Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
File:                     6w1TyHBxSElxrt_ZDKbsxlapbkw.mft (raw, json)
Hash identifier:          H4qHF8Di424oeAfu3FetwJXBb9/VNQwqQjiFOi1aLlE=
Subject key identifier:   79:08:FE:0E:7F:CF:6B:A5:5F:7A:BA:0A:74:AA:96:F4:16:41:E9:E3
Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
Certificate issuer:       /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Certificate serial:       019E1C469234F1BCBB57317C81D73BAE6795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
Manifest number:          166E
Signing time:             Tue 12 May 2026 13:00:47 +0000
Manifest this update:     Tue 12 May 2026 13:00:47 +0000
Manifest next update:     Wed 13 May 2026 13:00:47 +0000
Files and hashes:         1: 6w1TyHBxSElxrt_ZDKbsxlapbkw.crl (hash: ivrv3puN+Airv/3E3x3BW/WuIDqXEcXia0+vyANRVUw=)
                          2: 8aF6o5FBuAw0gaN2PO-VbBiMjr0.roa (hash: wFO4VIkw385KlrdB+37sEvQQUjXgH+seQepKLY22IFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:92:34:f1:bc:bb:57:31:7c:81:d7:3b:ae:67:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
        Validity
            Not Before: May 12 13:00:47 2026 GMT
            Not After : May 13 13:00:47 2026 GMT
        Subject: CN=7908fe0e7fcf6ba55f7aba0a74aa96f41641e9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:7e:99:d5:b4:fc:7d:bc:c6:54:04:3a:f7:
                    3c:4b:01:7f:b4:a6:f4:d3:19:3e:56:35:09:0c:f3:
                    08:b3:41:d7:ff:21:d1:ad:fb:f6:cf:0a:5e:2d:20:
                    84:da:04:d3:a5:75:b7:b7:27:d0:66:ed:8d:1a:60:
                    ce:e4:77:c1:89:35:c7:e3:b8:98:21:cf:c5:56:5c:
                    81:11:7f:68:43:9c:88:6e:f1:40:94:8a:16:c8:dc:
                    b6:cd:58:94:9e:cf:a8:b1:9d:9a:22:01:5a:ce:76:
                    89:7a:90:7c:f3:7d:78:00:db:dd:1f:cb:7f:e9:63:
                    58:69:77:6c:2d:c6:aa:13:d3:a3:9c:a2:dd:73:b8:
                    21:e7:9f:da:f7:9b:6a:e8:9c:f8:fc:6a:e6:e3:08:
                    3f:91:1a:cc:61:fb:60:66:e8:f3:2e:95:29:04:1e:
                    bc:0a:78:14:94:8f:cf:74:e4:b5:45:77:33:f7:23:
                    66:56:22:55:25:69:37:fe:ce:19:da:0e:df:b3:2d:
                    55:dc:99:59:53:c3:8c:ca:ee:e6:1e:68:11:e4:78:
                    ac:16:e9:51:ea:94:12:d1:2c:44:a9:a8:24:b2:4f:
                    ec:1c:ce:5b:33:fd:54:ef:af:a1:49:eb:ad:28:79:
                    bf:1a:ce:a0:5b:e6:8d:15:dd:54:0b:37:61:e3:e1:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:FE:0E:7F:CF:6B:A5:5F:7A:BA:0A:74:AA:96:F4:16:41:E9:E3
            X509v3 Authority Key Identifier:
                keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2c:5b:ee:8c:64:18:e6:62:e8:fa:ef:32:c5:11:80:7a:2d:
         31:d2:92:37:a0:3c:99:46:a2:48:ef:07:60:59:e4:8a:53:d3:
         5b:56:d9:33:d5:ff:a4:92:b7:3b:66:c5:d4:c4:e1:74:31:01:
         a4:be:fc:bb:78:7f:24:c8:15:5b:b1:9e:91:ac:f6:45:aa:21:
         0e:95:22:e8:e7:7e:b9:32:61:5b:93:0b:a7:99:fe:08:48:6c:
         a5:63:6d:a9:74:4b:3e:e6:01:98:85:bb:dd:6b:b1:a4:62:6c:
         66:38:f6:96:21:0f:29:63:21:78:93:3a:70:a3:42:5e:87:4e:
         53:f3:26:38:6a:fb:6b:c2:be:e2:4c:a5:9b:c6:ea:59:31:b5:
         07:23:2c:dc:7c:ce:8f:d0:8a:73:71:9e:f1:8d:ab:dc:61:c4:
         85:78:7e:2f:6a:09:3b:48:56:00:8d:40:91:df:22:6a:18:cf:
         09:97:7f:c7:30:d1:44:e1:d3:99:4b:ac:c0:75:41:68:c6:4f:
         c6:11:52:92:54:af:b4:05:9b:17:d9:5a:f8:f0:d6:75:c0:ed:
         aa:3d:29:51:a1:67:84:c4:bd:3e:64:b1:6a:1c:34:74:34:0c:
         f5:8e:c4:bb:ab:fd:16:c3:17:f3:10:1d:36:87:14:27:73:17:
         07:8d:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:53 2026 by rpki-client