Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
File:                     6DGCFvAxEBktn29i_-4ZDrvVxBs.mft (raw, json)
Hash identifier:          y20RdAErLd5Op6kjnZRADjAycMTV2OR5lcaFWfgLS90=
Subject key identifier:   94:27:17:64:9D:E7:64:CC:1D:42:40:BD:7B:D0:D7:0E:8A:82:19:87
Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
Certificate issuer:       /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Certificate serial:       019E1DC74B56592C37E3A6CA4690EF81C791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
Manifest number:          034B
Signing time:             Tue 12 May 2026 20:01:00 +0000
Manifest this update:     Tue 12 May 2026 20:01:00 +0000
Manifest next update:     Wed 13 May 2026 20:01:00 +0000
Files and hashes:         1: 6DGCFvAxEBktn29i_-4ZDrvVxBs.crl (hash: wRKwn7I32STxkbFkNZMOURLUeAWEjAccqgoRhxJZVY4=)
                          2: y7eyZqNEkZQkPingFqUdgXmucwc.roa (hash: f2+YM/xZdW946QzAFcbV9ZF0dOKQRzmJA4JL++o4rTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:4b:56:59:2c:37:e3:a6:ca:46:90:ef:81:c7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
        Validity
            Not Before: May 12 20:01:00 2026 GMT
            Not After : May 13 20:01:00 2026 GMT
        Subject: CN=942717649de764cc1d4240bd7bd0d70e8a821987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:a8:f2:66:1e:6c:4e:9c:06:a9:c0:2f:f3:
                    9f:9a:cc:80:f7:10:83:88:79:31:13:90:4a:c6:22:
                    43:f6:2d:dc:cf:74:5b:ae:93:54:e7:20:44:10:b6:
                    5b:4d:a0:5c:33:c6:5d:d9:35:7c:8f:b1:f6:4d:5b:
                    0c:c3:22:71:28:0b:c5:c8:f7:25:a5:eb:f3:c8:2f:
                    aa:3a:25:1c:a5:7e:d4:ba:3b:52:25:4a:6d:8b:e6:
                    73:25:6a:cc:80:81:cc:b3:b3:70:d6:a8:2f:34:50:
                    82:1f:e5:35:ab:cc:a5:ac:a4:f7:40:77:6d:f9:d6:
                    c2:cb:5f:90:d6:30:c0:5d:c0:85:b2:f8:96:c2:c1:
                    b0:6f:05:1b:59:af:7b:78:54:e4:37:8d:04:30:15:
                    f4:15:42:70:09:f1:8a:82:a3:80:40:18:12:e1:35:
                    a4:ea:82:ce:7b:11:5c:9d:82:97:3a:b2:dd:3a:68:
                    aa:1a:76:a7:95:c4:04:e0:6d:69:26:eb:43:20:ac:
                    87:bf:80:81:26:af:07:2a:5f:cd:5d:2c:bf:68:fb:
                    d5:94:9f:2a:54:8b:e4:20:35:99:0f:7a:91:ce:b1:
                    9a:3f:05:39:82:0f:09:7f:8f:0e:ea:2c:22:fb:20:
                    05:9f:28:05:7d:f6:7e:16:95:03:95:30:6a:13:b0:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:27:17:64:9D:E7:64:CC:1D:42:40:BD:7B:D0:D7:0E:8A:82:19:87
            X509v3 Authority Key Identifier:
                keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:e6:38:fd:23:df:22:e2:70:21:c6:72:97:bd:de:c5:79:
         a1:f0:bc:1c:ef:e4:c7:4c:ce:da:23:3b:22:7a:63:4f:05:47:
         02:ee:e9:14:37:89:99:ee:f8:ec:56:59:b3:8c:9e:59:e4:3a:
         f8:b6:14:43:9c:9b:46:d9:51:17:aa:f9:3e:d9:33:8d:45:87:
         fb:1b:5c:34:a3:ef:0c:38:4f:bf:12:95:06:23:83:4a:57:61:
         62:3f:1a:39:41:17:9f:58:12:80:b7:01:8b:6d:1a:4a:76:42:
         40:c9:7d:35:87:a4:cf:3d:5b:29:43:25:dd:99:57:62:d4:c4:
         e2:ed:38:3b:b1:0c:cb:5e:c0:56:67:e5:13:85:4c:9f:d3:ce:
         8d:ad:b7:5a:61:4e:da:eb:fc:23:fa:d9:42:a8:87:b2:2b:b5:
         5d:c2:a8:e9:0e:8c:74:40:bf:81:15:58:04:6a:cc:4d:d2:e3:
         42:3a:6b:73:49:32:ec:b5:7b:c0:74:21:65:78:3b:e3:1c:ec:
         26:c5:88:3c:c1:85:96:b1:e4:f5:7d:25:9a:af:43:ad:09:0c:
         bc:f6:15:c5:fa:77:cf:47:33:f9:71:69:bf:43:85:37:20:85:
         d7:ab:75:65:f8:7a:f1:78:80:7f:d8:56:fc:69:f9:1f:43:cd:
         e5:54:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:14 2026 by rpki-client