Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          uu6EdOulCI8cMUMOcN5nGLCHlgsxukx7aHq1MxJDm10=
Subject key identifier:   6B:CE:52:BF:56:95:BD:7E:87:07:6F:D6:80:39:8A:51:0A:56:C5:6B
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       019E1ED9A56BA37F4710F31F1E60EBEECC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0D7B
Signing time:             Wed 13 May 2026 01:00:40 +0000
Manifest this update:     Wed 13 May 2026 01:00:40 +0000
Manifest next update:     Thu 14 May 2026 01:00:40 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: TKjRTl1cxpIFHS+JUW+gsxftPRQ+/UtXV9y6JEaGHNw=)
                          2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:a5:6b:a3:7f:47:10:f3:1f:1e:60:eb:ee:cc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: May 13 01:00:40 2026 GMT
            Not After : May 14 01:00:40 2026 GMT
        Subject: CN=6bce52bf5695bd7e87076fd680398a510a56c56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:8a:f5:7d:89:a5:d9:c5:eb:7d:18:d1:87:
                    cb:5f:22:6e:e1:92:5a:2c:bc:5f:5b:0b:f0:8b:df:
                    d5:f6:86:53:24:dc:fc:f2:52:9c:98:8e:b6:ba:71:
                    2d:44:1f:f0:8f:32:24:bf:cb:b8:a3:69:9b:08:11:
                    17:3d:97:d9:dd:02:4b:d5:90:3f:2f:78:9c:68:6c:
                    8f:e2:d3:df:e2:34:5c:1c:00:f4:78:aa:21:97:38:
                    8a:00:18:cc:72:19:a0:6c:00:0f:11:7b:eb:83:47:
                    dd:5e:98:65:0b:0c:6f:2f:be:26:56:bb:f0:cc:40:
                    d3:00:61:19:59:69:a6:ab:9f:1a:15:e9:97:32:41:
                    39:35:47:e4:67:69:54:b2:73:8b:30:78:f8:7e:a3:
                    1d:cc:d8:69:11:e2:99:60:57:56:0a:fb:42:be:ee:
                    86:24:7f:83:42:eb:24:ce:ea:9e:6d:4e:66:c1:13:
                    a7:23:f4:41:ca:74:94:f7:3b:b2:a1:8b:40:50:e5:
                    df:1e:c7:8a:b2:39:e6:5b:9b:37:ba:17:d1:69:a1:
                    b7:a1:b3:1a:01:b7:db:1b:02:3c:a4:b5:52:d6:9f:
                    8e:3a:eb:ee:49:5d:b7:ae:c9:35:14:73:91:37:bb:
                    e5:de:03:9d:ec:fa:43:71:de:e6:ec:e5:31:22:c8:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CE:52:BF:56:95:BD:7E:87:07:6F:D6:80:39:8A:51:0A:56:C5:6B
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:a2:b9:ae:81:37:86:ab:ed:a3:e8:fc:62:ae:c6:63:42:
         08:a8:f7:72:df:f0:c2:5a:90:be:47:1d:fc:e2:db:86:11:e9:
         54:98:f6:f2:b2:99:89:1f:c3:7d:81:d6:e6:a4:64:c1:97:c9:
         a2:f7:b1:53:46:29:13:5d:7b:4b:8b:ee:fd:89:80:89:75:74:
         d2:55:7a:db:82:34:e5:93:6d:26:78:ac:6a:5f:c3:57:76:3f:
         7e:d5:ce:2d:bf:7c:c8:bd:fd:c1:ce:77:30:f6:4b:e6:cd:b0:
         41:90:5d:ad:cd:07:a6:fd:e5:fe:1c:a9:a7:f0:cd:31:1f:b2:
         30:de:55:dd:7d:bd:3e:4e:59:61:d9:1f:4f:7b:76:e6:00:07:
         b7:99:dd:9e:e9:bd:2d:1a:2b:2d:56:b9:92:69:a4:31:bd:01:
         76:f9:fb:f3:51:4d:de:7b:d0:4b:8a:9f:f8:19:96:ac:2a:84:
         66:3b:b1:c0:de:e0:92:30:b6:24:b5:cb:34:0d:a2:6d:a7:fe:
         55:d6:dc:9f:c0:fc:62:2b:12:89:f1:ae:51:0c:75:c1:36:c6:
         7b:96:df:9c:52:aa:ea:e0:c0:80:e4:3c:d8:dc:f8:7b:d3:7c:
         e4:3f:46:0c:35:9f:83:53:47:2a:ac:73:da:4d:ba:1f:3c:f6:
         05:ae:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:28 2026 by rpki-client