Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          dX13GVfxmuRrtu8gqLCi/ufHLTugwICCBBMfUGxiqbM=
Subject key identifier:   03:EE:E7:C5:D5:22:7B:23:F1:5D:50:8B:A9:C2:A9:F8:16:61:73:96
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019E1EDA0FBDEC2AFD5994E281347D2C939D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          191C
Signing time:             Wed 13 May 2026 01:01:07 +0000
Manifest this update:     Wed 13 May 2026 01:01:07 +0000
Manifest next update:     Thu 14 May 2026 01:01:07 +0000
Files and hashes:         1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
                          2: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
                          3: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: X9NL50MzhG0R2qD8zGsESR562udglRXS938v2GdLuwA=)
                          4: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
                          5: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
                          6: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
                          7: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
                          8: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
                          9: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:0f:bd:ec:2a:fd:59:94:e2:81:34:7d:2c:93:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: May 13 01:01:07 2026 GMT
            Not After : May 14 01:01:07 2026 GMT
        Subject: CN=03eee7c5d5227b23f15d508ba9c2a9f816617396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:13:7d:e6:40:cc:e2:28:30:53:66:8f:31:
                    c4:35:20:87:34:5e:92:7b:c9:91:af:b3:96:ce:aa:
                    50:af:fd:f8:97:34:c7:a4:cc:49:9a:7c:2b:db:f3:
                    bf:47:5d:fe:0d:1d:db:85:29:e7:72:cc:cd:e4:38:
                    8d:fc:a2:32:3f:eb:73:57:ae:c0:28:ca:d7:0a:7e:
                    41:f4:1d:f5:ad:35:13:ef:3c:4e:48:b1:ab:20:57:
                    1e:b5:14:0d:17:c5:71:8d:46:3c:5e:db:27:c5:70:
                    98:c6:a5:a9:f6:0d:00:f2:c0:18:08:fe:85:c3:38:
                    4a:3b:93:f3:3a:dc:ec:a2:fe:d7:62:2d:c6:44:93:
                    72:69:42:fa:ae:ab:dd:8b:0d:c8:dd:b6:15:48:6f:
                    6a:20:c6:5f:55:3f:7a:8d:ba:8b:b3:bf:3d:b3:0c:
                    44:71:5a:c2:06:a0:7a:c5:c9:80:ff:37:36:e8:26:
                    58:7f:e8:93:f8:53:37:5c:2b:16:db:f9:ea:e3:22:
                    bc:31:01:47:d1:02:51:49:2f:fd:93:0a:f8:ce:cf:
                    db:12:ec:75:2c:3c:46:fa:a1:53:91:1c:e7:cf:41:
                    33:65:22:84:93:3f:1a:c0:38:7c:2b:de:6b:7a:05:
                    55:ae:a2:84:8d:b0:a2:f1:35:53:33:a3:f1:0a:28:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EE:E7:C5:D5:22:7B:23:F1:5D:50:8B:A9:C2:A9:F8:16:61:73:96
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:68:74:61:5a:38:a0:f5:2b:1f:72:84:d4:86:cd:6b:32:30:
         5a:50:45:f3:29:52:9b:9d:4b:f0:6c:1a:3d:62:07:e1:a0:5a:
         a7:66:69:26:4c:c4:48:cc:23:ca:7a:bd:9b:63:de:32:c1:32:
         ba:c8:6c:7f:33:5b:71:19:6e:bb:a5:8f:a3:ce:ff:0a:31:5f:
         1f:bb:28:d9:a0:df:d8:71:a5:2d:d6:4d:73:0d:38:ff:a6:9b:
         06:a4:c0:10:73:48:7d:1b:4b:bd:4f:ad:1d:3a:a6:bf:82:5f:
         e4:f7:55:d7:93:7b:e5:1b:25:c1:ef:ed:68:db:f6:be:ba:b8:
         29:57:c5:38:93:a4:4e:a2:b5:39:cf:73:93:b8:7e:fc:d9:38:
         61:40:66:56:33:12:38:81:e4:de:1f:02:f5:00:ce:93:98:b9:
         bf:f6:e7:74:12:8b:8a:ee:ee:dd:3f:88:8b:15:1d:06:0c:0f:
         1a:fe:34:48:c7:2e:cb:f5:53:cc:88:6f:9a:f4:ce:6f:fd:7a:
         eb:2e:70:ef:69:3b:87:71:6a:25:9e:69:cb:80:e3:e2:5c:96:
         c9:f9:03:c6:65:e0:55:0f:95:4c:54:c5:53:07:b4:fd:b5:67:
         c1:69:ee:02:a1:90:9c:51:fb:7f:eb:27:c9:fc:1f:6c:18:c1:
         d8:08:5f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2g+97Cr9WZTigTR9LJOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjYwNTEzMDEwMTA3WhcNMjYwNTE0MDEwMTA3WjAzMTEwLwYDVQQD
EygwM2VlZTdjNWQ1MjI3YjIzZjE1ZDUwOGJhOWMyYTlmODE2NjE3Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKcTfeZAzOIoMFNmjzHENSCHNF6S
e8mRr7OWzqpQr/34lzTHpMxJmnwr2/O/R13+DR3bhSnncszN5DiN/KIyP+tzV67A
KMrXCn5B9B31rTUT7zxOSLGrIFcetRQNF8VxjUY8XtsnxXCYxqWp9g0A8sAYCP6F
wzhKO5PzOtzsov7XYi3GRJNyaUL6rqvdiw3I3bYVSG9qIMZfVT96jbqLs789swxE
cVrCBqB6xcmA/zc26CZYf+iT+FM3XCsW2/nq4yK8MQFH0QJRSS/9kwr4zs/bEux1
LDxG+qFTkRznz0EzZSKEkz8awDh8K95regVVrqKEjbCi8TVTM6PxCigxCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPu58XVInsj8V1Qi6nCqfgWYXOWMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Wh0YVo4
oPUrH3KE1IbNazIwWlBF8ylSm51L8GwaPWIH4aBap2ZpJkzESMwjynq9m2PeMsEy
ushsfzNbcRluu6WPo87/CjFfH7so2aDf2HGlLdZNcw04/6abBqTAEHNIfRtLvU+t
HTqmv4Jf5PdV15N75Rslwe/taNv2vrq4KVfFOJOkTqK1Oc9zk7h+/Nk4YUBmVjMS
OIHk3h8C9QDOk5i5v/bndBKLiu7u3T+IixUdBgwPGv40SMcuy/VTzIhvmvTOb/16
6y5w72k7h3FqJZ5py4Dj4lyWyfkDxmXgVQ+VTFTFUwe0/bVnwWnuAqGQnFH7f+sn
yfwfbBjB2AhfQg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:40:59 2026 by rpki-client