Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          egTh35gzCY1jnOhWyM1LRjmnacfJklDhyTfv+S4hRqg=
Subject key identifier:   D8:0C:1E:9F:4F:4B:B9:4F:FB:85:A7:59:CD:D2:7E:51:34:D3:2E:21
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       019E1D5911CA8D75ABFCE46219E5314C8DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          1599
Signing time:             Tue 12 May 2026 18:00:36 +0000
Manifest this update:     Tue 12 May 2026 18:00:36 +0000
Manifest next update:     Wed 13 May 2026 18:00:36 +0000
Files and hashes:         1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: 9s+40WxRpPYas6E9n/jhV3+KGODU/yAmBEuAUkxqJxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:11:ca:8d:75:ab:fc:e4:62:19:e5:31:4c:8d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: May 12 18:00:36 2026 GMT
            Not After : May 13 18:00:36 2026 GMT
        Subject: CN=d80c1e9f4f4bb94ffb85a759cdd27e5134d32e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:64:0e:17:b8:28:82:5d:1a:74:6a:2f:4c:
                    6f:fe:01:f9:c2:92:46:a4:00:8f:f5:07:de:0b:0a:
                    ca:d7:33:2f:21:c9:7a:06:b8:b7:65:28:d7:b1:21:
                    cf:ae:ee:cf:34:be:a7:1f:3d:f4:23:36:ce:77:21:
                    d2:a4:54:a8:55:7b:8b:5b:41:a0:60:b2:bb:1a:ad:
                    4a:c4:c5:36:f4:7a:34:52:f9:ae:88:e4:15:d4:07:
                    e0:cd:02:03:8e:9d:8e:09:d2:3a:bb:fb:91:02:d4:
                    19:e8:fb:11:c0:fb:3e:c0:58:9f:2f:19:30:ad:48:
                    d7:a5:6c:1d:6a:46:29:b4:96:44:40:be:07:9c:73:
                    2f:83:2e:6b:77:e0:49:fb:8b:4e:33:96:49:56:ad:
                    a6:27:0f:07:16:f0:fe:2d:2a:9f:04:85:62:a5:eb:
                    63:8e:8c:a6:bf:73:36:99:e5:4e:4a:62:2f:85:d5:
                    aa:8d:30:96:eb:f6:ee:a8:a4:06:77:56:5b:72:3a:
                    d1:83:50:d9:fb:6a:82:a2:5f:84:e8:40:67:bd:af:
                    79:8a:5a:f9:31:31:3e:f1:45:25:ca:99:78:74:dd:
                    27:84:7b:c1:c3:96:2b:22:15:70:22:e9:d0:5c:f1:
                    5f:b6:12:68:a5:80:d1:4b:98:71:bf:8c:ea:88:dd:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0C:1E:9F:4F:4B:B9:4F:FB:85:A7:59:CD:D2:7E:51:34:D3:2E:21
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:26:b1:0d:f0:81:45:2e:84:7e:f6:8a:c7:92:41:e2:1a:
         a2:46:ea:d6:49:09:cc:5c:d0:1c:5e:ec:46:47:01:ea:11:06:
         12:0e:d4:1d:1b:2c:fc:f9:a5:0d:f7:1f:d0:8f:6b:0e:97:9d:
         c9:dc:33:ce:36:a8:c5:b1:fb:b3:9b:9c:a0:c4:23:49:bd:eb:
         4a:57:31:3a:d6:a5:56:28:2b:60:13:01:c6:50:b2:56:e5:3f:
         1d:63:b0:62:10:0e:a0:11:db:ce:2c:2b:d3:a8:41:28:b7:47:
         21:32:30:ca:f2:ba:aa:f8:21:d8:b6:cf:37:da:a8:46:56:7f:
         6d:d5:f1:51:75:cc:75:72:b0:7e:be:6d:98:40:49:9b:35:f8:
         c9:05:2b:5c:00:45:fc:42:46:81:75:bd:28:fe:5e:3a:88:47:
         93:8c:9a:2a:8f:63:6c:74:fb:c5:3b:33:5c:6e:ed:e0:82:8f:
         10:ae:5a:f1:c0:1e:a9:e2:14:a9:c1:c4:cb:57:8d:04:b2:43:
         d2:b7:f1:4c:71:fe:43:77:81:65:82:4f:97:2e:7b:86:5a:14:
         2c:9b:df:f8:2f:2d:85:ac:7b:6a:4e:2a:3f:15:f6:4d:99:97:
         b8:62:70:ba:d5:a6:a6:51:26:c3:6f:9e:9d:d1:38:08:04:e6:
         80:0d:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:06 2026 by rpki-client