Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          YVB239DAWOV6jHc2+8LfvjgWmgK/ZsQeKLpmrmPHhUI=
Subject key identifier:   6D:B7:B4:D4:E6:5C:CC:39:CA:49:27:64:C3:61:0A:2C:99:B1:37:33
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       019E1C7DBE567C7116C3AE9268083A1153FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          1897
Signing time:             Tue 12 May 2026 14:01:03 +0000
Manifest this update:     Tue 12 May 2026 14:01:03 +0000
Manifest next update:     Wed 13 May 2026 14:01:03 +0000
Files and hashes:         1: fePebiytxTMuGPH6fSC5E4YL5wc.roa (hash: yXbEU3IXKyJOB9RtZy0YOmQELScqMwS4Y+CH/uELRY4=)
                          2: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: wpKJQb+HlgvOhkBqJyffrFgEXb6uB++M5wRA6xIB3/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:be:56:7c:71:16:c3:ae:92:68:08:3a:11:53:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: May 12 14:01:03 2026 GMT
            Not After : May 13 14:01:03 2026 GMT
        Subject: CN=6db7b4d4e65ccc39ca492764c3610a2c99b13733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:a2:8d:ff:7c:b2:0e:fa:7e:94:e3:44:9a:
                    69:c5:20:28:20:20:14:e6:91:a0:dd:91:76:c7:12:
                    a5:ab:52:19:52:9c:db:f7:92:3b:fd:31:75:7d:1f:
                    7b:80:69:eb:56:97:12:e8:86:da:ac:81:01:1a:33:
                    f0:f8:ad:c6:98:72:29:9f:77:27:9c:ad:0d:27:3a:
                    20:f6:2d:97:8f:b0:2f:41:74:ac:a2:a2:93:d5:b0:
                    91:41:21:a0:d5:e0:db:72:60:df:2b:55:ba:a1:6e:
                    d6:4a:ba:d7:4a:fa:da:a8:26:3d:1d:21:57:9f:72:
                    6b:c5:20:1d:1d:8a:17:00:5d:cf:33:a2:4b:f4:18:
                    8f:8e:9a:d9:80:ce:b4:18:14:cb:37:9b:54:a1:af:
                    6b:9c:7a:ce:47:b9:14:d4:bb:fc:8c:79:96:df:d0:
                    6e:ac:fe:20:8e:22:67:f2:e0:32:60:17:ba:34:c1:
                    84:a9:ba:2b:57:00:c3:6d:9a:a9:05:f1:82:34:ce:
                    5b:cd:3c:ba:7a:a3:a0:c8:cc:80:d7:d4:cf:eb:1f:
                    ed:21:36:78:24:60:17:0c:1b:e0:0b:f6:ae:17:dc:
                    f6:d5:80:c9:b7:4f:8f:5d:eb:93:1e:08:b0:89:09:
                    70:6c:f0:a5:bc:55:1f:b9:69:e2:9d:cf:36:78:09:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:B4:D4:E6:5C:CC:39:CA:49:27:64:C3:61:0A:2C:99:B1:37:33
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:21:ee:43:14:8b:12:47:cf:31:60:d3:84:cb:16:2e:58:
         30:5b:be:5c:03:b4:9d:7f:05:7c:3f:26:f0:92:ff:99:70:1a:
         ba:93:7d:f5:71:f0:73:2b:9a:17:66:c1:15:d8:a0:02:21:6c:
         1d:21:2e:e3:a4:cd:5a:e7:66:56:31:dd:8c:64:a8:06:19:fa:
         c8:e7:ae:ea:57:07:e9:6c:4a:07:57:b2:e6:17:6e:71:97:86:
         6b:3a:37:d6:16:b4:98:c6:bf:88:78:b5:dc:ac:54:6d:53:f6:
         68:48:b1:d7:40:30:f4:f5:7b:ca:a1:1a:db:49:9a:91:67:17:
         45:a3:6b:71:3b:a4:d0:7b:3b:c5:d5:df:b9:c7:2c:12:8a:3d:
         71:79:d9:c5:a0:3c:60:e7:95:44:f4:39:f6:d5:7b:1b:4f:05:
         41:38:8c:8a:ff:ab:e7:3d:a3:71:68:0f:a4:ed:44:dc:0b:2c:
         2b:44:76:7b:d4:de:8b:b8:9a:25:a8:62:a9:ea:c6:b5:3d:36:
         e1:73:99:fd:63:22:12:b8:85:c8:10:af:98:ae:14:09:7a:d8:
         6c:00:db:8c:66:35:1b:29:95:09:b2:2c:a9:85:c8:b6:5b:1c:
         14:bc:8a:33:76:5f:b3:60:3d:b5:f7:e3:50:3a:f3:f1:45:e1:
         86:98:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:11 2026 by rpki-client