Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File:                     r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier:          d8io9xgZLjIlpGes87Jvz4SYVhaSu1UZZ25YQKiI5Hw=
Subject key identifier:   A5:CC:D9:09:D9:68:E3:3B:23:FC:89:7F:A0:7D:5D:8F:1A:DD:B9:29
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer:       /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial:       019E21A43EFAA11B820D4B77CAF988D05E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number:          1465
Signing time:             Wed 13 May 2026 14:01:12 +0000
Manifest this update:     Wed 13 May 2026 14:01:12 +0000
Manifest next update:     Thu 14 May 2026 14:01:12 +0000
Files and hashes:         1: 8VoV6D_eegqIBHZanaVQhQ_BcA0.roa (hash: BR+EO4ahbvoTRogEluDEGsMqIHtTB8hdFQ6Pgx2wNhw=)
                          2: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: eV25d4AGQzWNun/zFj97yYP/Q5N/ynJnjnXEJrSDfRo=)
                          3: sG9W1Xy_sx6TaJNJJ2tAauKaFb4.roa (hash: 2TT3GLZDtqOpSaUq6isrPNnlWIbuaybJDZfYdXkAT/w=)
                          4: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (hash: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:a4:3e:fa:a1:1b:82:0d:4b:77:ca:f9:88:d0:5e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
        Validity
            Not Before: May 13 14:01:12 2026 GMT
            Not After : May 14 14:01:12 2026 GMT
        Subject: CN=a5ccd909d968e33b23fc897fa07d5d8f1addb929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:70:7f:27:d7:aa:db:ee:e5:23:3f:8c:1a:
                    73:04:16:b2:91:17:05:35:76:29:07:8d:87:35:b8:
                    dc:fa:b6:50:73:e9:c0:0d:19:eb:ce:ef:73:20:22:
                    8e:cb:15:29:f6:dc:75:31:51:bc:4f:36:da:57:0f:
                    d9:56:83:df:3a:b6:ec:af:3e:a8:e0:fe:53:bc:b0:
                    41:da:dd:6e:82:32:3e:c0:a0:07:2f:54:c6:b4:9e:
                    dc:6c:f5:d7:03:cb:5b:07:aa:4c:6b:0f:9c:d8:90:
                    8d:8b:9d:38:d5:c2:4d:80:f1:41:aa:36:95:df:37:
                    81:45:c4:c6:5b:ad:5d:81:2e:10:0a:04:50:fc:fe:
                    69:e2:dc:04:e6:46:bd:4c:9c:97:9c:51:97:c3:ae:
                    41:8f:29:57:dd:c9:53:f2:4d:0a:fc:1e:cb:94:00:
                    d0:03:95:13:ad:f8:fd:60:6b:de:36:48:07:72:e3:
                    37:9d:ed:ff:c7:9b:0d:64:b1:0b:84:d4:03:ce:87:
                    c5:92:1f:5e:ca:66:8a:a8:da:dd:f8:3e:ad:fe:cd:
                    c5:56:fc:f1:ae:7c:f0:ec:aa:0b:e9:e7:aa:d8:d2:
                    1d:7d:c9:aa:d5:e6:9c:b5:7d:be:cd:40:fa:b6:b4:
                    19:88:63:4c:e6:b6:d1:d7:9a:19:2b:e0:9f:9e:f1:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CC:D9:09:D9:68:E3:3B:23:FC:89:7F:A0:7D:5D:8F:1A:DD:B9:29
            X509v3 Authority Key Identifier:
                keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:2e:7d:77:dc:6d:73:95:e0:e1:09:fd:f9:7a:4d:14:4a:
         2e:15:97:14:3f:86:e9:33:f2:70:3c:5b:72:7b:41:82:60:97:
         97:84:01:5f:83:c0:cf:2c:4b:97:38:88:6d:bf:6e:63:7d:c9:
         05:ec:0b:6d:91:ec:45:a9:b4:05:87:a8:e2:a5:78:ce:3c:00:
         f6:aa:8a:3f:8e:56:b6:da:95:23:bf:0d:03:6e:a0:2e:40:40:
         71:15:37:8f:21:54:c9:40:d9:b7:cb:dc:6e:8d:59:92:60:e8:
         db:75:8a:99:8f:9d:93:78:12:4f:b2:f6:35:d4:f7:d6:ef:f7:
         a1:6a:8c:6b:90:e4:39:7c:bc:52:0e:d5:f0:bf:8d:cb:d0:cb:
         fb:56:ec:db:b6:88:74:1e:c6:70:98:c8:97:0a:ab:16:50:18:
         2d:4d:3b:41:9f:a3:c5:e9:ff:de:6d:58:d0:9c:9c:53:e2:95:
         3b:d2:c2:d7:17:3d:de:72:d8:6f:c4:44:6f:cb:39:ad:de:46:
         61:c8:b3:20:20:45:ca:d5:f9:9f:74:7d:78:fe:9e:f9:06:a0:
         84:e6:22:cd:17:4c:4d:0b:70:53:bf:76:36:07:75:98:77:81:
         6a:a7:ec:b1:f3:de:93:e3:b8:76:5f:98:47:4c:27:55:60:25:
         83:cc:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:27:53 2026 by rpki-client