Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
File:                     6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json)
Hash identifier:          QYBMzL4inX3ZZ2PUBQwrTJuu3rRr6vUni6Oo3907340=
Subject key identifier:   28:6B:D8:90:FF:EE:A2:BB:AA:F6:F7:8A:90:6B:DA:59:33:75:74:98
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Certificate issuer:       /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial:       019E1C10173C4C8FF526AA8811F3FDEFEFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 12:01:16 +0000
Manifest this update:     Tue 12 May 2026 12:01:16 +0000
Manifest next update:     Wed 13 May 2026 12:01:16 +0000
Files and hashes:         1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: 01ePCw0wi9CoxBNA5xVWTa9hTDgu817lXou9F4J87fI=)
                          2: Do7LVZlKxOpFLhQk4utS2y9-GH0.roa (hash: yUU9KHVXsH2kllJ9B9AdvusBySi+NzlMxs4jnEA4zmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:17:3c:4c:8f:f5:26:aa:88:11:f3:fd:ef:ef:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
        Validity
            Not Before: May 12 12:01:16 2026 GMT
            Not After : May 13 12:01:16 2026 GMT
        Subject: CN=286bd890ffeea2bbaaf6f78a906bda5933757498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:6f:c2:4d:eb:5a:c8:b8:53:c3:a5:9e:79:
                    fb:0d:8d:94:34:c7:32:9b:30:8e:8a:5a:c5:be:4e:
                    79:4e:bb:dc:9a:b3:b9:ef:25:55:dd:a0:05:a6:6e:
                    78:83:88:94:a4:80:c3:92:39:3f:ce:38:09:93:40:
                    c2:e2:5d:a0:b9:f4:3d:e9:0e:09:8f:2d:35:b7:5f:
                    29:f0:0b:07:08:00:91:af:c8:2c:85:5c:61:7b:0e:
                    db:63:77:a3:24:24:a5:1f:b8:1a:bf:14:4d:f6:62:
                    5b:32:42:bf:8f:54:94:b7:79:5f:a0:f1:6c:f5:4d:
                    3c:ea:80:90:b8:54:68:dc:fa:d3:5b:c3:e1:c0:c1:
                    30:b7:27:8d:e7:7a:e2:50:9c:72:da:ac:e0:3e:38:
                    1e:bc:d7:cc:23:96:05:85:2e:0e:0a:dd:2a:af:7f:
                    d8:62:6c:48:ed:12:48:07:07:af:0c:b1:25:2a:38:
                    03:74:35:eb:8e:24:58:17:53:0b:4c:bf:5b:45:d2:
                    99:97:21:81:33:2c:9e:1d:9c:e0:b2:5b:5b:b6:b0:
                    c1:d3:e9:c7:68:7c:be:e1:6e:7a:6e:d0:ed:81:86:
                    ad:2c:be:41:6e:49:84:15:5f:e6:d9:bf:7d:79:ad:
                    8a:0b:63:a2:1e:c5:ab:fd:6d:79:15:fc:ff:88:46:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:D8:90:FF:EE:A2:BB:AA:F6:F7:8A:90:6B:DA:59:33:75:74:98
            X509v3 Authority Key Identifier:
                keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:71:bc:df:5a:68:58:d8:9b:90:5a:34:9c:5e:86:26:b6:40:
         e7:76:4d:ec:ec:9c:00:20:4d:32:58:bc:41:68:4e:60:dd:80:
         f6:62:19:49:cc:dc:a9:e1:0a:b9:19:32:1a:34:66:3d:e5:b9:
         11:97:34:09:3d:7d:d6:77:b2:2b:6a:f7:a0:62:11:dc:ed:5c:
         7d:5c:86:f4:82:10:15:03:e2:a8:ca:c7:d8:5a:76:c8:a5:09:
         56:a3:f8:c2:c0:7b:5d:2d:d7:24:a1:1c:89:04:18:bc:b1:02:
         76:88:2b:bc:a6:75:49:91:be:4e:7e:5f:4d:b3:58:34:29:68:
         98:f8:8b:2c:27:87:66:27:7b:31:0d:ae:a4:92:55:8f:63:37:
         93:19:a4:c7:54:b5:ba:26:9f:e0:b6:04:82:e3:19:a2:83:91:
         ab:4a:b8:90:9a:98:35:56:3d:fd:a1:5e:7f:83:58:81:3a:0c:
         5d:2f:3f:aa:1e:15:87:be:c2:aa:dd:e7:0f:da:60:6a:ab:d9:
         cc:08:5d:b5:71:25:ea:d8:79:6e:09:5f:3f:21:b4:c3:f1:d0:
         7d:d1:03:d2:96:c7:f9:d2:64:7a:2d:9c:eb:fe:fb:14:3d:ac:
         b1:fa:93:eb:a5:86:e7:7a:ea:13:4a:a1:04:c1:a1:ba:e9:7b:
         ce:11:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:39 2026 by rpki-client