Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          DqMK8MBKNwAzmrpc9p5E3Sc/k0qUQqG/dxGrPq0y5Fo=
Subject key identifier:   DA:AA:9C:52:E1:F9:66:BE:3E:85:2B:D4:14:9B:83:40:B8:D7:11:F2
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       019E1E34DD9FAFF92041A72AB9B1997302FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          112D
Signing time:             Tue 12 May 2026 22:00:41 +0000
Manifest this update:     Tue 12 May 2026 22:00:41 +0000
Manifest next update:     Wed 13 May 2026 22:00:41 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: 10R3tIsAqCOJD8Zw7/t92f7phK2tGhr07yYWcBkpACE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:dd:9f:af:f9:20:41:a7:2a:b9:b1:99:73:02:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: May 12 22:00:41 2026 GMT
            Not After : May 13 22:00:41 2026 GMT
        Subject: CN=daaa9c52e1f966be3e852bd4149b8340b8d711f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:67:9f:90:02:08:0c:cf:83:6f:4c:41:c3:
                    5e:a6:8d:dc:8a:29:6c:45:bf:75:4b:41:93:66:8d:
                    f4:31:f6:10:63:58:3b:da:87:43:18:8f:11:a4:7d:
                    09:ba:4a:16:4e:17:76:00:24:2b:a4:e1:2b:b2:30:
                    07:99:b8:7d:12:b2:e4:fe:d9:45:81:74:14:16:f3:
                    90:50:db:af:8d:3e:7b:0c:0b:6f:8a:b4:c1:ef:7a:
                    93:f5:19:b8:fd:a7:e2:94:e0:4e:b6:09:f8:d8:6d:
                    1b:e4:eb:e9:70:6a:90:22:96:4f:31:46:87:5c:f3:
                    0e:21:f8:88:55:24:ee:5d:41:f9:d8:8f:e9:c1:b5:
                    bc:0a:e8:5a:32:cf:77:92:46:42:08:6f:96:d3:cc:
                    94:4d:fc:4a:0a:05:bb:8e:50:d9:e3:08:7b:e0:6b:
                    94:3e:de:ed:08:9d:91:8b:a2:a2:a2:eb:98:cd:ad:
                    b1:80:47:0a:10:11:76:84:53:0c:56:af:21:e9:8e:
                    4b:d1:e0:f4:29:73:0a:7f:53:a4:86:a2:be:bf:96:
                    16:e2:15:12:84:23:a1:75:21:51:37:1a:8a:68:56:
                    8f:65:13:59:05:48:0f:1f:df:ac:49:d1:3b:b0:77:
                    80:7d:d1:5a:ca:b3:d6:68:bd:67:ea:bf:c9:e5:53:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AA:9C:52:E1:F9:66:BE:3E:85:2B:D4:14:9B:83:40:B8:D7:11:F2
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:42:62:c1:d4:7e:fc:39:b0:60:32:00:d3:28:3d:8f:91:00:
         e7:86:f5:80:e1:7e:2e:ce:d5:38:ef:9e:42:36:f3:e8:a6:13:
         dd:e8:96:ea:e7:b5:e7:1f:19:4a:8a:25:f8:c6:73:1c:8a:9c:
         4f:61:8e:0f:20:ff:d6:f2:f4:1f:22:70:e4:d5:7f:4e:24:e9:
         ef:95:b8:4e:67:38:c2:dd:9d:08:14:22:37:a9:7e:43:bd:60:
         0a:60:bc:bf:1e:f6:05:c0:4f:65:c0:88:65:68:b3:c1:c0:7a:
         8e:18:1e:56:0c:e5:5a:d3:12:40:6c:92:09:cf:5f:33:88:4b:
         bf:ad:82:1b:23:41:5d:99:da:07:2c:3f:4c:29:6f:3a:80:75:
         af:67:af:ca:67:19:c2:b4:05:ca:8c:bf:7a:30:40:4e:92:53:
         0f:4b:6e:ec:92:cc:f3:4c:b0:44:b4:74:e3:ef:6c:0e:b2:34:
         e6:96:4b:6d:68:ed:4a:c7:ed:8c:99:4d:5c:cb:32:9b:41:cf:
         b4:1d:b6:64:9e:2a:f8:2b:9d:7e:5c:40:d2:e4:0c:14:eb:a9:
         80:cd:fc:b9:60:2b:e7:7d:60:ca:8e:54:7a:59:a3:ee:66:b8:
         b0:66:d5:0f:84:40:ef:35:0a:19:05:da:e7:bd:10:c3:0d:dd:
         a9:cd:74:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNN2fr/kgQacqubGZcwL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmJlYTAwYjU3ZDBiOWE4Y2FmMTlmNmRmZTRkZDMwYTRm
ZTZjNDcwHhcNMjYwNTEyMjIwMDQxWhcNMjYwNTEzMjIwMDQxWjAzMTEwLwYDVQQD
EyhkYWFhOWM1MmUxZjk2NmJlM2U4NTJiZDQxNDliODM0MGI4ZDcxMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KJnn5ACCAzPg29MQcNepo3ciils
Rb91S0GTZo30MfYQY1g72odDGI8RpH0JukoWThd2ACQrpOErsjAHmbh9ErLk/tlF
gXQUFvOQUNuvjT57DAtvirTB73qT9Rm4/afilOBOtgn42G0b5OvpcGqQIpZPMUaH
XPMOIfiIVSTuXUH52I/pwbW8CuhaMs93kkZCCG+W08yUTfxKCgW7jlDZ4wh74GuU
Pt7tCJ2Ri6KiouuYza2xgEcKEBF2hFMMVq8h6Y5L0eD0KXMKf1OkhqK+v5YW4hUS
hCOhdSFRNxqKaFaPZRNZBUgPH9+sSdE7sHeAfdFayrPWaL1n6r/J5VNyzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqqnFLh+Wa+PoUr1BSbg0C41xHyMB8GA1UdIwQY
MBaAFOhr6gC1fQuajK8Z9t/k3TCk/mxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGIt
YzdmNTY2NWNiOTE4LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGItYzdmNTY2NWNiOTE4
LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUJiwdR+
/DmwYDIA0yg9j5EA54b1gOF+Ls7VOO+eQjbz6KYT3eiW6ue15x8ZSool+MZzHIqc
T2GODyD/1vL0HyJw5NV/TiTp75W4Tmc4wt2dCBQiN6l+Q71gCmC8vx72BcBPZcCI
ZWizwcB6jhgeVgzlWtMSQGySCc9fM4hLv62CGyNBXZnaByw/TClvOoB1r2evymcZ
wrQFyoy/ejBATpJTD0tu7JLM80ywRLR04+9sDrI05pZLbWjtSsftjJlNXMsym0HP
tB22ZJ4q+CudflxA0uQMFOupgM38uWAr531gyo5Uelmj7ma4sGbVD4RA7zUKGQXa
570Qww3dqc10UQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:29:38 2026 by rpki-client