Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          JhxwZFS9q/OJ6jrD1umkfCfW1JG2E4M8n7O0Adhqcgw=
Subject key identifier:   08:B1:55:C9:27:67:AC:ED:57:00:85:87:7E:6E:05:F9:3E:DE:9A:1A
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       019E1E36056294D2DAB94195ABD25BE51E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0F5D
Signing time:             Tue 12 May 2026 22:01:57 +0000
Manifest this update:     Tue 12 May 2026 22:01:57 +0000
Manifest next update:     Wed 13 May 2026 22:01:57 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: rfKBwO82NLB35xPe2QBk+J0/FThUUZKc065WwQleRpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:05:62:94:d2:da:b9:41:95:ab:d2:5b:e5:1e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: May 12 22:01:57 2026 GMT
            Not After : May 13 22:01:57 2026 GMT
        Subject: CN=08b155c92767aced570085877e6e05f93ede9a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:a3:7a:da:c4:80:72:6c:30:98:01:75:91:
                    d9:5a:9e:60:7d:64:e1:3e:66:ac:66:db:4e:c1:f8:
                    a9:30:9c:23:67:85:49:61:fb:6e:67:d4:9b:2a:e6:
                    37:3e:96:00:b2:70:85:ae:71:99:6a:13:19:d8:b9:
                    a6:72:da:e3:fb:96:35:40:47:9e:45:66:84:b8:e2:
                    6e:d5:41:15:71:85:5a:f4:da:da:02:e8:a5:81:63:
                    36:e9:5f:43:f6:7a:a0:cd:f2:93:83:3f:a9:54:96:
                    6d:f4:8a:2f:e0:ec:ab:2b:4e:b2:75:42:93:91:10:
                    4c:16:ad:18:7d:25:2f:93:59:0f:58:ab:c8:32:4e:
                    46:9e:1c:8a:a8:eb:d1:f0:21:8b:2c:50:16:15:b0:
                    fb:7f:48:8b:9b:32:06:c6:fe:24:54:f5:c7:ba:1d:
                    a4:a1:44:5b:e6:b9:d3:bc:c3:57:11:5b:1b:40:3b:
                    9d:dc:a6:ae:30:da:b8:58:4c:da:72:be:a4:7b:2a:
                    34:cb:1f:ce:d5:df:12:84:00:98:3a:11:b6:55:79:
                    c6:98:79:e3:f2:8f:fc:bd:eb:5d:45:9c:5b:b0:e3:
                    b3:52:b5:d0:26:bd:a9:71:ff:5f:26:e1:86:2c:a5:
                    01:30:04:94:66:6a:a1:5a:e1:8b:e2:17:e0:1e:0f:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:55:C9:27:67:AC:ED:57:00:85:87:7E:6E:05:F9:3E:DE:9A:1A
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:66:8b:56:0d:a9:44:10:7e:27:5a:e6:d7:d7:e5:d8:f7:f0:
         5c:2e:8d:3f:f0:be:db:f1:f4:f2:0e:e1:04:ab:d7:75:3b:eb:
         6e:0f:a0:cb:67:01:17:ff:44:0e:5b:9a:51:b6:e7:49:7c:99:
         6e:3f:ac:cd:e2:44:cc:a6:b2:85:81:aa:69:cb:b4:23:b4:79:
         f5:cb:86:6e:95:a0:55:11:9a:55:77:70:18:74:80:90:cd:a8:
         c0:d3:5f:50:e3:37:bf:4c:5a:18:0e:61:fb:b1:d3:6f:31:bb:
         39:47:df:2c:b1:b0:2a:80:1a:e2:09:07:2e:75:01:a0:c5:07:
         5f:69:f9:8d:c3:6c:17:6c:bc:0f:ac:67:1f:14:9c:20:6f:84:
         9b:eb:0d:1f:40:63:e8:e1:71:c5:d0:49:de:91:1f:4e:36:53:
         39:5f:31:3a:d0:97:e1:76:3e:3d:ed:92:9a:ae:a8:51:56:9b:
         80:29:5d:1b:e2:7f:80:f2:a3:bb:71:58:c3:36:37:b6:70:17:
         71:95:1e:0c:a5:aa:35:60:9d:fc:94:f2:20:a5:d1:76:ff:44:
         43:c2:34:d5:51:b2:85:c8:d8:2d:0b:b5:0d:ea:14:91:2c:0e:
         c1:c0:f4:66:44:32:47:87:e6:d8:9a:60:70:53:45:68:56:bb:
         e2:21:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:55 2026 by rpki-client