Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          YU6rDslQJBcCit9XUDzXDU8pGwYFzte7DeWFJfui7mc=
Subject key identifier:   70:87:C0:2B:26:0B:4D:27:63:A1:89:C0:6F:FD:D1:6B:BD:1A:9E:7A
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       019E1C0FBFBED5928C76FC7B41183D325E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          0A7F
Signing time:             Tue 12 May 2026 12:00:54 +0000
Manifest this update:     Tue 12 May 2026 12:00:54 +0000
Manifest next update:     Wed 13 May 2026 12:00:54 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: 7FvlwClLiq+u+3E7F7up0BpZPGYP/Co1bYEiKn1+bSU=)
                          2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:bf:be:d5:92:8c:76:fc:7b:41:18:3d:32:5e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: May 12 12:00:54 2026 GMT
            Not After : May 13 12:00:54 2026 GMT
        Subject: CN=7087c02b260b4d2763a189c06ffdd16bbd1a9e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:98:84:6b:e1:d7:2f:7e:51:a5:fc:06:fd:
                    40:86:84:f6:62:eb:f1:de:77:09:4b:6a:52:44:fc:
                    d4:41:4b:36:2a:63:00:a8:b6:9b:fe:91:40:6a:fe:
                    ba:f4:e6:42:c6:10:21:1f:b0:99:ac:dc:19:71:e5:
                    d5:1f:61:31:be:72:79:27:6f:27:c5:b5:58:d7:f7:
                    04:a4:2e:74:d9:a8:6f:b6:d5:9a:db:81:05:75:38:
                    c6:c0:b0:f4:ea:c6:48:87:d2:af:95:a7:ad:ce:2f:
                    bd:ed:d5:2a:96:c3:ae:7c:6f:f9:83:e4:b7:45:67:
                    20:61:27:74:08:49:71:13:98:9f:9c:e8:68:4f:8b:
                    e9:b5:6d:0b:ff:46:ba:eb:70:f6:eb:c5:d0:bb:3b:
                    e8:3a:96:b6:5b:b0:7d:5f:c6:c3:5a:15:52:de:1c:
                    ea:ae:ab:63:21:91:76:28:f8:9f:e9:77:c1:cd:58:
                    af:5a:35:0f:4f:36:09:c2:dd:4b:75:1b:1a:7f:8c:
                    33:a1:58:09:65:be:93:a7:7d:cd:20:db:1f:fc:fd:
                    b0:b8:82:34:ea:ac:ea:85:e7:40:81:45:4b:cb:91:
                    b4:9e:c3:f7:b8:a6:03:fa:6a:af:ba:36:f9:98:f2:
                    c1:2a:47:ca:e9:3a:82:b0:59:c6:34:e4:39:4b:35:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:87:C0:2B:26:0B:4D:27:63:A1:89:C0:6F:FD:D1:6B:BD:1A:9E:7A
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:e1:d3:66:a5:ca:e9:7e:b4:f7:d1:b4:e3:cd:38:80:30:
         68:d8:f8:81:90:14:09:2f:2c:52:42:3f:bd:ab:c7:d9:d4:07:
         a9:76:36:b0:6f:e0:06:a5:a9:30:6d:5a:08:06:d0:00:be:88:
         2a:63:b3:d0:29:32:7c:28:ec:df:39:a3:bf:92:1c:bd:0b:ce:
         b3:36:e5:a6:a4:be:8c:ea:31:05:54:ae:61:4c:3c:5d:55:3e:
         b4:0e:b7:25:76:af:69:be:5a:b6:49:d9:83:a0:e5:8f:79:c5:
         2c:24:c7:07:ef:06:32:3e:f2:92:a1:d0:fd:50:6d:fc:68:9f:
         ab:89:55:82:19:0a:e0:c4:26:0b:49:75:8c:05:04:96:98:c4:
         de:f8:67:c8:6b:db:c2:57:cb:f1:1d:5b:02:b3:71:e5:e7:4d:
         ce:f5:b3:70:92:a0:22:8d:a0:8d:e1:c9:c5:c4:67:d4:8d:4c:
         98:86:f1:14:a7:b2:94:14:66:82:0d:ee:27:10:db:42:93:d9:
         a0:73:1e:5b:31:b5:89:08:be:a1:61:02:07:c4:21:75:bf:d3:
         ca:d7:f3:55:91:ba:c8:16:15:b2:de:78:fd:d3:66:6f:67:d3:
         b6:74:77:58:35:40:29:4d:09:95:60:36:f3:09:f5:c0:6c:77:
         d2:8a:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:12 2026 by rpki-client