Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          sChQQRCiw8iyTl1jpgtrhrIBtV2O7XBojwb4GhYvyMA=
Subject key identifier:   BB:9E:CA:F4:8B:6C:C8:AE:56:44:B4:46:83:E6:62:26:04:A4:22:82
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       019E1ED9ABEBF5268A63502D4844D6432920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          18E6
Signing time:             Wed 13 May 2026 01:00:42 +0000
Manifest this update:     Wed 13 May 2026 01:00:42 +0000
Manifest next update:     Thu 14 May 2026 01:00:42 +0000
Files and hashes:         1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
                          2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: WHVVgaeJqTYX6wyfq315eoPGF12+xorXPZmjrSKSBm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ab:eb:f5:26:8a:63:50:2d:48:44:d6:43:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: May 13 01:00:42 2026 GMT
            Not After : May 14 01:00:42 2026 GMT
        Subject: CN=bb9ecaf48b6cc8ae5644b44683e6622604a42282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:b3:d7:9a:57:4d:90:8c:2c:53:9c:76:ac:
                    25:c6:28:3e:5e:c1:31:f3:86:f6:c3:9e:ab:1b:dd:
                    e7:68:b4:e0:9f:84:2c:b0:d1:07:33:21:ba:b6:c0:
                    a9:9b:de:28:0a:d2:c2:61:2c:7c:2e:81:95:2a:d2:
                    a8:c8:bf:72:5b:c8:cf:13:a7:0a:98:23:6d:92:ae:
                    f5:33:61:00:e8:2e:b9:56:31:0b:75:f3:26:18:42:
                    0f:59:35:f6:a5:57:36:1e:a2:fb:6a:52:07:b3:ec:
                    59:19:de:d8:f0:ba:7e:bd:0b:44:11:d7:03:cf:d3:
                    43:0c:4d:81:ab:2e:7b:50:46:5e:66:a9:3d:34:ea:
                    9e:1b:bc:b2:c2:90:00:b6:12:ad:2d:d2:1b:f7:66:
                    88:6f:04:eb:59:0f:52:0c:58:8c:e2:86:99:78:44:
                    87:64:2d:e4:fd:44:a8:00:4d:21:20:29:a0:f0:af:
                    02:c1:65:aa:09:96:c3:11:8a:cb:0f:1e:f3:21:7e:
                    ad:7f:73:a3:1c:a5:ff:86:5e:eb:7b:b6:8f:bb:fc:
                    a2:0b:12:b4:e2:14:ad:0e:4d:dc:90:44:ad:38:7b:
                    0d:17:03:ab:26:4b:16:ff:0b:0d:18:bd:52:51:c2:
                    0d:83:28:05:cf:e4:89:72:34:7f:e8:6a:5a:62:e0:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9E:CA:F4:8B:6C:C8:AE:56:44:B4:46:83:E6:62:26:04:A4:22:82
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e9:10:58:c8:51:5f:95:d0:ab:4c:9c:aa:d3:05:8b:90:93:
         6c:a0:ee:4e:14:44:db:15:f4:b8:02:54:11:cb:d3:c4:7f:70:
         79:0d:76:7a:06:3b:cd:34:21:0b:20:d9:4c:47:b3:e9:64:ad:
         b1:ea:19:6b:bc:3e:95:e7:86:16:bc:0c:5f:17:fb:52:5e:05:
         1b:e3:2d:18:21:f0:28:d6:01:99:7b:d1:3b:fc:8b:e0:99:0a:
         48:7e:6e:00:25:23:0f:30:4c:8a:df:7f:0b:25:51:cd:34:00:
         99:8b:c8:84:3e:cc:72:0e:10:05:2a:a3:0a:a1:3e:67:6c:3e:
         b3:8f:51:12:36:07:2f:bd:ad:e4:9a:a7:4e:ef:ce:0b:37:ef:
         02:64:db:83:6e:2c:60:5e:1e:60:80:50:e3:b0:7b:72:53:3b:
         55:c7:41:d7:4b:36:6b:b5:12:4d:5d:a3:fd:c6:86:d3:73:c8:
         b7:19:ba:54:65:57:d1:44:62:8f:14:10:fd:88:ce:7d:66:84:
         2b:a5:97:72:c4:7d:26:3d:e2:16:2a:bd:1f:1f:0e:fe:d3:1b:
         fe:95:3e:ae:dc:22:cc:1b:d3:8d:17:28:a5:3d:ba:a1:32:7b:
         92:00:9f:ab:43:9b:41:b8:85:19:79:74:b0:01:17:1c:74:a9:
         3a:d1:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:21 2026 by rpki-client