Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
File:                     6P36cUAM43C3X3N3gEhXTkYnQxs.mft (raw, json)
Hash identifier:          hfjmfrUo5w8hsOxMPSy6iXXvdx5sbbvA+7ZpjuuWeyM=
Subject key identifier:   8D:82:9F:3D:A9:3A:A1:F3:05:6E:D1:64:59:07:92:B1:0D:01:15:3A
Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
Certificate issuer:       /CN=e8fdfa71400ce370b75f73778048574e4627431b
Certificate serial:       019E1E3570AF105951DECDD82FFD7FC4F10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
Manifest number:          05A4
Signing time:             Tue 12 May 2026 22:01:19 +0000
Manifest this update:     Tue 12 May 2026 22:01:19 +0000
Manifest next update:     Wed 13 May 2026 22:01:19 +0000
Files and hashes:         1: 6P36cUAM43C3X3N3gEhXTkYnQxs.crl (hash: TG7HLvrrV+uMKWLyoyFdhnb5omlNsg4lxa2gV8SALyU=)
                          2: ooscOEIlizWjX7MF_vUlLouGttM.roa (hash: MbEpb6Fu+D3CAov79RuTyeWmbIxOn8Qmu/kJUULRZ/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:70:af:10:59:51:de:cd:d8:2f:fd:7f:c4:f1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b
        Validity
            Not Before: May 12 22:01:19 2026 GMT
            Not After : May 13 22:01:19 2026 GMT
        Subject: CN=8d829f3da93aa1f3056ed164590792b10d01153a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:af:39:98:73:90:8a:fe:0a:d5:ad:89:96:
                    80:1e:d9:19:ac:82:c2:c4:0e:97:5c:ee:47:7c:82:
                    9a:cb:ad:ab:13:a8:98:dd:e8:3d:92:75:ea:b7:40:
                    29:b6:8b:19:21:1c:cb:45:7d:4f:fa:10:19:bb:b5:
                    02:c4:5e:29:51:63:6c:6c:9f:e8:d1:b4:90:5d:be:
                    94:24:47:dd:fb:f3:fd:79:b0:4f:95:b9:71:e3:73:
                    ce:32:d2:9d:fc:e0:54:a5:28:98:a8:a4:22:de:0b:
                    66:f2:1f:c4:ed:80:b7:28:b9:58:b7:3d:28:48:6f:
                    0c:38:27:32:44:b6:77:41:67:52:78:0a:7b:d9:65:
                    2e:c6:f8:b2:53:e5:69:7e:ae:0c:a4:a6:78:ab:cc:
                    c6:7a:32:76:72:96:b1:4e:c5:e9:c2:28:a9:1a:4a:
                    5d:52:d9:df:54:38:ac:38:9a:1d:2a:9b:56:08:d5:
                    1c:8f:7c:1d:fd:c9:19:9d:98:47:e9:b1:0f:1f:ab:
                    6d:6f:92:4f:1b:83:b1:a1:86:e9:0f:a8:77:31:86:
                    e1:30:d1:21:67:90:4d:d4:aa:45:cf:f6:90:f7:25:
                    32:5d:35:3c:b3:ce:f3:df:23:72:e3:b0:1b:8d:d0:
                    c4:e4:17:2e:bd:11:30:6b:17:08:55:c4:5b:1f:e3:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:9F:3D:A9:3A:A1:F3:05:6E:D1:64:59:07:92:B1:0D:01:15:3A
            X509v3 Authority Key Identifier:
                keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:e5:8e:5c:16:45:14:99:78:b1:2c:d4:9b:bf:df:e7:32:
         bb:12:34:10:cc:bf:c0:50:86:4b:e7:99:ec:fe:25:6f:13:de:
         d2:6f:8f:84:53:78:df:dd:dc:09:8d:74:cf:db:4e:24:1b:1c:
         72:10:1e:3c:9c:e4:82:ab:4b:bf:2a:ba:cb:f3:04:a3:cd:76:
         b5:72:65:81:c8:b0:99:ea:7c:7d:b3:fc:84:64:fe:3b:7b:8a:
         18:e3:d3:89:66:68:fe:e4:da:89:74:2f:27:72:f7:41:8f:a3:
         2a:62:79:42:aa:89:99:8f:fc:af:23:16:bb:e4:98:69:b0:7e:
         df:41:8d:4c:81:2b:98:e9:63:50:26:e2:75:9d:1f:4b:c9:34:
         c5:50:82:0d:04:f1:22:17:25:51:f9:31:52:17:53:39:29:e7:
         99:32:f6:0f:cd:cd:ac:92:51:9c:ed:c1:49:c9:b8:5b:ac:b7:
         5d:f4:72:74:e5:d5:f6:64:5a:a7:1a:ab:6f:cb:f2:0d:b2:f9:
         49:64:5f:e8:2d:f6:a4:f9:79:93:c5:c9:be:65:08:b9:9c:3a:
         22:38:7b:4b:51:7a:a9:71:8e:32:b9:2c:c0:d5:e1:82:bc:1c:
         e6:cc:ad:1e:07:df:b8:28:ec:b8:bf:86:50:c1:b5:2c:ba:f7:
         15:50:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:38 2026 by rpki-client