Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File:                     1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier:          zgmGIXAbiir6akwrFARTMjw6hwDQ/RS1Th77sd7/lcE=
Subject key identifier:   24:4C:9C:BA:E1:61:54:5B:43:B0:E2:73:0E:83:F9:62:66:FC:27:7B
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer:       /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial:       019E1D9034C95482B5A23337F6E213A6EB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number:          02A6
Signing time:             Tue 12 May 2026 19:00:50 +0000
Manifest this update:     Tue 12 May 2026 19:00:50 +0000
Manifest next update:     Wed 13 May 2026 19:00:50 +0000
Files and hashes:         1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: lenP/2LrnBbrdHkEId4mfbLjttz1sCOFFs/L3x0M0Jo=)
                          2: M0TOyn3Fajg4bXPrKGJxN9Hvjss.roa (hash: iz1xOigpd52YAYJIyKzuYKInMpgIKrWsoBQltN69+EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:34:c9:54:82:b5:a2:33:37:f6:e2:13:a6:eb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
        Validity
            Not Before: May 12 19:00:50 2026 GMT
            Not After : May 13 19:00:50 2026 GMT
        Subject: CN=244c9cbae161545b43b0e2730e83f96266fc277b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:b9:e4:23:93:8a:48:12:07:4f:f3:d4:82:
                    bb:99:71:85:04:13:96:47:53:43:87:80:d2:a9:56:
                    64:c1:20:16:04:cb:12:aa:ba:c4:51:c9:05:10:ca:
                    e7:31:cd:c3:82:7e:0a:7b:5b:48:51:a7:56:6c:b4:
                    1c:74:f6:5b:56:ba:1e:e8:6c:6f:1d:60:a1:67:fd:
                    7d:96:b8:b2:33:fb:28:3c:1e:b3:96:06:b7:00:45:
                    38:d7:f2:e1:1e:0c:3a:b8:c2:12:96:56:d2:e8:a0:
                    2b:4f:e1:b4:87:8b:c4:0f:56:16:5d:4b:39:31:fd:
                    55:39:45:fc:60:cb:3e:2b:4a:24:bc:c7:b4:ce:f2:
                    bf:ed:b2:63:e2:01:de:3d:b6:f1:7c:58:61:43:87:
                    e9:09:c1:a1:59:32:72:68:aa:0b:4e:39:29:cc:b7:
                    d4:68:62:b7:5c:85:6f:8c:66:12:11:95:fa:95:cb:
                    27:21:54:9c:91:f6:b9:a0:67:20:bb:8f:2b:87:69:
                    54:23:8b:06:76:a3:9d:48:db:86:5f:c5:2f:76:03:
                    6d:94:06:60:b8:c5:50:08:6d:aa:a6:fc:82:04:8d:
                    fa:56:0f:3b:fb:80:7b:4a:58:d6:81:1f:26:2b:7e:
                    4c:f6:bf:c8:55:41:f1:5a:f7:5d:5d:97:21:c3:17:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:9C:BA:E1:61:54:5B:43:B0:E2:73:0E:83:F9:62:66:FC:27:7B
            X509v3 Authority Key Identifier:
                keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:91:07:d4:0d:df:a8:79:93:6a:f4:bc:ce:0b:2d:4c:4b:c0:
         0d:b6:95:85:99:b5:43:b7:0e:13:b2:e8:07:91:18:e6:7e:c6:
         04:39:7e:20:5d:36:1a:fb:65:60:d5:8b:22:09:42:35:37:ea:
         6a:6c:40:3c:87:54:83:7e:28:93:7c:44:87:b3:68:77:6b:b1:
         a5:b5:63:0a:75:48:4f:b5:62:73:b1:69:d9:d4:13:60:b6:76:
         f6:42:40:d6:2f:8e:50:11:84:07:39:51:d3:20:5a:95:b6:30:
         d1:65:b2:d5:8a:61:b5:71:53:a8:1c:6a:f2:01:50:71:9d:6c:
         66:79:dc:ba:d7:79:e8:f7:4d:33:6f:a2:be:cf:d1:7e:21:9f:
         f5:42:8a:4a:82:dd:6e:cb:75:51:a3:36:46:50:f2:33:45:b9:
         cc:a6:2e:1f:20:17:cc:10:fb:be:3c:37:02:15:fc:41:47:89:
         4b:c6:ae:ff:a7:56:ae:89:15:89:ac:99:5a:75:ac:4e:e2:e8:
         ed:09:dd:38:63:20:62:86:a1:a8:2e:03:5b:18:cc:08:8b:66:
         a2:9f:75:9b:72:05:e2:22:82:23:63:37:eb:08:89:69:06:10:
         aa:3a:28:68:62:c0:98:89:5a:f3:1e:ff:a6:a2:2a:78:99:ff:
         75:8b:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:23 2026 by rpki-client