Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File:                     svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier:          mY1WPKZ0w4AxB7wZcYV3fp1fXKwNfWrzMJTn0b9dCeE=
Subject key identifier:   CF:8B:95:86:0F:FD:A0:4D:BC:BE:B3:26:26:55:74:25:4E:15:28:7D
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer:       /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial:       019E1FB5EA52BEB267E2199366B40F12B024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number:          11AD
Signing time:             Wed 13 May 2026 05:01:16 +0000
Manifest this update:     Wed 13 May 2026 05:01:16 +0000
Manifest next update:     Thu 14 May 2026 05:01:16 +0000
Files and hashes:         1: PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa (hash: NUmc1QVEGYCgpRZW6pi+g/fleA3EF++2rMWcLNwzwmc=)
                          2: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: lmf8h6tYnrYE9KOY0jeiez3HxZk0AcbLqRGKb4tR4zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:ea:52:be:b2:67:e2:19:93:66:b4:0f:12:b0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
        Validity
            Not Before: May 13 05:01:16 2026 GMT
            Not After : May 14 05:01:16 2026 GMT
        Subject: CN=cf8b95860ffda04dbcbeb326265574254e15287d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:80:6b:13:b3:df:33:da:7f:fe:a9:46:1a:
                    33:ce:8f:7f:1d:95:56:9d:b5:08:9b:1b:4b:37:c1:
                    dc:fb:f6:82:42:3e:59:6e:9b:c6:59:1d:11:c5:db:
                    bc:91:26:9e:73:d1:a7:e8:d2:60:de:39:85:68:81:
                    1e:12:e0:f9:5e:65:be:9f:ce:61:c0:15:56:25:90:
                    78:13:49:cb:61:ff:20:a8:28:68:c2:4a:9a:96:69:
                    66:9e:60:5a:6c:92:24:c9:9f:b4:48:4f:88:b8:e8:
                    a7:28:ae:cc:90:32:2d:f3:a3:39:36:9c:a1:aa:1e:
                    99:94:0e:a2:49:d3:f9:6f:37:74:08:86:47:cc:f4:
                    d3:70:37:d7:d0:27:c5:b7:d5:6e:87:79:08:4e:d8:
                    f5:7a:ba:9f:c3:ad:30:c3:64:6a:a3:8f:e8:94:02:
                    44:2c:9e:4a:b2:ff:5a:76:6a:d5:7d:30:43:ca:07:
                    fb:a2:46:c1:20:f9:2c:61:d6:94:42:6b:7b:dd:5c:
                    2b:06:90:98:33:bf:17:a3:07:09:89:06:a4:2b:98:
                    7b:60:f0:df:ba:0e:9b:1e:77:34:cc:63:72:7f:8e:
                    dd:ee:6b:99:a1:67:04:a3:8e:6b:51:2c:fc:53:3a:
                    2a:16:9f:46:af:d5:7f:fe:30:6b:b6:90:dd:7b:d1:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8B:95:86:0F:FD:A0:4D:BC:BE:B3:26:26:55:74:25:4E:15:28:7D
            X509v3 Authority Key Identifier:
                keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6d:61:fb:38:63:09:91:b7:d0:b9:70:ac:c2:5e:24:5d:91:
         9c:02:a6:ca:c6:78:09:b1:52:84:a0:46:db:a3:63:24:a6:bd:
         c4:6e:fb:80:37:69:f2:aa:cb:ac:4e:55:ac:cc:0a:34:a9:4f:
         5a:52:0e:fd:e6:cd:74:65:9a:87:7c:a8:c9:32:e1:10:b0:87:
         e9:55:0b:f6:01:f8:b6:f5:e7:aa:fc:74:90:70:04:2c:ff:07:
         67:5f:c0:68:f5:b1:d0:25:86:62:f6:f7:b9:45:29:a7:3e:f3:
         60:85:53:b1:72:48:4f:41:c6:77:25:f9:cb:6f:92:28:14:4b:
         04:cf:f7:a5:f2:b5:26:23:13:a4:98:c0:c1:21:78:e3:b9:ad:
         ae:73:81:a6:2d:07:c2:8a:ab:2d:cc:5d:56:f5:b3:dd:f7:ac:
         16:39:51:4f:5b:bf:2b:ca:ca:e7:01:08:d3:44:7b:14:d3:5e:
         54:48:ad:1a:f4:5c:e5:ea:a6:af:1f:be:50:43:ca:ee:3c:35:
         3a:07:5a:31:3f:f5:b2:c8:9c:b0:18:76:f9:61:a5:85:d0:45:
         05:e0:be:89:36:89:ef:d6:43:de:cf:15:4f:cc:77:88:f3:ef:
         eb:42:2b:a1:77:f4:82:ca:77:72:3d:d9:51:3e:90:b4:67:a2:
         15:c6:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:34 2026 by rpki-client