Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          PKpyP2vs9POjNudYYbs0vH0BAh7jz/NzxZHIlCEKwfw=
Subject key identifier:   03:89:43:B8:C5:8A:88:11:ED:96:92:58:61:3F:E1:02:3A:83:02:74
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       019E1C0FE036F7FA2E33AB24E1780EDBA5CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          0FD5
Signing time:             Tue 12 May 2026 12:01:02 +0000
Manifest this update:     Tue 12 May 2026 12:01:02 +0000
Manifest next update:     Wed 13 May 2026 12:01:02 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: 6flK9vykuZcDXRNGBKWRuL4iTalI+maXpd+edkobuW8=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:e0:36:f7:fa:2e:33:ab:24:e1:78:0e:db:a5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: May 12 12:01:02 2026 GMT
            Not After : May 13 12:01:02 2026 GMT
        Subject: CN=038943b8c58a8811ed969258613fe1023a830274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7b:d4:8d:d4:a8:52:71:b2:f5:d5:b9:b7:ff:
                    29:49:08:75:a3:2b:82:85:c9:85:b9:b0:73:12:17:
                    b0:53:fb:21:f9:fa:e8:e2:49:17:93:50:f0:f0:9c:
                    a8:5d:f7:90:2d:4e:04:75:57:3a:0a:c9:5e:8a:58:
                    f6:62:10:d2:8a:8b:49:d4:d0:97:ab:34:f6:b1:4d:
                    eb:3b:ad:4b:4c:13:5c:6a:39:c8:62:10:e3:ce:e7:
                    69:3c:80:6d:79:41:e7:4a:71:17:5c:7d:dc:b2:31:
                    16:e3:90:57:6b:f1:f2:f9:80:4a:8b:08:af:a1:59:
                    40:58:14:f1:04:07:d3:48:b7:40:05:ad:a6:ee:33:
                    16:72:19:87:cb:61:c7:3d:83:2f:ce:f9:02:ad:1e:
                    a7:e3:78:44:19:8c:b0:12:d0:9c:a0:e5:fc:68:73:
                    b5:29:d2:67:18:dd:8d:b5:83:be:68:d0:83:65:83:
                    b9:e5:2a:85:63:7e:be:03:98:ed:e0:3c:57:c1:0b:
                    ed:1f:b2:4f:20:ee:e6:16:0b:64:67:95:91:7c:2a:
                    1a:5b:24:68:68:34:2f:89:22:ca:f7:81:07:5f:d8:
                    df:0f:76:f0:04:b0:92:5f:89:f7:17:50:01:ed:14:
                    4f:b0:23:14:17:98:ae:e4:c8:5f:41:f1:b7:84:e3:
                    80:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:43:B8:C5:8A:88:11:ED:96:92:58:61:3F:E1:02:3A:83:02:74
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:87:fa:91:cf:43:a2:df:5d:bd:c7:22:0d:b9:94:ab:ec:80:
         5c:88:4a:70:ed:d7:9c:78:22:4a:fd:5a:58:b3:0d:ec:2d:ef:
         11:39:41:b9:33:76:23:e9:08:f1:5a:24:c2:55:0c:9e:4c:cc:
         ca:28:9d:27:50:84:32:9f:08:3c:e6:ed:9c:38:fa:56:96:da:
         10:19:f0:91:33:20:30:b2:6a:f6:c8:06:de:8d:25:b5:5d:dc:
         ac:37:e1:2d:ec:f8:d1:4c:31:d8:25:36:a3:73:bf:6e:ee:8c:
         db:1d:84:92:cf:30:32:2a:ed:93:20:2a:33:0b:53:fa:46:e4:
         54:53:64:67:3e:e0:69:60:d1:6d:83:5b:82:fb:c5:7d:51:6f:
         3d:bd:e9:72:58:49:f5:db:0e:5d:22:af:8c:fe:4a:0a:8a:2b:
         5e:2b:92:db:64:d7:4d:1d:dd:a2:5e:bd:06:39:4b:48:16:ea:
         5d:c1:d8:60:16:6a:1c:3d:3c:2d:24:55:23:1e:f2:d8:5a:f0:
         f9:69:15:a7:3d:4f:36:65:45:00:23:12:89:c5:5c:15:88:50:
         0b:97:24:69:6e:aa:49:16:b7:5a:eb:29:b3:12:b0:11:97:77:
         0e:33:d9:58:73:22:25:05:26:89:73:25:c0:46:a9:cd:a6:66:
         34:17:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:59 2026 by rpki-client