Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File:                     ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier:          EEXpxi/hhA1RcPW6UzgzpVX7F7xh9rZ08OYVu7cVv+E=
Subject key identifier:   28:7B:DF:F3:FB:E1:6B:AD:6B:E7:12:DD:42:46:B5:21:9B:A1:6B:26
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       019E1DFEB225C0E48FCB535668293BF7F639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number:          1685
Signing time:             Tue 12 May 2026 21:01:31 +0000
Manifest this update:     Tue 12 May 2026 21:01:31 +0000
Manifest next update:     Wed 13 May 2026 21:01:31 +0000
Files and hashes:         1: 1bncdI1HvWegkfkOeeoa5nOljr8.roa (hash: NfbtKL/fM/sWFvyUIB3zJxF3TY7oHsHrb3iWZHcFnF8=)
                          2: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (hash: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg=)
                          3: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (hash: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw=)
                          4: 96nhW7fwQ_laWKSgwpcxi24MuvM.roa (hash: N6W5Ek/wK4Pm3whmGHtixWn1/HYkCfQdvQqhfZHUqC4=)
                          5: BfVNHWqEPlzaLXAUxndKGpZQISo.roa (hash: iPfjs5sAMs8Z6poczMNyYY8Bje3i0GDrHxRTpq3hZxY=)
                          6: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (hash: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI=)
                          7: Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (hash: qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=)
                          8: FBci10I6aG73ENuNfx7xpq1wj1I.roa (hash: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0=)
                          9: J_aMB1ufPcbVxvqNqW0DJagt9Ss.roa (hash: rYNYIygzVLxsYiz9/QpiUL2isg45v/iPFE29a+xdhpw=)
                          10: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (hash: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I=)
                          11: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (hash: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0=)
                          12: QG5DFr6piY7-9vaaVhpr5PmFziU.roa (hash: azODlTEeVfmyD9EHvQMxn8h5bi9MvzrkVrf2cKim+E0=)
                          13: RCc63apjlRxYYVC64jleE_CWsJc.roa (hash: mjSJEm7ypZz9PgXhGjjzoNx0TMGrQIqwIHaBFwo6puM=)
                          14: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (hash: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0=)
                          15: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: xr0ii9dclKW3vzCWRY6tm/Rfw/9uo4uYsNN1ZngSlsM=)
                          16: eIXa3P7-DLgvGb_upQKW0QWQEN0.roa (hash: rZZy59BZf9kQ9RiHu2DTRBT4n3jQYisJ5vFK73yoXdk=)
                          17: hPPUJEU66HUzBCdsMKPjv4y6kCw.roa (hash: ZcjMLqy1z7bp5wMo9CeMXm4svFAsNX9iyFgfU+2xru4=)
                          18: icFNxm6-PTi48L2vXKiDHN-axp8.roa (hash: BdFj1k1TZoLMU1HBgixKhNdJTHKY90rp1IYePTyNxUE=)
                          19: kx1p1slIxkJTxYn4OAj06CJUsf8.roa (hash: HkJZcVcAXKQ3R00x2VbaFry/zdm9SDMa5rLM9eNsbGo=)
                          20: q4DCvIiS6THJXZg00ACbcwTs9to.roa (hash: BzDZyZi3DK/fRXztW3cj1XBtDtFZup20v6Mda//O7qY=)
                          21: r1Lm-dX1qz59WOfpWgSU33XPmSM.roa (hash: 6oVzYKTRmw48EXPMuELo04geZt6gGCfSZv5bRmChJw8=)
                          22: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (hash: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b2:25:c0:e4:8f:cb:53:56:68:29:3b:f7:f6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: May 12 21:01:31 2026 GMT
            Not After : May 13 21:01:31 2026 GMT
        Subject: CN=287bdff3fbe16bad6be712dd4246b5219ba16b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:3f:d1:af:45:1d:01:01:35:63:54:37:4d:
                    6f:ab:34:73:f7:1b:c9:ea:d1:75:ec:1a:db:42:14:
                    59:c2:18:f3:5c:83:88:2f:e4:47:58:32:ab:63:32:
                    97:ab:e5:e8:9b:0d:55:3b:b6:db:b2:6e:d9:79:c5:
                    ca:b8:0d:84:fc:2b:f0:21:e2:6d:4b:a1:42:3f:b7:
                    b9:64:86:d5:17:36:0e:45:d0:2e:e8:70:45:1c:0e:
                    88:b8:a7:3d:da:a1:bf:6e:82:27:b9:4b:0a:a8:c3:
                    87:8f:fd:fe:08:3f:16:cc:02:42:02:47:97:64:c4:
                    8a:87:ab:51:8a:03:ad:77:a8:42:f2:9b:e5:a2:06:
                    e1:77:f3:09:86:a6:58:4a:83:6c:27:75:e5:ba:a1:
                    8d:c9:f3:13:c3:df:80:44:ba:5f:1b:53:05:38:31:
                    a3:c7:8a:fa:b2:1a:78:80:c4:c3:bc:c8:38:9c:7f:
                    e1:ba:32:95:c7:24:d1:b8:d5:4a:9a:f2:23:9e:15:
                    7f:9f:fd:43:52:68:7c:4d:5c:ba:1f:cf:32:e9:fd:
                    ff:ee:75:86:5b:a6:de:e0:f7:f6:59:bb:3c:f2:b7:
                    6d:75:24:90:d1:7c:e2:72:6c:c0:06:03:d2:ae:c7:
                    c4:a3:6b:39:31:ae:26:ba:6c:5d:06:bf:46:4d:93:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7B:DF:F3:FB:E1:6B:AD:6B:E7:12:DD:42:46:B5:21:9B:A1:6B:26
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:cd:5c:1b:90:58:52:ea:d5:7c:f6:70:a6:8b:35:ab:96:
         31:b2:b3:f5:41:43:33:f8:56:63:b8:1c:cf:ee:e4:52:f8:34:
         2e:50:dd:a8:08:1d:2a:40:df:fc:7e:dc:6e:33:a6:4d:15:c4:
         29:5c:b7:62:35:e4:4d:ab:97:61:64:5d:ff:08:ba:43:b4:d8:
         6b:a0:3d:dc:49:73:d4:8b:47:6e:49:79:3b:5f:fb:fe:11:db:
         3c:5b:82:a1:24:4e:43:8e:2b:40:eb:d6:c1:02:3a:40:1e:4e:
         6e:49:ca:ae:00:78:ef:16:f0:cf:61:82:5d:a0:b1:57:78:58:
         8c:2e:f1:4d:71:cb:c4:d3:51:5e:cd:2f:c0:99:d1:b0:93:2f:
         15:76:e9:4f:fd:6f:d5:ac:6e:2c:e4:65:92:f9:35:af:02:17:
         94:f3:3f:0f:11:55:5a:1f:eb:f5:8e:b0:a5:85:9f:42:ce:d2:
         d1:44:0e:04:fe:23:96:03:70:fd:75:81:7c:57:57:ed:0d:56:
         c6:0d:9c:68:fd:f2:46:90:73:17:4b:6c:c2:d2:f7:68:b8:bb:
         85:60:3c:f8:b4:7f:11:a1:42:51:66:6d:98:56:c4:dc:f5:cd:
         6f:75:9b:a8:1a:60:cb:89:30:0c:bb:ea:ff:ea:87:e7:bd:d8:
         f5:05:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:31:45 2026 by rpki-client