DB:3F:E2:E1:C4:22
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:8f:91:fd:d7:7e:c8:cd:5d:cb:3a:ec:d8:06:a9:8d:ff:
         46:79:94:7b:b6:24:89:16:7c:fd:a7:53:74:91:ba:c8:41:a4:
         4d:11:b3:0b:48:d8:1e:31:f4:43:63:0a:07:60:e9:1f:ee:3c:
         08:7d:4d:68:e8:c6:0e:65:b0:46:d1:bc:97:c4:76:a3:1f:46:
         b1:ba:1e:eb:06:34:01:65:42:dd:b8:d8:9a:84:bc:9d:62:f9:
         e2:f1:5a:8b:a5:bc:2b:b6:bc:41:49:d8:0d:86:8c:87:09:f8:
         b5:60:42:df:92:72:54:7f:ce:06:4f:6a:c4:08:23:d7:4d:c5:
         4a:50:1e:fd:4b:b7:07:a3:d0:ea:e8:fc:5d:24:f8:2b:cc:8b:
         23:b1:2a:80:56:a0:9f:d8:90:ec:94:e5:77:98:c2:35:72:06:
         fa:dc:b8:04:18:69:fa:3d:78:e1:b4:97:90:22:b7:c9:99:8a:
         df:e8:2c:e2:d6:8c:14:a8:03:8d:e6:91:ee:51:85:24:04:7a:
         92:b5:5f:0d:4e:3e:e2:5b:dd:20:8f:f0:cc:be:55:27:4c:2c:
         2b:1c:6c:48:a5:46:b7:2e:8a:ef:42:23:0f:c1:5c:75:ae:33:
         c4:db:3a:04:71:99:cc:9e:ed:2c:e5:e8:5b:ca:d3:6e:0e:ee:
         5e:d5:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:35 2026 by rpki-client