Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          3TSS3gBIEs3fOaaRMHBnFTF5tJ1kqk+bQtg8JDhQ4YA=
Subject key identifier:   C9:3D:59:86:17:AC:93:57:2D:AB:CA:36:5E:21:43:F3:5D:5A:B3:AE
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       019E1EDA471976725A8E8446BB308314B631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0FFC
Signing time:             Wed 13 May 2026 01:01:21 +0000
Manifest this update:     Wed 13 May 2026 01:01:21 +0000
Manifest next update:     Thu 14 May 2026 01:01:21 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: qw/Qn6ausQQGaHOWtMzrOhQV+kICAt3lHIK0TPH6bS8=)
                          2: r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa (hash: ekj20SSmXzNkPCb5b7krZxHKnMBgi0MEQBHep36Ait0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:47:19:76:72:5a:8e:84:46:bb:30:83:14:b6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: May 13 01:01:21 2026 GMT
            Not After : May 14 01:01:21 2026 GMT
        Subject: CN=c93d598617ac93572dabca365e2143f35d5ab3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:f2:66:4b:50:f4:9b:fa:e9:71:51:c9:93:
                    d3:eb:d3:fd:60:ba:cf:9e:0f:00:b3:3f:c6:a0:0d:
                    19:75:7e:82:11:d5:a1:e5:2f:61:45:93:3d:da:ee:
                    01:68:1a:f1:09:9d:9a:75:fa:de:53:22:a0:6c:ba:
                    79:3f:ac:44:ed:26:a0:08:80:48:7d:50:33:6f:81:
                    8b:57:34:f4:ca:5c:55:8a:0e:55:c9:47:42:b9:fa:
                    3c:d6:8b:0f:cb:44:20:3c:f4:de:7d:d4:5b:b9:a5:
                    f1:02:25:b5:38:96:a5:18:03:41:fd:d5:1e:64:e6:
                    c6:cf:b7:b9:cf:81:91:44:54:d4:88:51:e1:c9:be:
                    22:2e:85:34:06:f8:54:1b:76:28:2d:93:98:ef:93:
                    a3:27:f6:24:e9:9d:7d:4f:2a:fc:ee:3b:6b:5b:e9:
                    39:de:51:01:29:9e:ae:63:f8:69:85:63:97:cf:c2:
                    fd:c6:b1:20:7e:0b:e6:67:f8:65:c7:10:11:ef:da:
                    eb:7b:e0:fe:a3:fe:2b:25:e5:98:20:25:fe:d2:f3:
                    8f:3f:37:6b:88:3b:76:ec:44:91:20:72:03:5e:4a:
                    80:d5:e7:72:34:28:e7:fc:e4:99:0d:9d:5c:db:e2:
                    1d:f5:6e:81:05:3c:ed:13:4e:eb:0a:76:25:e6:dc:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3D:59:86:17:AC:93:57:2D:AB:CA:36:5E:21:43:F3:5D:5A:B3:AE
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:30:8f:88:7a:e6:09:5b:3b:ce:5c:b5:f8:54:c8:38:80:9e:
         99:37:fd:10:74:c2:ff:33:74:e0:2e:ba:90:2b:bd:73:58:40:
         f7:75:ea:d8:33:ef:c5:32:29:dd:a1:dd:46:a4:07:8f:ae:e9:
         2c:02:6e:f9:69:6a:01:d8:c7:6f:9f:67:94:55:76:b6:e7:02:
         9b:45:25:08:27:b7:24:82:67:3d:b7:ba:dd:8e:0f:88:c3:9e:
         c5:76:a3:fa:f2:d6:39:51:35:ac:8d:77:a6:43:49:7d:96:4a:
         f1:c6:9d:a6:aa:27:b9:ca:83:63:48:2d:6f:d4:39:f0:f7:55:
         39:09:06:c0:2d:a5:2d:54:60:49:cb:02:a6:0f:4a:99:99:a0:
         2a:5e:35:93:9b:f9:a7:ea:e8:b7:e3:4f:59:d4:de:54:70:7c:
         4b:d9:b4:fd:f3:65:75:a6:5f:1e:ae:68:f1:f0:30:de:b1:ac:
         96:1e:85:4c:b2:1a:97:ef:78:ec:a5:e3:bd:d6:0d:27:94:ae:
         36:a2:a5:a4:25:53:b1:de:c9:8e:49:79:5d:2d:06:63:7c:4f:
         d6:2b:84:d1:56:d3:b8:36:36:2e:d0:21:af:f4:20:c3:e3:cf:
         c5:cc:e7:70:07:22:b4:2d:a3:f0:d6:91:1e:48:a8:9f:7d:82:
         c7:05:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:50 2026 by rpki-client