Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File:                     6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier:          mjKxaU94ejXl4vj+/gfGNyrLTJKWJWcZIkRIQwynQgQ=
Subject key identifier:   79:C8:CC:61:AC:E5:B6:10:81:86:CC:8E:34:65:18:A7:B5:66:90:71
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer:       /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial:       019E1D593BEB90DD9C4BCDCE585658010956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 18:00:47 +0000
Manifest this update:     Tue 12 May 2026 18:00:47 +0000
Manifest next update:     Wed 13 May 2026 18:00:47 +0000
Files and hashes:         1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: b2hdwnIkI3LkTp0dJZMmlkwaOvVpLo4TD9db50r/nfg=)
                          2: hm0yzTK0b7qXlzutucuPmlCxGCU.roa (hash: hv0VBvVubXMhG6KhX/vN7Xc4XTlNc7CyGB6Tgv3eXXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:3b:eb:90:dd:9c:4b:cd:ce:58:56:58:01:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
        Validity
            Not Before: May 12 18:00:47 2026 GMT
            Not After : May 13 18:00:47 2026 GMT
        Subject: CN=79c8cc61ace5b6108186cc8e346518a7b5669071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:f8:09:b4:51:15:3f:b4:57:6f:f8:ec:31:
                    a7:5b:dd:b0:80:45:23:c0:be:a6:aa:8f:a8:98:5c:
                    73:16:f6:fb:55:b8:c8:01:66:47:15:62:a8:46:d4:
                    b4:a4:91:da:5b:f0:20:aa:01:1b:64:95:0e:bd:c4:
                    5d:04:07:fa:2b:b0:40:f5:28:9c:93:3c:13:81:6a:
                    92:36:90:1b:8e:0d:42:2d:38:93:90:af:1f:78:0b:
                    5d:c8:0b:7e:9e:21:0f:26:9f:ed:11:dc:c6:e4:79:
                    a0:d7:99:b2:79:20:f0:bb:0c:39:e4:ca:d7:cf:81:
                    5f:1c:a0:f3:6c:93:7f:b1:1b:1c:fb:40:ad:7d:87:
                    42:c0:4a:d3:4e:be:a1:fa:e2:e6:3f:dd:7a:90:94:
                    a6:f4:84:73:62:3a:cb:44:00:0e:c6:3b:27:e2:46:
                    b1:d2:4d:be:df:05:9f:6a:7d:fa:3b:0f:3a:06:fd:
                    f4:e6:31:92:b3:00:61:c3:20:9a:c4:5c:aa:9c:57:
                    50:4c:74:b3:5d:37:d4:a6:82:c5:b6:d0:e2:39:32:
                    7a:84:21:86:df:04:26:a8:62:27:a6:5a:f1:57:83:
                    9d:9e:0f:b5:eb:34:93:a1:05:08:a2:6f:af:d6:70:
                    fe:54:7a:0c:af:23:94:dc:5d:37:0e:67:9c:2f:8d:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:CC:61:AC:E5:B6:10:81:86:CC:8E:34:65:18:A7:B5:66:90:71
            X509v3 Authority Key Identifier:
                keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:67:a0:36:ed:56:67:7c:2d:88:ca:05:b3:48:c4:3d:82:5b:
         99:ee:1d:12:08:97:e0:74:44:50:c8:e3:80:0c:c0:64:72:42:
         78:73:11:f8:2f:22:fd:e3:ce:01:38:3d:ea:b8:3b:e8:3d:51:
         88:ba:ae:8f:db:ff:f2:0e:db:89:01:9b:51:94:66:6c:07:8c:
         64:41:b4:52:ec:1c:e6:b6:54:38:ba:6b:2c:e3:2e:3e:68:60:
         69:82:57:90:d7:c2:31:fb:a1:a3:7b:0a:23:5a:ed:5b:f3:3f:
         23:5d:30:5b:5e:b0:51:5c:df:fa:5a:8e:65:3e:21:69:e7:39:
         37:86:2a:47:1f:71:56:aa:74:27:e4:36:28:dc:9d:61:5c:46:
         2d:8c:95:89:ef:0c:68:f5:92:39:ed:cc:ad:67:d2:e7:c5:15:
         11:c5:9e:14:6d:78:2a:0f:22:bc:27:ec:71:64:d8:24:75:43:
         9c:26:b4:34:7b:7b:ef:3f:e3:91:b5:e5:f7:51:bc:a2:ac:49:
         6a:bc:98:b5:ca:9d:bc:20:41:bf:db:b4:ff:d1:60:ae:ff:b0:
         b8:fc:db:eb:89:0b:88:0b:2f:e0:a0:1c:1a:1a:34:7c:c9:da:
         e6:1f:ac:96:7b:88:34:0e:82:63:49:70:3f:60:91:2b:21:c8:
         77:c6:a6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTvrkN2cS83OWFZYAQlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTNmMzNjY2RmYzVmZTg0Yjg0YzE1ZjA0MzIyOTA2OTkx
YWY5ZTcwHhcNMjYwNTEyMTgwMDQ3WhcNMjYwNTEzMTgwMDQ3WjAzMTEwLwYDVQQD
Eyg3OWM4Y2M2MWFjZTViNjEwODE4NmNjOGUzNDY1MThhN2I1NjY5MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyP4CbRRFT+0V2/47DGnW92wgEUj
wL6mqo+omFxzFvb7VbjIAWZHFWKoRtS0pJHaW/AgqgEbZJUOvcRdBAf6K7BA9Sic
kzwTgWqSNpAbjg1CLTiTkK8feAtdyAt+niEPJp/tEdzG5Hmg15myeSDwuww55MrX
z4FfHKDzbJN/sRsc+0CtfYdCwErTTr6h+uLmP916kJSm9IRzYjrLRAAOxjsn4kax
0k2+3wWfan36Ow86Bv305jGSswBhwyCaxFyqnFdQTHSzXTfUpoLFttDiOTJ6hCGG
3wQmqGInplrxV4Odng+16zSToQUIom+v1nD+VHoMryOU3F03DmecL42nuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnIzGGs5bYQgYbMjjRlGKe1ZpBxMB8GA1UdIwQY
MBaAFOpT8zzN/F/oS4TBXwQyKQaZGvnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQt
OGE0ZjYzZWE5YmYxLzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQtOGE0ZjYzZWE5YmYx
LzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWegNu1W
Z3wtiMoFs0jEPYJbme4dEgiX4HREUMjjgAzAZHJCeHMR+C8i/ePOATg96rg76D1R
iLquj9v/8g7biQGbUZRmbAeMZEG0Uuwc5rZUOLprLOMuPmhgaYJXkNfCMfuho3sK
I1rtW/M/I10wW16wUVzf+lqOZT4haec5N4YqRx9xVqp0J+Q2KNydYVxGLYyVie8M
aPWSOe3MrWfS58UVEcWeFG14Kg8ivCfscWTYJHVDnCa0NHt77z/jkbXl91G8oqxJ
aryYtcqdvCBBv9u0/9Fgrv+wuPzb64kLiAsv4KAcGho0fMna5h+slnuINA6CY0lw
P2CRKyHId8amMA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:30:26 2026 by rpki-client