Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          pypAszVzszwhAfhO8zb7zNBVVh7ly+kQ7cba78Qrjak=
Subject key identifier:   9C:C6:FD:88:21:F7:CA:DF:78:BC:49:6E:2A:E0:64:AB:2F:54:37:17
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       019E1D90A06B7234F09A22BA4A7C7388D049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 19:01:17 +0000
Manifest this update:     Tue 12 May 2026 19:01:17 +0000
Manifest next update:     Wed 13 May 2026 19:01:17 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: mNtenjCyzWlXGz3VrxhN6IpwmcWrP4GvKUjm8U1PPBA=)
                          2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a0:6b:72:34:f0:9a:22:ba:4a:7c:73:88:d0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: May 12 19:01:17 2026 GMT
            Not After : May 13 19:01:17 2026 GMT
        Subject: CN=9cc6fd8821f7cadf78bc496e2ae064ab2f543717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:05:1d:a0:48:34:71:c0:f1:19:df:02:01:
                    e6:4c:5b:80:21:a3:40:c2:a0:55:24:16:6d:43:83:
                    e2:f4:70:de:63:cc:df:bf:17:64:75:d3:50:2e:37:
                    51:35:d1:43:ed:e9:0a:1e:75:c2:1c:77:93:7f:0f:
                    4b:12:ba:54:ba:83:e8:fa:4b:71:bb:a6:2f:9b:14:
                    11:f5:6a:8c:89:ea:36:a7:75:eb:73:fc:61:73:26:
                    47:cb:2d:4c:28:aa:62:6d:db:ad:ad:04:5a:24:87:
                    31:3a:8a:d8:48:b5:10:18:af:f0:03:0e:2a:12:73:
                    73:99:7c:fc:c7:aa:f6:d8:cb:bf:9c:96:3a:8e:12:
                    54:72:8c:a8:48:fd:f8:01:20:30:62:4d:d2:4a:68:
                    f9:65:d6:93:f8:8d:f6:17:94:42:7a:94:1a:c2:c8:
                    a0:c1:e1:02:9f:f0:7d:f6:33:f0:95:c7:4d:f7:85:
                    ed:1a:3d:4d:75:b1:17:d2:b1:f7:b0:8a:11:05:02:
                    e2:bc:4c:6d:1f:32:e0:20:5d:4a:eb:1c:ff:d1:7d:
                    63:ce:fa:d7:06:0e:71:83:97:f7:9a:da:09:c0:0c:
                    49:38:53:ae:f7:46:61:83:bd:8e:44:e2:a4:2e:84:
                    03:76:a8:b1:7a:fe:c7:b6:66:f5:40:3a:93:92:4f:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C6:FD:88:21:F7:CA:DF:78:BC:49:6E:2A:E0:64:AB:2F:54:37:17
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e4:4f:ad:0f:cf:fc:0c:58:ae:20:a6:94:f0:dd:bf:f5:bf:
         c2:45:65:e0:6c:91:06:93:27:3a:75:2f:5a:25:56:61:a8:33:
         cc:68:8e:03:30:f8:70:fe:06:88:f6:f4:3f:ec:09:96:f5:b4:
         b1:fb:26:4a:b2:1f:10:e6:c8:3d:db:af:bd:86:03:bc:ad:08:
         ed:43:93:ee:35:60:65:9d:19:2c:fc:e3:1b:a1:17:c2:cf:fe:
         29:42:fe:37:ff:75:02:f6:27:97:d1:e1:46:fd:7f:35:c9:bb:
         c6:31:e3:da:18:3f:90:71:44:18:b5:fb:ae:e9:0b:92:bb:25:
         09:03:76:e7:98:97:0f:a0:0f:16:d2:11:f0:6b:bb:62:9e:d7:
         64:7f:22:d1:f3:d4:da:4c:11:28:c9:46:ac:93:16:62:d8:08:
         62:43:aa:94:f2:4f:ea:ce:54:47:db:a2:89:5c:06:dd:f8:91:
         7a:8e:5c:50:14:95:f3:15:4a:53:01:42:00:c4:97:54:65:2f:
         36:9a:34:25:f6:0f:f6:b0:55:57:1b:de:36:3d:00:1e:e4:3a:
         01:5e:34:3a:99:35:a8:33:75:06:8c:78:73:6c:2b:6f:86:d3:
         80:96:3d:d6:89:21:69:2c:71:82:5c:ab:65:b6:d2:f7:f0:75:
         83:2c:dd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:14 2026 by rpki-client