Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File:                     6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier:          CIV/DiH1YyMlDzChB5RYMGvHyHacSbIFW8dwgPp+qj8=
Subject key identifier:   32:F0:DD:1A:39:2D:9B:A2:29:D3:B3:57:19:99:15:8A:DD:CA:2B:2B
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       019E1EA3DEBE2F8907C0BC0AB2A0ABBCDABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number:          1911
Signing time:             Wed 13 May 2026 00:01:56 +0000
Manifest this update:     Wed 13 May 2026 00:01:56 +0000
Manifest next update:     Thu 14 May 2026 00:01:56 +0000
Files and hashes:         1: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (hash: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8=)
                          2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: G0iOm8CC/wQD5/fcP9Q8tKfA5ec7cYBpI6ucplqiGmk=)
                          3: AHUKnErfTdd73p4bYOK90XDEM78.roa (hash: 5EaqsItxZ1BQsHU9Kr2YPy6oSupY2lc793z7PhSn48k=)
                          4: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (hash: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU=)
                          5: FU6qfDeRGLTUUYPJh9COMZcbYuQ.roa (hash: TB+QrpXIIEHGgswGPR+KyYTjrwKORb9/h3q/s08f8O0=)
                          6: GXUGbRUgHF_wrrQsRndE_u1ZPF0.roa (hash: iTsepqpyUm1VVT1XwxzGIWO+pPFlI7X8SSW23YloZhc=)
                          7: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (hash: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ=)
                          8: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (hash: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o=)
                          9: PebWzmmguc5-4aQZe_HKUETdWLE.roa (hash: TQfr6FtdSj9u4LPbpAXmyw42DJTb7tOsjyKKAu7N3CI=)
                          10: Ps9C6gUFgHi7aaKL-5LqKG1lRNk.roa (hash: r74jkZOlx1JZBy0H3IDqp9qZgEG3W+yD8/XxGtvJxmk=)
                          11: XGfCqgFXc4zN3NEcVdkR_AbqEZY.roa (hash: vrm/Xdu7IdXpfwhj+3D9vsHsNrXWechY8Kxx0iPqPOM=)
                          12: ZBh08H6VA6CHko16OZIamGu1xf8.roa (hash: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM=)
                          13: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (hash: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=)
                          14: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (hash: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY=)
                          15: mFqx7FR9CXpnw3kdZUPrFGbJD1Y.roa (hash: /sd6E/lm/3IAT+F+ugKfMXjWXgoBW3+GutVYmu82Uk0=)
                          16: mP2GOcaU1PjclhV4W2iGXN0sBnY.roa (hash: AXKGTP6zGRcR7DI8dH98N4TRJhL4YCD6kauJs0pK9YI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:de:be:2f:89:07:c0:bc:0a:b2:a0:ab:bc:da:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: May 13 00:01:56 2026 GMT
            Not After : May 14 00:01:56 2026 GMT
        Subject: CN=32f0dd1a392d9ba229d3b3571999158addca2b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:7e:4f:bf:84:a3:81:7a:b2:fa:2b:6d:c7:
                    19:68:74:91:08:79:a6:30:e2:f4:b8:a8:3d:32:d5:
                    c9:26:4d:9a:d8:2e:b6:ce:b7:15:ea:10:d0:13:48:
                    ba:44:de:2c:9d:e9:8b:dc:d1:07:55:b4:6f:3b:31:
                    c2:8e:26:b8:d1:ec:61:a6:6e:ee:9f:ef:c9:44:90:
                    76:72:bc:79:ff:66:98:b6:99:9f:26:e6:3c:5c:88:
                    32:ab:46:cb:84:92:74:a2:d6:df:9f:b8:db:0e:25:
                    58:a7:fb:03:7d:90:b0:ee:be:01:97:bc:4c:77:bc:
                    24:79:77:44:eb:f7:a1:6c:7b:2b:60:d4:04:7e:05:
                    7d:ad:3a:97:2e:11:bd:89:09:96:22:dd:24:06:fb:
                    e6:03:ac:cc:f9:29:43:37:68:4b:04:bb:7a:05:45:
                    1d:59:35:38:41:52:99:8d:87:8e:69:b4:97:2b:a3:
                    75:5f:3b:13:db:0e:bf:6d:ad:1b:21:fc:72:43:4d:
                    f4:28:8f:b4:1c:18:20:98:83:5f:21:30:d9:b2:55:
                    cc:f4:43:6f:32:eb:6d:f2:e5:51:1f:45:d1:61:9c:
                    a0:1e:51:fc:7d:84:99:f4:7d:44:55:d6:d0:a3:cc:
                    d1:83:3e:4d:d3:5e:49:7a:5a:30:16:e5:09:d7:eb:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F0:DD:1A:39:2D:9B:A2:29:D3:B3:57:19:99:15:8A:DD:CA:2B:2B
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e4:0c:ac:ce:cf:43:ed:e0:83:d9:ac:5d:87:c2:8e:26:ee:
         d8:5c:93:d7:88:48:c8:3d:83:f9:94:02:b4:93:ca:be:38:fe:
         6b:6c:63:f3:92:ee:e0:30:04:a2:34:05:74:ca:9a:bd:64:bd:
         89:99:89:44:f1:4a:cd:a3:b0:28:a0:b4:11:00:cd:39:ce:f0:
         d9:65:49:e1:83:27:58:ed:f4:68:ff:cd:42:c5:a1:24:1e:43:
         16:bf:02:30:56:b2:6a:cd:39:2e:c4:a7:40:00:b0:7e:5e:2f:
         1d:34:e8:73:07:de:c3:82:79:aa:e5:ee:87:cd:10:f7:c0:65:
         e7:f9:18:8c:71:b2:f2:5d:7a:93:f7:2f:33:fe:89:7e:c5:2d:
         cb:fa:67:77:f6:05:44:18:d9:c6:56:b4:5a:5d:5c:37:0e:f0:
         e2:e8:ba:3f:7c:9d:c9:f7:7c:d6:a7:28:1c:56:b0:3a:cf:e8:
         2f:19:64:7a:68:dd:50:5d:e1:ca:ff:9d:c2:3a:85:ff:18:98:
         7f:2d:30:97:01:05:89:39:c1:88:44:5b:7a:3a:28:8a:fa:e8:
         90:26:a2:39:e9:fc:a3:aa:80:55:72:cd:13:01:53:3b:c6:c4:
         02:ae:36:65:1d:13:ea:27:2c:6e:34:1c:51:c4:73:e8:75:aa:
         12:73:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:15 2026 by rpki-client