Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          fcIpPjFAFDm3jnei94yGKG4aOj0mqXsH+cxro/8kRvE=
Subject key identifier:   03:8D:2C:6C:F4:89:6D:E0:A7:DD:BF:C6:88:C1:37:5E:E1:DB:9E:88
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       019E1FECEFCCA8C143FAC0E05E65956684AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 06:01:21 +0000
Manifest this update:     Wed 13 May 2026 06:01:21 +0000
Manifest next update:     Thu 14 May 2026 06:01:21 +0000
Files and hashes:         1: XxtWaMM5sBfFC2sC8FpjDL8Ge7Y.roa (hash: HWIQrBtT9vbpCee5Xkd6bp75O2LIMTf2r4JmS0NQHJ4=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: B0bQ+wUv2I/xpTYExcDJiLfy+8TdhuSl8mV30otIuk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:ef:cc:a8:c1:43:fa:c0:e0:5e:65:95:66:84:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: May 13 06:01:21 2026 GMT
            Not After : May 14 06:01:21 2026 GMT
        Subject: CN=038d2c6cf4896de0a7ddbfc688c1375ee1db9e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:ff:e7:e8:46:9c:f5:b5:6d:9e:2f:2f:52:
                    52:9a:6c:78:e3:a5:fe:a9:a6:51:5b:68:68:40:f1:
                    d1:a0:02:00:05:92:7a:7e:48:fa:d7:da:54:42:51:
                    35:22:14:1a:57:85:c2:2f:f6:1a:2c:36:4e:4b:f2:
                    17:d9:0b:e0:7c:65:84:d7:e5:39:62:f7:a4:f0:6e:
                    f5:43:c8:72:c6:f7:e9:b5:0f:04:9c:99:7e:2f:17:
                    05:ed:30:35:8d:e9:9e:52:e8:cf:05:03:e5:c0:a0:
                    4a:1d:35:8e:52:9e:7c:a0:1a:c3:99:30:4c:8f:75:
                    07:51:60:37:61:32:4c:75:7a:67:42:af:46:d7:78:
                    7f:8d:fa:08:f3:38:a2:1d:05:d8:b8:32:14:5a:1c:
                    b4:fe:f9:a9:81:eb:88:2b:c4:4f:b2:2c:12:94:e4:
                    d8:4a:c0:32:18:23:e1:97:0a:d7:14:a1:8c:ee:e5:
                    6c:6a:81:d9:92:8b:e9:7f:50:19:d7:1d:26:cb:b1:
                    38:d4:bd:e8:42:2b:ab:38:b6:40:9a:12:fb:bc:0e:
                    8c:4a:63:7f:4e:17:21:a1:00:f5:b4:bd:66:1e:a3:
                    e9:f3:a0:34:20:10:5c:22:4e:39:8a:30:ee:f1:f0:
                    6c:ee:4d:5a:60:1f:31:93:5c:32:c2:87:8b:c6:4b:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:2C:6C:F4:89:6D:E0:A7:DD:BF:C6:88:C1:37:5E:E1:DB:9E:88
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5c:9a:20:8b:c4:40:db:cb:0a:50:55:37:4b:0c:46:8f:23:
         d4:39:77:65:7a:0b:61:74:56:4a:81:f9:69:0a:b4:30:0d:d3:
         48:34:f9:5b:82:ac:fe:75:c4:7b:85:f0:c4:b4:29:c5:69:43:
         cf:79:f3:b6:86:7e:63:d8:93:79:98:a3:ea:0e:4e:ea:12:b4:
         9e:3e:ea:0f:2c:42:d9:51:59:fb:86:d1:db:23:2e:89:ec:f9:
         42:07:f1:38:88:c0:8a:51:02:24:f7:d0:30:75:8c:4c:8f:4d:
         1c:f9:f5:48:a0:dc:20:dc:31:fe:58:12:b5:9c:a2:7e:9e:34:
         7a:cd:5d:6d:46:b9:43:7b:aa:55:3e:2f:fd:1d:8e:1e:07:15:
         29:f1:31:57:4e:01:84:35:70:a9:15:b3:7d:8b:26:cc:be:a8:
         23:09:7e:98:ca:41:02:cb:56:d1:e6:a9:9f:07:49:61:9e:a6:
         60:71:b4:91:0b:19:2e:98:ca:1d:a4:d4:e9:11:71:7e:54:5f:
         95:78:6c:1c:bc:99:a3:04:eb:f4:a2:15:1c:19:1a:9b:db:fd:
         84:7b:1b:2f:32:17:01:7a:f9:2c:df:e6:96:23:cd:38:a3:88:
         5e:a0:a2:12:0f:bb:44:16:d8:ad:89:42:0b:d2:8b:87:7d:c7:
         f0:15:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:05:05 2026 by rpki-client