Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File:                     A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier:          2o5nqTkw3IC/6LoLSqabJQ+mHeexWKr1NLf9UUu1OdY=
Subject key identifier:   CB:7F:50:0C:BD:2D:59:02:AD:EE:1C:C8:13:D9:CD:6D:EB:FF:FC:96
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer:       /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial:       019E1E6CB477287C2F7903C5D17424E593D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number:          06C6
Signing time:             Tue 12 May 2026 23:01:40 +0000
Manifest this update:     Tue 12 May 2026 23:01:40 +0000
Manifest next update:     Wed 13 May 2026 23:01:40 +0000
Files and hashes:         1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
                          2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: yGnlp8Ydj8oN1sFEjUDHy1gIqIKRuAs2832Sc3bOkIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:b4:77:28:7c:2f:79:03:c5:d1:74:24:e5:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
        Validity
            Not Before: May 12 23:01:40 2026 GMT
            Not After : May 13 23:01:40 2026 GMT
        Subject: CN=cb7f500cbd2d5902adee1cc813d9cd6debfffc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:d9:ca:3b:3b:40:f3:0a:c8:d7:ff:0f:86:
                    c8:be:07:2a:f8:07:d9:41:d9:b0:94:65:ca:d3:53:
                    85:98:72:60:41:2a:47:1b:14:bb:60:39:ad:7f:08:
                    5b:54:1b:d2:c7:18:28:50:c9:a3:76:d7:5d:58:69:
                    ec:fd:50:78:e0:7e:10:e6:35:1b:d5:34:47:3b:a8:
                    68:67:88:de:d1:3f:d1:26:6a:7c:21:b5:b1:ce:b5:
                    3c:43:32:8b:c7:3a:74:d6:9d:20:74:4f:9c:6c:bf:
                    c1:a7:2b:61:c5:1e:a0:a7:87:36:75:61:73:94:de:
                    f1:4d:c2:d8:c2:02:a1:0b:1a:3d:83:ff:81:1e:f2:
                    d5:b5:45:4d:64:39:c8:f7:85:86:76:97:40:fe:00:
                    9c:ab:52:ce:2e:93:a3:4d:6d:71:1e:14:b2:7e:b5:
                    c3:72:64:ce:a8:74:b7:c5:03:30:4f:04:9c:dc:cc:
                    88:44:7a:d0:09:9c:13:68:42:c2:19:9e:fb:55:64:
                    96:86:8e:f6:8e:f4:6c:2e:35:89:87:47:7b:0c:4b:
                    a1:5c:6c:8f:62:93:ac:6a:e1:30:6c:e7:ce:fd:1a:
                    50:48:59:03:44:5d:a0:36:73:16:3f:83:7b:e8:0c:
                    86:b2:63:5b:e3:26:fd:db:c5:a3:7e:4d:cc:39:aa:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:50:0C:BD:2D:59:02:AD:EE:1C:C8:13:D9:CD:6D:EB:FF:FC:96
            X509v3 Authority Key Identifier:
                keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:60:0e:79:03:7d:38:0e:09:3a:24:87:a2:78:bd:c6:41:
         cb:b8:c4:74:bc:1c:98:4a:90:9e:90:e9:2f:76:0e:50:e6:d4:
         c1:77:d2:64:1b:00:c4:0d:85:0b:bf:1b:50:d5:b8:ea:b6:8a:
         d4:0d:f9:a5:e7:e3:1e:ad:e3:e4:c9:73:e4:e3:45:48:1e:8a:
         79:ca:8c:8b:94:8f:3c:5c:5b:eb:1a:ab:4f:7d:19:5f:31:05:
         24:aa:60:cf:c8:b4:e9:cd:b2:39:e3:15:c8:b5:dc:f5:38:d8:
         f7:21:0e:b7:eb:24:67:1f:3d:90:26:5f:bc:44:b5:c2:d1:5e:
         e8:0d:90:8b:b7:1a:73:f9:c8:b3:26:fa:3c:7f:2e:9f:31:7f:
         f0:d5:13:65:51:75:ad:50:9f:c9:32:b0:f4:cc:d0:e7:d4:3c:
         1e:f6:7b:dc:9b:07:a6:9c:28:02:be:99:ed:e4:1e:cf:1f:9f:
         70:92:ba:f8:31:05:d4:0f:0b:17:5b:2c:39:c0:fb:92:6b:19:
         ff:ba:cb:80:46:eb:78:49:4e:88:51:65:81:2c:03:e0:56:7b:
         df:e2:8b:c5:1f:c4:21:b6:24:b8:0b:db:96:ab:fc:32:9e:bb:
         36:08:de:69:f6:24:c9:e3:e2:2d:c3:49:5e:58:49:4c:b5:07:
         2b:9f:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:00 2026 by rpki-client