Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
File:                     6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json)
Hash identifier:          YAYQRgCmv8vPa55GdOB68VrDMd8mutfYOPvi76yUZ8w=
Subject key identifier:   7B:1A:78:E5:30:C1:D1:74:88:8A:29:7E:3D:93:66:B7:BB:56:B0:AA
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Certificate issuer:       /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial:       019E1C1069565E6B06B5634C3866506F85F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
Manifest number:          1066
Signing time:             Tue 12 May 2026 12:01:37 +0000
Manifest this update:     Tue 12 May 2026 12:01:37 +0000
Manifest next update:     Wed 13 May 2026 12:01:37 +0000
Files and hashes:         1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: j9jzri/L5kZCCEuFaR5m0MvCrA6yyWMeRIQHXu/lKM4=)
                          2: YBuaRwSll46Pl6eX__IyqTruYDE.roa (hash: 3qHFKbwgdhCywjWZRMFAC3Gdxw/Mz4QK6oo9Kv5v/9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:69:56:5e:6b:06:b5:63:4c:38:66:50:6f:85:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
        Validity
            Not Before: May 12 12:01:37 2026 GMT
            Not After : May 13 12:01:37 2026 GMT
        Subject: CN=7b1a78e530c1d174888a297e3d9366b7bb56b0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:66:b0:0f:ff:43:01:dd:09:c7:03:f1:50:
                    b8:c5:67:01:1c:12:12:0f:c7:1f:a3:77:1d:0f:9e:
                    3d:af:8b:e2:35:1b:e2:e3:45:32:ce:06:92:5b:24:
                    a7:70:05:a7:4e:68:92:ea:73:1e:b9:cd:c8:5a:42:
                    49:d0:ff:b0:d7:d2:b1:16:a3:a7:f8:ef:06:12:41:
                    b4:fc:d4:af:8b:e4:b8:eb:e8:73:ca:2d:74:5c:51:
                    cc:9f:23:75:0a:be:81:79:68:2a:de:ad:ac:e3:18:
                    01:9d:97:e0:5e:17:f8:af:17:8d:be:45:c3:09:3e:
                    45:37:af:f4:ed:b0:c0:c2:af:43:3c:0e:62:d6:a9:
                    c7:7f:81:5c:22:a5:76:6c:e1:63:e6:2c:13:16:c1:
                    fa:78:40:cd:66:08:c4:60:a6:bd:a8:2e:13:04:e3:
                    47:4c:77:09:d7:51:06:05:ce:69:bb:60:9c:33:9d:
                    a7:68:c4:63:98:60:6b:3a:91:8d:46:6c:b5:f8:ca:
                    61:9c:7e:ca:39:d6:0a:b4:10:c0:57:1b:e9:c0:bd:
                    f4:59:b2:71:66:ec:63:9b:37:1e:73:6a:aa:e1:4b:
                    fb:17:0e:4d:e1:1c:03:05:81:01:c9:24:3a:77:45:
                    f8:b1:57:86:2d:c0:83:fa:e4:00:1c:db:e5:47:7c:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1A:78:E5:30:C1:D1:74:88:8A:29:7E:3D:93:66:B7:BB:56:B0:AA
            X509v3 Authority Key Identifier:
                keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:5f:c8:84:4c:32:cc:bc:d0:f3:93:a0:67:9b:15:1f:23:
         50:c1:8d:ef:c6:8d:ea:82:3b:6c:7d:74:27:09:84:2c:ef:27:
         38:6e:cc:80:35:6f:b8:c2:06:cc:59:e5:97:d8:e3:2a:42:7e:
         f7:b5:6d:ca:f2:41:96:a1:48:8d:53:df:5d:1c:af:26:57:e5:
         d7:b0:a7:10:a8:d9:a5:c8:0c:88:e3:87:25:01:56:60:d8:d0:
         fc:4e:c0:09:6c:20:1a:ef:73:66:07:49:44:a1:2a:87:85:d7:
         17:4b:1d:26:e5:ee:7c:6a:78:1b:65:d2:5c:14:8d:31:0a:96:
         d1:72:27:48:b2:42:cd:ab:a0:5b:86:09:e9:91:74:6a:7e:36:
         c3:b8:2f:e7:04:02:05:e8:76:dc:c8:98:d2:fd:7a:53:e6:5a:
         82:a8:3e:5d:8e:85:a6:de:de:53:79:c5:9a:f2:f2:d1:3f:20:
         74:c7:50:62:c6:72:3a:dc:44:13:3f:f6:81:61:a3:90:51:38:
         b0:e2:4f:f5:ed:bd:55:d7:50:97:d0:e2:d2:e5:6f:ab:0f:ba:
         29:ae:b1:18:89:66:e3:4b:b8:2d:97:3f:fc:68:22:cc:b8:64:
         fc:c3:e8:2b:c2:14:9e:2f:04:5c:c8:86:d1:2d:d3:bf:fc:53:
         85:06:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:10 2026 by rpki-client