Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File:                     o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier:          y6ds1TuWMfm0ForOqTrOcfnUkEBaPUzhMQA/9ZIHfWk=
Subject key identifier:   6D:BF:13:64:AB:43:5B:A1:F0:F9:1A:DD:8C:5D:92:9D:72:2F:09:C4
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer:       /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial:       019E1F10DAF75C7883686F9CA6CF5313D35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 02:00:58 +0000
Manifest this update:     Wed 13 May 2026 02:00:58 +0000
Manifest next update:     Thu 14 May 2026 02:00:58 +0000
Files and hashes:         1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=)
                          2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: Fors6MBA8+vGVr1BVg3X/a62m8vyMZU/5QF0bNwTyfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:da:f7:5c:78:83:68:6f:9c:a6:cf:53:13:d3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
        Validity
            Not Before: May 13 02:00:58 2026 GMT
            Not After : May 14 02:00:58 2026 GMT
        Subject: CN=6dbf1364ab435ba1f0f91add8c5d929d722f09c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:58:a0:59:d8:f7:6a:7e:20:dd:7e:73:9c:
                    cb:b4:1c:e8:6c:60:9e:be:e6:a9:8e:00:56:75:e5:
                    06:aa:95:5c:77:13:74:01:a1:7b:46:be:fd:fa:a6:
                    6a:f6:77:6c:2d:94:c0:e5:90:22:f7:48:17:9e:81:
                    bb:38:08:c5:29:8b:97:ac:b5:ba:09:b7:98:34:08:
                    24:ba:95:44:d2:00:8f:ca:d8:b5:2d:f8:42:7b:85:
                    c7:56:23:b0:ac:3e:25:48:30:1a:5b:10:ce:3e:7d:
                    d0:b3:73:96:fa:3c:5e:b2:73:20:c6:38:8c:3b:aa:
                    eb:b5:be:9c:94:8f:c1:3b:1b:2c:77:99:3c:52:29:
                    e1:e0:92:28:a3:09:7f:d9:8a:84:de:34:81:73:6f:
                    93:72:b1:98:ae:9f:32:4a:fd:0c:a5:ba:ba:8c:b8:
                    61:24:9c:26:bf:35:53:e8:d0:63:8c:6e:b2:c3:50:
                    fb:b1:c9:19:50:ab:5a:72:79:07:49:d1:55:8e:be:
                    40:c0:15:50:0d:aa:e9:e2:3a:e9:ad:7d:0e:a2:53:
                    b6:01:49:36:55:a8:8b:61:24:00:b1:48:fc:04:71:
                    8b:14:16:a8:1a:02:51:24:f9:cd:c3:23:89:b2:9d:
                    c3:74:78:ff:57:20:01:77:f6:a9:cb:53:cf:b0:9b:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BF:13:64:AB:43:5B:A1:F0:F9:1A:DD:8C:5D:92:9D:72:2F:09:C4
            X509v3 Authority Key Identifier:
                keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:0a:c2:6d:64:9a:3b:bc:6d:17:74:a3:3f:19:3b:19:45:
         60:36:0c:b7:fb:20:b8:e5:7d:09:3b:9f:fa:42:49:96:fe:88:
         8a:2f:7c:5c:93:fa:a5:73:f7:dc:1b:c6:df:d2:9e:61:8f:73:
         d5:4e:5d:6e:49:33:7e:bf:d4:91:16:d8:89:71:e5:d3:e1:86:
         ee:32:b0:ac:8f:d3:0d:f6:47:20:3e:93:f3:b2:d1:7d:d0:c1:
         01:c2:85:dd:1b:f8:c2:3d:57:02:ce:eb:41:5d:16:ca:1a:2f:
         7e:6a:d1:6d:0b:4c:12:1c:d0:3e:20:4d:f1:57:9c:ad:59:71:
         99:ac:80:08:e0:58:50:de:dc:f7:48:9d:aa:02:fe:3e:44:70:
         13:5e:2c:4f:1f:10:0c:c1:20:6a:12:e1:2b:f4:8c:e2:9b:ba:
         4b:c5:cb:1d:a6:ea:7d:29:b5:d6:0e:e7:5e:58:79:2e:b7:61:
         21:20:fb:29:4b:2c:56:1e:3d:bc:97:ae:90:fc:e2:68:b4:a3:
         97:4c:36:7f:4b:21:e4:a9:c7:39:eb:60:78:c8:9f:f5:49:ba:
         26:66:23:87:c6:b2:4b:77:98:f5:ca:a0:b9:99:ef:d3:fe:d5:
         bb:74:fe:d7:b5:e7:d5:ff:fa:aa:9a:8b:ac:39:65:24:33:72:
         4a:80:9b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fENr3XHiDaG+cps9TE9NcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj
NWVmY2YwHhcNMjYwNTEzMDIwMDU4WhcNMjYwNTE0MDIwMDU4WjAzMTEwLwYDVQQD
Eyg2ZGJmMTM2NGFiNDM1YmExZjBmOTFhZGQ4YzVkOTI5ZDcyMmYwOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYtYoFnY92p+IN1+c5zLtBzobGCe
vuapjgBWdeUGqpVcdxN0AaF7Rr79+qZq9ndsLZTA5ZAi90gXnoG7OAjFKYuXrLW6
CbeYNAgkupVE0gCPyti1LfhCe4XHViOwrD4lSDAaWxDOPn3Qs3OW+jxesnMgxjiM
O6rrtb6clI/BOxssd5k8Uinh4JIoowl/2YqE3jSBc2+TcrGYrp8ySv0Mpbq6jLhh
JJwmvzVT6NBjjG6yw1D7sckZUKtacnkHSdFVjr5AwBVQDarp4jrprX0OolO2AUk2
VaiLYSQAsUj8BHGLFBaoGgJRJPnNwyOJsp3DdHj/VyABd/apy1PPsJsFewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2/E2SrQ1uh8Pka3Yxdkp1yLwnEMB8GA1UdIwQY
MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt
MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2
LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjgKwm1k
mju8bRd0oz8ZOxlFYDYMt/sguOV9CTuf+kJJlv6Iii98XJP6pXP33BvG39KeYY9z
1U5dbkkzfr/UkRbYiXHl0+GG7jKwrI/TDfZHID6T87LRfdDBAcKF3Rv4wj1XAs7r
QV0WyhovfmrRbQtMEhzQPiBN8VecrVlxmayACOBYUN7c90idqgL+PkRwE14sTx8Q
DMEgahLhK/SM4pu6S8XLHabqfSm11g7nXlh5LrdhISD7KUssVh49vJeukPziaLSj
l0w2f0sh5KnHOetgeMif9Um6JmYjh8ayS3eY9cqguZnv0/7Vu3T+17Xn1f/6qpqL
rDllJDNySoCbUw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:20:49 2026 by rpki-client