Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          D42ftbNXW35xvHQZ9PVzF/pcZxmCa351bdM4FpfwitE=
Subject key identifier:   FF:A7:88:CD:3E:44:FA:4C:94:EA:38:D5:0D:E1:34:7D:8D:FD:5B:51
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       019E1F10EF0B77097695C1D49F79C6641D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          186F
Signing time:             Wed 13 May 2026 02:01:03 +0000
Manifest this update:     Wed 13 May 2026 02:01:03 +0000
Manifest next update:     Thu 14 May 2026 02:01:03 +0000
Files and hashes:         1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: mZcKktmrDdG/V6n7/Rc0qSo8mhj0KhCo+41+IbXOZBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:ef:0b:77:09:76:95:c1:d4:9f:79:c6:64:1d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: May 13 02:01:03 2026 GMT
            Not After : May 14 02:01:03 2026 GMT
        Subject: CN=ffa788cd3e44fa4c94ea38d50de1347d8dfd5b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:b5:7f:24:c2:50:19:68:2c:dc:60:a5:2e:
                    78:4b:47:8c:a2:36:94:5e:f9:81:c6:0a:2b:fb:4a:
                    ed:7f:85:50:87:01:09:99:56:e7:89:84:19:55:4e:
                    38:7a:7e:ed:df:35:ad:3b:21:4f:a8:5c:58:f1:ef:
                    de:69:6e:1c:7d:2e:af:89:be:86:92:22:8d:2c:91:
                    c4:9a:ce:fb:6c:23:95:35:28:17:22:f8:6a:dd:48:
                    6c:a2:91:42:66:f4:07:fa:00:23:6f:28:f9:0d:d3:
                    ea:01:56:19:0a:58:73:9a:97:1c:21:47:c5:ab:fd:
                    06:34:08:58:01:4a:3b:d5:e1:e2:3d:60:45:c4:28:
                    c6:09:e5:0d:41:8a:03:bb:71:10:1e:bd:7f:2a:6d:
                    46:ad:8a:91:33:28:28:96:a0:d4:da:bc:36:2b:4e:
                    bf:b0:e9:b0:5d:04:9e:de:fd:61:d0:bc:2c:6a:18:
                    d4:66:fa:e6:d6:3c:02:5f:54:48:53:54:27:28:3d:
                    38:7f:76:81:75:ca:73:2b:12:cb:32:25:84:d3:34:
                    5e:0a:e1:a5:bc:79:ef:37:1f:95:83:3d:0b:99:2e:
                    09:a4:17:1c:ed:3d:bb:06:2b:a2:89:05:47:73:5c:
                    77:8e:b3:cb:6e:b4:28:18:f0:65:e5:bf:8c:19:a5:
                    6e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:88:CD:3E:44:FA:4C:94:EA:38:D5:0D:E1:34:7D:8D:FD:5B:51
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:28:08:f9:c2:88:8b:77:9f:2d:cb:7f:87:ce:5c:25:6b:40:
         85:eb:4d:26:e9:c5:30:8e:57:c6:78:23:28:11:34:97:e3:b1:
         28:24:c2:c2:13:23:5a:1b:66:1c:41:b9:21:68:ea:e0:f3:7f:
         15:24:b5:ee:32:cb:0e:e0:70:05:eb:8d:dc:bb:72:dc:7e:32:
         c8:d4:92:6d:76:ea:68:6f:c4:0c:d0:81:52:cc:95:f6:88:6f:
         6b:71:9b:76:bc:c2:cc:1a:7d:3e:05:d5:aa:d9:64:cd:cb:5f:
         53:a2:a1:1a:1d:7b:ab:f5:f8:7b:e0:3a:2b:53:f9:4d:68:4b:
         10:48:fa:f5:82:97:13:13:3f:fe:a6:b1:26:90:f2:7b:79:cf:
         d6:58:2b:04:6a:e7:75:0c:f0:84:08:53:f8:18:18:05:99:f1:
         7c:f4:1f:c2:21:c8:55:50:d8:92:4c:99:44:3b:3b:3f:a4:9d:
         49:66:13:29:e7:73:c1:34:8c:30:ff:de:8d:f5:c3:40:8d:68:
         bd:0b:10:f7:67:bf:77:bc:fa:28:77:dc:9b:05:3d:e1:49:d9:
         6b:3d:71:02:41:b8:42:e7:ba:43:53:9c:7a:3a:46:c4:3d:38:
         ef:08:ab:da:84:4f:3b:00:ca:0d:e5:0e:b9:8a:9d:d8:de:3f:
         00:7a:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:55 2026 by rpki-client