Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          eOZvUlSyH/6pIPGCcEeuLAzjdgUgPYuc6PYdeWNDMf4=
Subject key identifier:   A8:71:78:F4:B2:46:9D:0E:42:B8:10:AF:0C:1C:0F:E3:16:12:05:C4
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       019E1E35B8794C0376008FEE796DD178322A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 22:01:37 +0000
Manifest this update:     Tue 12 May 2026 22:01:37 +0000
Manifest next update:     Wed 13 May 2026 22:01:37 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: ddGEFBNNJAKTmSJRN4L60DGqjdp6W+Zu4OQ38xemZ2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:b8:79:4c:03:76:00:8f:ee:79:6d:d1:78:32:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: May 12 22:01:37 2026 GMT
            Not After : May 13 22:01:37 2026 GMT
        Subject: CN=a87178f4b2469d0e42b810af0c1c0fe3161205c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:d3:ce:0f:89:44:86:54:7c:68:e6:77:07:
                    a2:32:9a:ae:34:20:70:84:f3:e1:cc:84:46:8b:7c:
                    f9:c5:1f:34:a5:de:4e:c2:ca:73:ff:6b:84:95:81:
                    36:a0:d7:83:da:48:40:4c:cd:92:45:2d:2b:73:78:
                    be:f7:97:c8:a2:19:f4:63:54:33:2a:30:75:2c:0a:
                    e6:ea:54:a5:22:b2:70:0e:76:59:ea:b1:9f:5e:86:
                    c1:8c:7f:44:6a:f1:67:2c:8e:c7:c9:46:3e:2a:92:
                    bb:8c:7e:cf:d9:5b:8c:ee:eb:50:be:4a:55:03:c0:
                    08:da:c9:8d:c6:a4:2e:46:25:72:53:00:81:7f:6e:
                    22:84:3c:35:1d:33:2a:20:c7:f9:2c:c8:6f:11:d8:
                    c3:98:62:26:60:22:2f:ab:59:52:43:2d:03:16:05:
                    71:3e:06:85:0d:94:5f:b8:de:8b:f0:c3:ea:b3:78:
                    46:42:38:52:f3:51:2b:f5:9a:46:01:85:90:83:b4:
                    66:f5:b6:40:18:0d:34:89:66:36:25:7f:b6:26:37:
                    63:c6:3e:6d:8d:38:77:c9:52:3b:14:a7:3c:52:54:
                    d7:a1:cd:84:82:d0:2f:d9:59:ea:3c:3e:e5:9d:bb:
                    89:6a:64:3f:09:d5:ed:ad:e0:27:00:0f:d4:27:b6:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:71:78:F4:B2:46:9D:0E:42:B8:10:AF:0C:1C:0F:E3:16:12:05:C4
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:95:df:21:b7:37:a0:e4:6b:9e:45:8e:c3:51:b3:de:ab:d5:
         8d:10:c2:41:1d:78:32:10:ce:8e:ff:b5:9c:8d:97:8f:fa:4e:
         a1:f0:fe:20:2c:c8:87:62:d6:43:a9:dc:00:6b:5f:6f:a6:2f:
         22:b2:a4:f5:d5:f3:73:92:f6:52:5e:b4:5c:cb:01:54:cf:e4:
         d7:ed:cf:2f:11:fc:a6:32:0c:36:7f:71:9e:41:9c:d7:25:73:
         ef:6b:2a:f3:bc:24:11:81:da:20:60:0e:6f:7a:5d:3c:44:7d:
         f3:a7:f4:d0:e4:b6:55:b0:23:ed:6c:d6:d7:3d:6d:77:e4:63:
         6d:68:f6:aa:39:6e:77:87:a4:f5:89:61:a4:c1:94:6d:32:d1:
         ff:44:5c:c5:0a:03:f8:27:0d:08:a7:76:05:85:af:15:9a:e8:
         29:04:a6:00:88:a1:33:f1:37:be:18:d8:1f:13:f7:46:34:08:
         44:e9:7f:79:30:65:e9:37:01:98:73:43:72:b3:e7:1c:d7:9e:
         ee:fb:4e:56:43:8f:2f:03:ab:4a:7b:bb:b0:83:b6:65:90:9e:
         bc:e1:f5:af:49:9a:dc:e9:cf:51:f9:3f:3d:a4:84:ef:07:bc:
         b9:f4:96:5f:a7:98:05:8d:c5:d2:00:31:6e:08:7c:e8:32:7d:
         ec:a6:c6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:13 2026 by rpki-client