Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File:                     6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier:          EjUYW4Uh+eYKJsx21h3J6WD5P+7swq+nwBmuZT9HEyE=
Subject key identifier:   5B:7A:E8:E5:5D:01:BC:10:4F:86:71:DD:B7:07:3B:16:C8:B2:77:89
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer:       /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial:       019E1EA36B9A8134AFF2BFCEB840F599F6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number:          1903
Signing time:             Wed 13 May 2026 00:01:26 +0000
Manifest this update:     Wed 13 May 2026 00:01:26 +0000
Manifest next update:     Thu 14 May 2026 00:01:26 +0000
Files and hashes:         1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: 2X0CKqy5f6OWcvgJ7flY24871DTsQLInWiungVn+JC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:6b:9a:81:34:af:f2:bf:ce:b8:40:f5:99:f6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
        Validity
            Not Before: May 13 00:01:26 2026 GMT
            Not After : May 14 00:01:26 2026 GMT
        Subject: CN=5b7ae8e55d01bc104f8671ddb7073b16c8b27789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:18:66:9a:05:00:27:99:50:49:f0:55:17:
                    7b:37:83:01:25:48:c6:0f:16:8b:d1:6b:4c:7e:c7:
                    98:b9:cc:ee:ab:bc:69:23:85:a3:9b:58:ba:ca:9b:
                    85:e5:39:08:d0:52:88:df:af:72:c3:bf:0d:39:72:
                    3b:58:7b:fa:28:05:43:9f:ba:11:b0:3f:18:40:d0:
                    ae:e9:75:c2:30:8c:79:61:7e:f7:49:ec:40:5e:41:
                    e5:f3:6c:c9:b2:00:35:4b:91:81:85:ef:8d:b5:01:
                    3c:3e:02:ff:3c:0f:a5:a0:42:54:16:f9:6f:62:ae:
                    00:7a:56:77:07:f8:d0:83:9d:d8:0d:7b:78:ab:f1:
                    2e:b7:43:d9:0e:9f:72:17:b9:18:f1:a5:02:cd:c3:
                    08:17:1c:1a:4c:d8:36:fc:9c:a5:fb:5f:cf:c9:86:
                    e7:42:fc:43:34:cf:06:c4:8c:43:ac:68:4d:33:1a:
                    2b:21:a7:a6:6e:ad:91:4d:fb:49:eb:e7:96:7f:05:
                    d8:74:8c:55:59:05:46:3d:b1:fb:4c:5a:6f:cf:34:
                    2c:7f:12:16:99:08:db:64:2b:38:db:3f:90:c7:1c:
                    4c:68:66:93:84:94:18:47:66:5f:2e:59:8b:b6:2c:
                    e9:35:62:64:b9:2e:20:72:8a:fa:6a:89:2a:6f:4d:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7A:E8:E5:5D:01:BC:10:4F:86:71:DD:B7:07:3B:16:C8:B2:77:89
            X509v3 Authority Key Identifier:
                keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:9c:2c:05:d2:86:db:29:c5:cf:4b:a8:76:7f:f0:30:a4:
         13:9d:d1:36:63:e4:28:09:7b:e8:cc:69:7a:4f:61:97:fc:62:
         bc:21:4f:2e:b5:c9:ca:b1:46:2d:de:5d:44:b0:0b:a1:a7:6c:
         42:f9:35:20:27:97:7b:40:64:c5:d9:c3:0f:86:c3:7b:30:6d:
         69:18:7d:93:1f:07:1f:04:08:33:de:88:9e:5b:ca:58:c0:c9:
         cc:56:8b:91:48:12:38:c7:51:1a:92:81:69:90:d3:63:0f:c7:
         93:67:b2:77:be:1a:e7:d3:fc:0e:40:76:31:22:07:aa:6a:b3:
         ab:95:2f:03:f5:7c:93:66:8c:ed:78:22:87:2b:d9:11:e2:f3:
         8c:a4:cc:a3:d3:f8:d2:cd:fa:26:af:59:13:4b:ef:23:06:99:
         8a:41:a2:1c:13:95:c3:f9:0f:17:b8:ad:a3:ba:6f:a8:2f:00:
         5a:96:f8:01:d6:23:84:70:18:3a:4e:32:5e:63:2a:b1:8e:1a:
         bc:83:06:77:be:f4:00:39:eb:66:1e:04:88:9d:69:a0:7f:39:
         7a:af:a9:5e:65:3e:5f:6a:ed:bb:97:eb:c7:7e:07:40:28:86:
         08:11:79:40:4c:f7:11:1c:42:17:c1:22:d9:88:3e:ca:75:73:
         89:dc:e8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:03 2026 by rpki-client