Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File:                     6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier:          gHbhuOC1yAMSRBeKPA2A9kwICWo2QjZGSJZFMfjPJw8=
Subject key identifier:   5E:0B:50:D3:DC:36:BD:A2:BA:1E:6F:58:11:5E:6E:C4:4E:24:2D:C1
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer:       /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial:       019E1FB5E527A5C8C71A7D7C5708F6C88188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number:          0DEB
Signing time:             Wed 13 May 2026 05:01:14 +0000
Manifest this update:     Wed 13 May 2026 05:01:14 +0000
Manifest next update:     Thu 14 May 2026 05:01:14 +0000
Files and hashes:         1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: P/W3X/PuALqkpzWkuvZWn5j47ZUlvxtcflc3jWchq9o=)
                          2: jalRR1qf4gkRSHcE337u9bWw_gA.roa (hash: wlzbEgEP0/Wpmn8I5QNTgk6aKSZpv2Z3WVVZUuK0r98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:e5:27:a5:c8:c7:1a:7d:7c:57:08:f6:c8:81:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
        Validity
            Not Before: May 13 05:01:14 2026 GMT
            Not After : May 14 05:01:14 2026 GMT
        Subject: CN=5e0b50d3dc36bda2ba1e6f58115e6ec44e242dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:f3:2d:72:31:0e:06:ea:65:e6:ab:27:17:
                    fd:b5:ca:1b:8c:90:6f:62:54:50:12:c0:30:0a:e8:
                    5a:92:8b:e9:e6:7f:8e:19:26:bb:9c:8f:a2:07:10:
                    91:a7:0b:9e:a9:57:41:29:a5:8f:94:08:e7:31:ba:
                    39:65:c8:20:8d:37:32:d9:b6:31:ed:2d:92:e2:6a:
                    36:45:f7:08:0a:5c:ce:ad:05:ce:50:cd:d0:0e:9f:
                    4f:58:d9:bf:48:ba:93:6d:13:99:3e:99:fe:7e:6f:
                    b0:f5:46:e1:5f:a1:9e:9c:37:52:f3:2b:ef:9b:5d:
                    2d:6a:aa:89:27:6e:fe:6d:f0:cb:4b:17:f3:34:f5:
                    9c:3a:90:55:1f:de:01:3c:22:80:41:99:36:77:04:
                    b0:81:34:50:ac:9e:95:51:9b:f7:22:47:7c:81:d2:
                    61:82:98:a9:72:61:42:2b:45:a6:92:3b:77:4d:4e:
                    67:43:01:56:03:77:88:46:2b:d5:58:b7:b9:c3:02:
                    da:25:e4:fe:0b:4b:66:7a:31:e1:19:f3:21:75:1d:
                    5f:78:9a:5e:01:53:56:ea:54:30:1d:73:73:73:08:
                    21:38:e2:0f:1d:66:ab:df:33:49:df:0e:e2:c1:ef:
                    69:e3:a4:be:c8:3b:4b:a8:6a:95:75:9e:97:7d:ca:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0B:50:D3:DC:36:BD:A2:BA:1E:6F:58:11:5E:6E:C4:4E:24:2D:C1
            X509v3 Authority Key Identifier:
                keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:59:6b:e0:59:61:bd:ed:2e:f9:5a:c5:c8:67:42:bf:9a:b2:
         d6:83:bd:fb:bf:79:32:06:46:9a:4c:01:30:92:65:f1:ad:9f:
         bf:5c:4b:73:db:d7:75:2d:ee:93:b2:6c:cb:13:08:90:c2:b1:
         0e:49:19:d1:1a:32:e2:fd:f7:00:89:c0:ff:22:6f:86:ed:64:
         4a:72:f8:93:6b:e0:6e:1d:ad:70:3d:7c:cd:f4:b1:23:02:c5:
         5a:8a:12:ff:c2:08:e5:93:8d:24:2d:06:14:ae:4b:d5:da:d8:
         11:91:f7:e7:92:e7:3b:99:d9:96:9f:c5:25:f2:64:c4:93:ed:
         51:f0:27:74:b4:75:7e:df:1f:a6:d2:75:75:69:53:96:45:b8:
         f4:4e:8a:88:1b:d4:a8:49:a0:37:bb:7f:86:3c:55:57:af:1a:
         c3:c0:a2:5b:69:5a:8d:b3:42:5f:99:87:57:70:2a:fb:70:f8:
         ec:25:3d:1b:a8:05:43:7b:0c:93:94:4d:a4:4c:5a:f0:3a:7f:
         c7:f1:d6:e3:40:53:4e:69:78:43:85:9d:de:71:ce:d3:6f:a1:
         8d:12:eb:3e:f3:2d:20:f4:d4:b5:2e:b6:7d:c0:6e:f2:eb:db:
         4f:b7:95:24:28:db:5e:7a:9b:fb:32:a4:b5:c9:15:69:23:c4:
         96:1f:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:08:49 2026 by rpki-client