Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          VEiVv9PSykDaipZRUPtVrKN//Qlre5k8VU8/ME6jAds=
Subject key identifier:   C3:63:D1:B7:67:B8:10:E8:14:7C:72:D6:4D:75:B6:A3:2D:A9:43:8B
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       019E1CEBCA981CFBF3DE7E484CB04E282B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          0A1F
Signing time:             Tue 12 May 2026 16:01:15 +0000
Manifest this update:     Tue 12 May 2026 16:01:15 +0000
Manifest next update:     Wed 13 May 2026 16:01:15 +0000
Files and hashes:         1: 3lrznUDu_RYJXoCA6T2-RqC6f2U.roa (hash: hPVXT+slJzISzm2tkyQwcR1eVSvzD3ViRToSxorCndY=)
                          2: C_5yyZCFvKCe1q25gF_5oZ_pygY.roa (hash: blUVsXaM11h0aXpR0/ZhyzARymiUeJDD6sZq8PuA4SY=)
                          3: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: lwf5QGa7B8PZ4uxpjo2tBy+E732Lbsk2rg1qN6TuFcI=)
                          4: U7dOPr8aIxZqqFvoN6CicfjLnZI.roa (hash: va8TN3ROTz1PexP26HjmTHBuqhoh3cPlg+O3J7QZ94E=)
                          5: qoYEAqhri4bUdYVpI1skjqF8iFo.roa (hash: XRgJrR2oLoLBzNI7/ZXQmYkUAt4y3ZosqwuZaOVv078=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ca:98:1c:fb:f3:de:7e:48:4c:b0:4e:28:2b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: May 12 16:01:15 2026 GMT
            Not After : May 13 16:01:15 2026 GMT
        Subject: CN=c363d1b767b810e8147c72d64d75b6a32da9438b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:f2:ab:2c:71:cb:24:5d:e4:af:fc:ab:14:
                    c3:67:65:60:b4:9b:7a:92:10:99:3f:68:92:72:48:
                    13:b6:0e:c0:e1:c2:87:5c:da:1e:dc:b9:2d:a0:83:
                    65:23:a0:59:87:75:17:01:57:80:18:78:c6:74:54:
                    c4:87:71:93:2c:44:e4:03:26:49:13:eb:d8:bd:eb:
                    0b:df:75:af:27:6e:73:a5:77:87:90:d3:ae:7d:e9:
                    1e:1b:c9:72:ff:c6:49:fe:93:9b:54:fb:72:5c:14:
                    90:fa:55:65:db:cb:6b:32:d5:9e:36:68:5c:ee:42:
                    45:cd:91:c2:5c:9d:4e:86:7a:7a:af:11:c9:d8:d4:
                    d4:10:de:77:b9:f9:24:ab:5a:09:94:9e:a0:e5:f1:
                    de:39:1d:f3:a4:1e:29:4b:d2:da:a4:6f:09:02:1e:
                    2f:fd:11:ca:f9:e5:ed:f7:be:23:67:cb:67:2f:5b:
                    ef:6f:16:33:f6:1c:2b:4a:3d:33:b7:68:87:52:03:
                    cc:3a:ee:9f:dc:3c:36:43:d7:44:98:fc:56:fc:96:
                    49:ae:66:77:e2:67:e8:ee:78:6b:d8:c9:ef:a8:09:
                    8b:06:c3:a6:f9:a3:57:54:d6:39:22:a7:d8:24:67:
                    fb:a7:55:c6:82:b0:f9:5e:c6:01:1f:82:a5:14:9d:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:63:D1:B7:67:B8:10:E8:14:7C:72:D6:4D:75:B6:A3:2D:A9:43:8B
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:70:15:95:ea:5b:70:8c:1f:69:cd:f7:4c:ce:13:e4:6e:f8:
         c2:a4:24:29:27:c3:c5:a9:88:46:0d:58:5f:0b:7e:c2:fe:a2:
         42:3c:60:57:ba:b5:49:4d:93:58:54:0e:8a:d2:c4:ef:90:f6:
         19:1a:c8:96:00:19:2a:12:35:fc:25:2d:32:e1:88:62:e8:8a:
         bc:75:c7:12:11:6d:5b:95:1b:0f:76:73:f0:40:5c:c9:12:09:
         37:63:e5:7e:17:c6:61:fd:2e:15:a7:bd:5b:20:6f:4d:af:b1:
         8d:7a:e2:3b:e1:2b:74:53:f6:2c:eb:11:1d:ac:9b:ad:84:6e:
         f1:2b:15:a2:13:e0:9c:44:8c:df:a1:fb:08:23:11:47:6b:42:
         84:5f:e1:86:ba:9e:00:c7:41:b6:99:f3:e9:ea:f0:31:b7:03:
         64:b5:bc:39:d1:31:51:d2:b3:8e:83:84:2b:1b:d6:fd:d6:76:
         e5:57:44:cb:25:1b:b0:d7:ad:8b:ce:e4:ef:b7:d9:6a:c7:c9:
         c0:cc:89:dd:97:fd:78:74:35:73:f6:d7:b4:45:23:39:ab:60:
         3d:77:48:82:d1:37:70:0a:b2:6b:c3:11:77:e1:5a:c0:73:f9:
         25:9a:e5:d4:df:69:37:a6:0e:38:a7:2f:9b:d1:65:e0:ca:5a:
         54:82:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:08 2026 by rpki-client