Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File:                     6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier:          OoiCOO6MEuxaXjWQZWuYcKS2Xv4sXWWqlw6bM4VEgWs=
Subject key identifier:   EB:7D:A7:F1:53:40:AB:4B:0B:C5:10:ED:99:15:10:E3:88:BE:D9:27
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer:       /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial:       019E1D5980EF1CA095C1D534B80BD573987A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number:          03DC
Signing time:             Tue 12 May 2026 18:01:05 +0000
Manifest this update:     Tue 12 May 2026 18:01:05 +0000
Manifest next update:     Wed 13 May 2026 18:01:05 +0000
Files and hashes:         1: 0NDgQCvqhryncNsEQEFvwSr_y0M.roa (hash: LF2EyUV4OIlA7LZWcGa2EYYOsJUgAR1OHjq6qtxDlCo=)
                          2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: Z2nGazkRCZpoItsNx7ZDUTFyUZjdAJcakxGwat4hGo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:80:ef:1c:a0:95:c1:d5:34:b8:0b:d5:73:98:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
        Validity
            Not Before: May 12 18:01:05 2026 GMT
            Not After : May 13 18:01:05 2026 GMT
        Subject: CN=eb7da7f15340ab4b0bc510ed991510e388bed927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:eb:44:86:73:8b:ce:b2:17:a6:fe:6e:86:
                    c0:b2:e8:52:81:6e:90:b2:64:23:5f:22:30:1b:ea:
                    74:63:d4:90:6a:5d:58:c7:de:11:90:fc:f1:ee:4e:
                    a0:5d:ce:d6:0d:0b:e4:9f:e6:f4:7c:25:9c:b9:15:
                    27:ce:8e:c0:6a:78:c6:c4:3a:63:7f:40:eb:75:bb:
                    07:6c:20:7a:ca:b2:39:94:46:f6:dc:23:e0:d1:5b:
                    d5:c4:67:4c:6f:6f:5d:69:a5:59:f2:c5:98:e5:2e:
                    0b:b7:0e:bc:2e:f1:01:81:33:27:6f:22:f1:c6:bb:
                    a6:9b:76:9f:65:57:0e:d2:5e:b8:61:c6:d2:c3:d4:
                    90:9a:f0:bc:a5:dd:b3:e9:80:f7:a7:fd:11:c3:8a:
                    2a:51:b7:e4:7a:b3:cc:bd:bf:61:c4:d7:d5:58:ca:
                    18:bd:c8:c6:9c:21:8b:04:b7:d1:79:07:aa:09:6e:
                    c0:63:5a:98:5e:09:23:97:7b:b2:ca:51:c2:b9:db:
                    b2:63:9b:10:b5:47:c2:81:c1:a1:f4:af:65:da:cd:
                    26:3d:51:92:e2:8d:1a:2f:b3:89:e8:1b:fe:12:79:
                    45:46:77:c0:70:9e:05:2e:9e:b2:ec:68:af:a3:52:
                    81:ab:a9:e5:a9:63:b6:59:d7:3f:62:c2:48:49:97:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7D:A7:F1:53:40:AB:4B:0B:C5:10:ED:99:15:10:E3:88:BE:D9:27
            X509v3 Authority Key Identifier:
                keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:5e:da:64:2f:30:5e:be:e7:7e:37:32:99:5e:21:6d:3c:
         82:e8:94:36:e1:a1:91:38:43:5c:9b:68:2c:79:f3:ca:51:e8:
         4c:fb:c3:7a:6d:49:74:77:0f:ac:65:5e:58:93:69:90:4b:49:
         84:92:e9:72:e4:14:ca:21:61:9c:00:6a:d9:dd:91:47:fc:fb:
         47:59:4e:96:ca:ed:b5:6c:c4:22:cd:7f:33:03:6b:60:9e:45:
         6d:97:3f:18:ee:8e:0e:4a:20:00:cf:91:23:28:65:62:11:13:
         d4:e4:cf:87:d5:a4:fa:d1:bd:8f:71:c3:08:71:36:01:e4:4e:
         d5:dc:0c:e2:60:b4:f0:7e:bf:c7:2a:73:f1:2a:fc:21:1f:40:
         7c:a6:83:e6:a8:50:35:84:94:2a:3e:68:d1:de:71:ae:f8:e7:
         23:5a:59:36:78:f6:8f:32:3b:e1:57:86:27:eb:2b:0a:5b:ed:
         4e:29:d3:ae:43:bd:6a:64:7f:dc:b7:94:93:e3:ef:e6:42:ff:
         9b:aa:1d:15:7f:fe:a2:d4:05:71:10:64:b8:16:49:9e:73:ac:
         82:f9:dc:fd:a7:0e:11:97:9f:02:cd:64:16:20:8e:45:c8:0d:
         c5:e7:f8:75:94:eb:c2:5f:a5:8a:d1:0d:09:d0:13:1e:1d:f6:
         8b:0a:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:27 2026 by rpki-client