Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          CGpqvYH9KNKK8x5s69kes1luQ7CzSrvyGOoxKqrk/+E=
Subject key identifier:   20:81:E6:B4:B0:EE:19:66:0F:1E:58:76:5B:12:58:CE:D9:84:D6:15
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       019E1E6C82763CE7174DE380E04E2E6882EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          103F
Signing time:             Tue 12 May 2026 23:01:28 +0000
Manifest this update:     Tue 12 May 2026 23:01:28 +0000
Manifest next update:     Wed 13 May 2026 23:01:28 +0000
Files and hashes:         1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: tCg7I15amQopitqSB2GoNux9u0T9PJaitVMChKlr4WE=)
                          2: tzRdx4BT786qNcQZeRMNg_SKiRI.roa (hash: T/qoi141JqlXpa6Bw1J2VzP/DVBAdA7o+aP6DP3caPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:82:76:3c:e7:17:4d:e3:80:e0:4e:2e:68:82:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: May 12 23:01:28 2026 GMT
            Not After : May 13 23:01:28 2026 GMT
        Subject: CN=2081e6b4b0ee19660f1e58765b1258ced984d615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:50:46:49:94:ae:d2:e3:f3:d4:c1:4d:7e:
                    23:d2:6a:df:8e:ae:69:80:7a:41:65:67:34:38:0f:
                    8e:fd:0d:bb:0a:38:17:87:88:93:8d:1a:ff:53:82:
                    7a:9d:1f:ef:3a:4a:71:90:31:b1:b8:c7:f0:94:ea:
                    68:c4:84:e6:b2:04:bf:05:b7:8a:60:2f:ce:c5:24:
                    12:0a:af:66:c3:c5:6a:28:7b:9e:c6:be:98:c0:38:
                    d5:48:36:81:32:4f:26:44:cb:44:a2:5b:d6:ac:91:
                    80:1e:12:3a:05:b9:94:e6:81:67:56:f3:48:1e:07:
                    0e:37:49:de:84:f6:e9:36:43:91:b3:8f:ff:8f:fd:
                    bc:c2:1b:66:f4:91:55:af:c5:b8:72:bb:b0:cc:b0:
                    04:08:60:cf:57:9e:db:fd:5f:5f:94:46:ef:46:3e:
                    20:43:53:08:f5:de:7f:6d:cf:61:b4:d6:c3:99:52:
                    de:34:4d:c7:4f:94:1d:60:f2:a9:d6:0d:77:bd:78:
                    ad:7b:69:69:8f:b6:89:97:d4:39:af:72:28:ff:26:
                    78:c0:b9:f7:a2:dd:70:37:fc:4b:0e:3a:3f:81:99:
                    56:29:21:87:99:ea:20:d0:06:10:a8:c3:e3:f0:3c:
                    3c:3a:65:ce:fb:a8:60:de:76:dc:11:ab:ce:c9:f7:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:E6:B4:B0:EE:19:66:0F:1E:58:76:5B:12:58:CE:D9:84:D6:15
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:5d:9f:d0:e7:d5:29:14:15:aa:ed:da:8a:1a:44:72:b2:47:
         55:cc:30:d6:cb:0a:82:d3:89:fb:b5:cc:23:1e:04:c8:42:6d:
         9b:54:71:bf:fe:56:68:98:d0:c3:8e:2c:d0:bb:90:54:47:0a:
         74:fc:96:39:0b:89:33:c3:6e:78:41:e2:a2:25:e1:ed:30:b7:
         87:77:fe:b1:be:8b:75:30:38:f5:95:1e:79:0b:13:69:45:9a:
         2b:68:71:dd:5f:bc:9f:0d:41:1e:0a:d0:c1:85:d5:77:75:1c:
         84:f5:cf:8f:fc:c0:e5:37:53:2b:11:61:7c:c3:ee:4d:41:f3:
         4b:d2:b0:46:41:c5:8d:42:93:42:4e:81:66:63:f3:04:87:04:
         89:40:46:e6:54:3b:b1:96:9b:5f:b4:cb:4a:da:29:bb:02:ba:
         00:02:d4:47:47:16:bf:e6:a4:8c:08:59:63:fe:ea:bb:e0:7c:
         d7:f2:6e:a5:17:36:91:b5:7c:07:03:f8:e0:ae:56:46:3c:fe:
         0e:32:94:5f:49:3a:a8:e2:92:bf:12:2d:47:02:f5:df:6e:ec:
         69:34:5f:e5:86:b7:80:1c:0f:ed:46:42:76:2a:90:c6:0a:de:
         a7:c8:43:db:f8:aa:fd:0a:92:9f:6e:0b:3e:90:e3:05:7a:c1:
         e5:12:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:37 2026 by rpki-client