Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File:                     4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier:          8zymfWKqhLVwwUBT2IdiYZNJxAQ1r8GOgaCMGBWRaeQ=
Subject key identifier:   F3:33:15:36:24:97:97:11:01:3C:0D:76:D1:CD:2D:28:35:2B:B2:68
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer:       /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial:       019E1CB4B68B5159C1F5870DBB9ECBCB65CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number:          01E6
Signing time:             Tue 12 May 2026 15:01:05 +0000
Manifest this update:     Tue 12 May 2026 15:01:05 +0000
Manifest next update:     Wed 13 May 2026 15:01:05 +0000
Files and hashes:         1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: ai4uewY13jt73AqOMVDnPQ0FjCeGxeouScrB2qfIbvA=)
                          2: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:b6:8b:51:59:c1:f5:87:0d:bb:9e:cb:cb:65:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
        Validity
            Not Before: May 12 15:01:05 2026 GMT
            Not After : May 13 15:01:05 2026 GMT
        Subject: CN=f333153624979711013c0d76d1cd2d28352bb268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:ca:7e:40:9c:a0:de:b2:a6:02:c9:9b:db:
                    f2:ef:11:e2:6e:c0:f7:e5:d5:1c:dd:5f:a6:55:b7:
                    de:45:b9:3a:eb:62:34:57:cf:35:bd:ce:fc:1c:bb:
                    53:c4:fe:77:dc:78:d3:e4:d8:a9:2f:51:00:d5:a5:
                    f6:3b:68:17:44:d9:2a:60:1e:d3:ff:1c:63:df:31:
                    61:49:fd:e0:e5:ca:74:3b:b0:4d:d8:f1:e1:e1:e9:
                    6d:59:56:60:a7:74:d3:f7:fd:ec:f6:cb:74:53:49:
                    d6:9b:40:c1:b5:a7:ab:0d:cc:a1:9a:da:58:95:a8:
                    de:87:74:bd:bf:74:8b:f7:38:42:a9:17:1b:e8:76:
                    5f:88:52:a3:84:f3:d4:94:1e:35:41:bf:8a:12:40:
                    01:5e:ac:77:d7:49:83:30:f3:72:d5:d6:5b:96:33:
                    09:0d:21:c6:d8:45:4e:42:ef:64:d6:d2:47:49:da:
                    81:30:6b:4c:6e:cd:e8:e8:c1:fb:23:b3:a0:3b:f1:
                    1f:4f:d2:7a:3d:7c:91:e2:6a:87:39:8f:66:eb:0f:
                    bc:25:53:e1:56:19:b4:99:e8:c8:1f:89:6a:a6:23:
                    b1:44:d3:8f:f0:8c:8b:dc:92:ce:48:fa:aa:6f:ab:
                    9c:cf:00:7a:03:8a:5b:08:59:94:25:99:ea:d9:b8:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:33:15:36:24:97:97:11:01:3C:0D:76:D1:CD:2D:28:35:2B:B2:68
            X509v3 Authority Key Identifier:
                keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:3d:a4:b0:5f:3b:e3:7c:33:2c:86:7c:d6:38:c5:7f:76:
         b5:7a:30:79:0a:6b:7b:d0:02:ec:0d:d2:ad:a5:05:41:43:ad:
         07:27:3a:ab:97:8e:c6:76:53:ad:fc:61:d7:8e:8c:8c:6c:bd:
         fa:21:d9:23:ce:fd:25:26:0b:a5:f9:2a:f3:78:42:45:55:48:
         11:80:d7:f8:a7:7f:63:c5:d5:d6:07:e5:a0:d0:10:e3:cc:c2:
         e2:a8:54:f3:3a:05:bd:1e:3d:0e:a6:72:76:a7:13:27:45:fe:
         50:99:39:5a:d2:e9:de:9b:77:ba:d9:33:8e:93:fc:95:d1:ea:
         4a:6a:e9:30:65:ed:c1:af:94:0e:76:dd:90:28:c5:d4:bf:06:
         f0:1b:b1:29:12:91:fc:c5:93:d1:e9:0c:74:5e:90:74:72:f9:
         5d:63:bd:6e:e6:36:c5:4e:c8:94:52:96:6a:58:02:ce:84:a1:
         5b:04:fd:97:cf:95:52:69:b5:fc:47:0d:34:d4:7c:d3:9a:9d:
         6e:8a:56:d8:aa:e7:59:95:e9:fe:f4:1b:e4:a0:b5:4f:ab:d3:
         6e:19:b1:0b:87:77:65:13:d9:ad:f2:9f:5b:cf:4a:dd:c1:46:
         08:f4:11:48:db:ed:c3:59:4f:52:e4:24:67:af:81:fb:33:a0:
         4d:74:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:43 2026 by rpki-client