Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
File:                     C6XvqmwrvKGf6h_7abLZaQc7lc8.mft (raw, json)
Hash identifier:          PJ6CoDUsfwhrxm1tOs1AZZf/kRloMhBE+/aFzYSHLa0=
Subject key identifier:   EE:3D:79:29:C5:7F:23:0C:9C:87:CB:46:57:E9:D8:88:6E:8A:3A:9A
Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
Certificate issuer:       /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Certificate serial:       019E1C7D6FB7A44E99A33C5670BA112D0F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
Manifest number:          0118
Signing time:             Tue 12 May 2026 14:00:42 +0000
Manifest this update:     Tue 12 May 2026 14:00:42 +0000
Manifest next update:     Wed 13 May 2026 14:00:42 +0000
Files and hashes:         1: C6XvqmwrvKGf6h_7abLZaQc7lc8.crl (hash: jlIhtDoV/BHj9Z3FKkEOxk8LkQra+xQKh3Q7y0p8cMg=)
                          2: VCkp9PejXKJX1lKBEBDutAXVriI.roa (hash: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:6f:b7:a4:4e:99:a3:3c:56:70:ba:11:2d:0f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
        Validity
            Not Before: May 12 14:00:42 2026 GMT
            Not After : May 13 14:00:42 2026 GMT
        Subject: CN=ee3d7929c57f230c9c87cb4657e9d8886e8a3a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c0:23:f6:cd:69:da:b6:d8:0e:98:89:90:d7:
                    b3:24:40:6d:45:a7:b8:85:f7:90:73:b0:a7:22:30:
                    04:04:46:dd:f0:97:19:dd:89:f0:25:b3:45:20:e8:
                    ad:d5:d3:65:e8:36:e4:3c:2a:76:78:15:90:4b:ea:
                    f1:f6:5c:12:be:24:b8:a6:1d:fc:57:ac:8c:58:9f:
                    fe:78:f0:2c:2e:95:24:8c:8c:bb:f7:e8:cd:49:36:
                    32:92:52:8a:7a:f9:d2:a8:63:36:40:7c:e1:76:75:
                    52:67:06:d0:9e:3d:a1:63:2c:f8:62:94:2d:7e:0a:
                    2e:cf:47:3c:e1:40:5c:eb:e5:a9:66:74:84:46:5a:
                    09:d4:d2:73:1b:85:6c:56:b0:b3:df:35:87:f6:6c:
                    66:bd:78:03:6a:20:75:de:ef:aa:0c:49:b6:34:c2:
                    99:b2:92:05:de:7d:e0:ab:3b:5b:02:7e:38:08:91:
                    6a:ff:09:e7:c6:f9:c5:98:5d:2f:ad:ac:b7:6d:f5:
                    95:c5:04:47:e8:91:b9:4a:22:dc:55:30:b4:76:76:
                    7f:8d:c3:40:fa:78:37:66:3f:25:98:fc:79:66:61:
                    52:f8:e9:84:af:a9:1e:2f:10:26:b9:54:b7:10:ef:
                    81:30:4f:ed:22:00:c0:9c:ad:b6:1b:c6:d9:95:ba:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:79:29:C5:7F:23:0C:9C:87:CB:46:57:E9:D8:88:6E:8A:3A:9A
            X509v3 Authority Key Identifier:
                keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:df:56:56:4e:da:39:5b:52:9e:4d:17:4f:ca:89:7f:54:94:
         32:7d:61:e1:b0:19:f9:04:99:e0:b8:1f:72:f0:b2:87:67:3a:
         d1:e3:aa:1a:27:1c:66:cb:68:a7:50:b7:b9:cd:11:97:f3:6f:
         10:3c:a0:fd:6c:d0:68:c0:85:95:cd:5c:88:70:97:3d:16:a6:
         fb:ed:2d:8e:3c:64:7d:7a:ec:8b:69:c3:be:89:41:ef:4c:6f:
         8e:64:4d:a7:40:67:fb:1f:96:7a:20:20:42:81:85:4a:33:fe:
         dd:e9:44:cf:94:de:c9:67:f0:c3:58:00:c6:3c:c9:67:01:d4:
         a9:17:a3:f4:6f:1b:83:23:60:17:04:cc:86:49:34:58:76:23:
         c2:a9:bb:44:ad:f9:11:05:9e:f7:8c:9a:40:71:ca:38:63:5c:
         08:9e:66:7b:88:b5:b9:0f:3c:2f:ef:ec:ba:13:ce:77:e8:3a:
         fe:ac:e7:c0:67:1c:e0:a4:47:dc:bc:7b:9b:25:96:38:d1:b9:
         7c:ef:3e:30:be:d9:41:e3:89:84:56:4d:04:a1:a5:e1:71:5a:
         d1:bd:93:a8:10:ba:17:06:27:68:01:14:ed:36:e8:5d:70:62:
         20:74:95:3a:2a:d8:7d:7b:7a:1a:c6:54:a7:51:0c:18:89:50:
         57:2a:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:53 2026 by rpki-client