Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          AdvEqX5WkYcKiykbpa32AiA6JrIJDMZzioSUTVLPwpk=
Subject key identifier:   2E:75:21:F0:17:DE:73:94:C8:1F:DF:8A:AB:5C:89:A4:23:7E:AD:EB
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019E1E6CA485EE732834100351EC1A5F5AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          04F2
Signing time:             Tue 12 May 2026 23:01:36 +0000
Manifest this update:     Tue 12 May 2026 23:01:36 +0000
Manifest next update:     Wed 13 May 2026 23:01:36 +0000
Files and hashes:         1: 0ghCWcoQm9cukPcvfE3lEeFtzu4.roa (hash: Z5UDi41XCVad7QYzMG+L0cQk79a5hQ8nqhRHmu3DXbg=)
                          2: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: 8NAxSpX7Y2788dNZJ4GOXVBBUBeLiP196T9K8j8o5Mo=)
                          3: 8qhqwdEox3WrRCXbbsIDku7TI6k.roa (hash: wswmfSBdDUsoVZh1h+FG18d8UfZemUZf7gIep8b9k3E=)
                          4: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
                          5: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
                          6: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
                          7: IPSfZ0fvPhCDMmGUAtBirzIAECA.roa (hash: R/HMW9jnD+CXP7TVHQiTppM88KPbRPAgQmIbho1dj50=)
                          8: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
                          9: KVTaTVaCviOMdjZzS4Zc0zBw4OM.roa (hash: rWuvCKTHTIyhv2L4Mlx4/iHLNmlWT5ONGdBrJkW48EA=)
                          10: N-mW-dhJixmBRsVJLgxAcUUVCZM.roa (hash: xo34gBOTOrsODU2dHZU2gvPmq3hn1PA8yVNJipFXj24=)
                          11: Uj72Q9K72BzfORvX32XHxYsGCr8.roa (hash: q0f7t8+Of1eJvBri8TQJoyc3vkt1j4VYogaz8e3rZSs=)
                          12: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
                          13: Xo6J7qDRBjGh9sXZaRj6zxrtZ68.roa (hash: TRaNi4k8BIVdihe9w6Pm65mC/UmNvr1WF2+/lczME2c=)
                          14: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
                          15: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
                          16: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
                          17: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
                          18: kG5r4M7vL0g0ERFaBEW96gIBEvc.roa (hash: kKKMoGzt2uOeJqgdnHsPG56fjNKaGYn/UtCz+xqiuPc=)
                          19: lct4bB1H-wCOOaAsA4i7d3IC4GE.roa (hash: GAqlifvXAPErdeOQZzzsHa26HVEfsU1pkeyvC7RPuPo=)
                          20: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
                          21: n_XEvDYqTMYmcDklyEEQZAapP4U.roa (hash: FRPCi8BHfC2b2LCmr4vX6DGUlH6IkNK9297U+Ab7+bo=)
                          22: neBBgA0odZn9GDyZaXqqlQXbshQ.roa (hash: SS0fdHDxh+zKYI6XDqiq1C8iUD2E0IhJks3vTraThww=)
                          23: o9mqiTtH3S2KZnujvjvvDG0aICg.roa (hash: KCs0ZnZjjQktrTca+UXk7YMlBgyjltzEeWWRRRwCKw8=)
                          24: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
                          25: qAYx45nxlYDnnw3FPj8rqLwYawc.roa (hash: cnuzs/IA+tUXp6BKmh6rTk0mw2s6mh24Bdz+61FbEwc=)
                          26: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
                          27: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
                          28: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:a4:85:ee:73:28:34:10:03:51:ec:1a:5f:5a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: May 12 23:01:36 2026 GMT
            Not After : May 13 23:01:36 2026 GMT
        Subject: CN=2e7521f017de7394c81fdf8aab5c89a4237eadeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:0e:6e:3d:18:09:96:12:f7:08:c0:2b:41:
                    a8:4a:9d:fc:80:df:66:ad:2f:49:e8:a8:66:89:b5:
                    bf:88:d7:d2:bf:d0:2d:a9:a3:e2:29:17:aa:c1:04:
                    85:6b:7e:84:2a:52:06:a8:57:63:2c:f8:d2:be:e7:
                    c7:24:4c:cb:24:9e:e4:a6:78:47:d6:7a:09:de:e3:
                    85:5c:a0:5c:f7:ae:27:17:aa:b8:4d:71:a3:12:76:
                    9e:48:96:ca:e1:bb:7c:fb:23:ba:5a:2d:72:d9:28:
                    50:4f:db:5c:66:6e:a7:13:84:24:9d:e6:d7:06:24:
                    2c:01:78:98:3b:b8:c2:be:0b:8c:63:58:14:9f:5f:
                    2f:94:c0:bb:1d:d5:93:fb:8b:b4:49:a6:36:ec:78:
                    4f:68:75:04:b2:50:e8:1c:f2:b4:36:30:43:2b:a0:
                    8b:02:ac:df:5d:0b:85:87:32:89:4b:b8:71:9b:0f:
                    25:20:56:b3:ac:e0:e5:b2:ac:14:4b:4d:34:db:0a:
                    88:cf:df:67:18:b0:cb:5a:64:be:fd:a1:3d:93:98:
                    6b:61:89:40:d4:bd:3d:f4:b4:8b:dc:66:cc:45:37:
                    42:6f:c7:c0:22:7f:8c:ca:c2:bd:29:1e:eb:a9:26:
                    b9:ac:99:84:18:82:f1:f4:db:96:13:f6:f9:0d:16:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:75:21:F0:17:DE:73:94:C8:1F:DF:8A:AB:5C:89:A4:23:7E:AD:EB
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e8:48:9d:22:b8:6d:e4:7f:c1:2d:17:0b:f4:4b:3e:89:23:
         5a:1a:4f:3d:70:0e:34:f6:67:1c:28:0e:6c:40:0f:f8:9c:36:
         69:6f:a1:76:e9:54:c5:6f:78:e1:40:5b:19:ea:a3:c3:70:bf:
         07:56:7e:37:a4:87:3d:48:ca:ba:5a:8a:dd:79:9b:8e:36:82:
         bb:84:74:a2:fb:3c:8d:10:ee:36:1c:23:17:c9:01:8c:dc:c3:
         b2:9d:55:ca:73:92:a0:d0:95:bb:2f:f2:e9:fd:1a:55:7d:25:
         1a:aa:89:77:10:c8:3a:57:a6:5d:0d:ae:9b:0a:6c:b4:b1:7f:
         e1:7b:ba:9a:40:09:80:26:9a:1e:70:7a:c0:7f:fa:68:d6:0b:
         4a:0a:e3:ae:b4:59:87:67:02:e7:01:f7:01:7c:c0:b8:40:e9:
         84:31:a8:3b:9d:f9:18:bc:65:d0:1a:a3:0c:de:f4:50:47:83:
         d4:9b:ac:6d:57:e8:d8:53:d4:4f:2a:5f:95:b2:5e:92:84:90:
         77:9b:1a:10:23:c0:7e:2c:1c:07:6a:35:07:e7:2c:fd:5b:2b:
         9b:dd:bc:73:d1:d3:ec:e8:9f:97:27:04:76:fa:69:e6:c5:fb:
         43:ae:84:93:52:b6:90:aa:9d:80:56:fa:c1:9e:5b:af:aa:f8:
         c4:dd:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:59 2026 by rpki-client