Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File:                     6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier:          JX1rWfHhcsbqrgbqaYRnuxW0H7Uhdc8ZsMC4e5vJ/sg=
Subject key identifier:   76:2D:F9:41:3B:68:10:75:22:13:5E:7D:33:29:98:AA:F5:F7:E8:84
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer:       /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial:       019E1D90E0D69B50EC5E6937BB2D42D0E3F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number:          10A4
Signing time:             Tue 12 May 2026 19:01:34 +0000
Manifest this update:     Tue 12 May 2026 19:01:34 +0000
Manifest next update:     Wed 13 May 2026 19:01:34 +0000
Files and hashes:         1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: ZFjF3+9qMbjLfaDCpOhfjCCDB3mxmPRSGmeC2rPa/Ms=)
                          2: vGQ0FlfBg9HurxXzBHSCF8IWFRQ.roa (hash: vG2KyLa3eKD4ni6LSYbmZcxZgH0oTjxPgZTSDvuGGJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:e0:d6:9b:50:ec:5e:69:37:bb:2d:42:d0:e3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
        Validity
            Not Before: May 12 19:01:34 2026 GMT
            Not After : May 13 19:01:34 2026 GMT
        Subject: CN=762df9413b68107522135e7d332998aaf5f7e884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:74:09:e3:2e:be:04:d3:86:87:93:34:a0:c6:
                    10:f3:f3:a9:6b:65:9b:2f:26:6a:e5:31:7e:0d:19:
                    0b:15:24:c6:bf:00:0c:24:59:2b:e6:38:b5:39:1f:
                    6f:34:17:ec:fa:ac:ae:35:f1:99:c0:6c:5d:95:ad:
                    b0:be:9d:ab:08:02:73:36:2d:0a:0d:c5:70:60:ee:
                    9e:49:6d:6b:3a:69:c8:d7:a7:94:0d:1b:30:8c:08:
                    31:0e:47:e2:44:77:6e:7d:29:a4:90:52:2d:65:2b:
                    c8:07:8d:68:79:9d:08:cb:3e:5d:1f:20:f2:16:04:
                    48:80:02:57:62:95:af:68:1a:92:67:00:7e:e5:ea:
                    e5:08:fb:74:3c:ba:a8:32:8a:21:e8:f2:78:b9:53:
                    41:82:fe:a2:6b:39:61:24:ca:7e:81:bc:32:fa:d2:
                    10:c4:99:4a:a7:c8:cb:91:37:14:aa:ac:2d:b1:85:
                    ac:35:1d:93:77:c4:40:98:17:0e:80:c5:38:7f:6b:
                    57:db:24:16:1f:6b:27:e8:bc:79:42:cf:66:06:31:
                    23:53:72:1b:19:c6:80:2f:ee:3d:52:e2:d3:d4:e7:
                    a4:21:2d:1c:1d:0e:d8:be:dd:fb:09:da:64:d3:5f:
                    a6:37:49:6c:18:e5:84:08:51:11:b9:5c:b2:b4:8d:
                    d1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2D:F9:41:3B:68:10:75:22:13:5E:7D:33:29:98:AA:F5:F7:E8:84
            X509v3 Authority Key Identifier:
                keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:a5:fc:94:eb:82:ab:e6:c0:dc:94:03:39:94:c8:b4:0e:78:
         fb:92:7d:78:40:33:4b:e8:03:8b:f4:33:b1:14:12:bf:58:09:
         e9:d1:66:b7:6e:c6:3f:aa:32:e5:6b:a0:9c:62:2d:ee:2d:b9:
         cd:4a:69:fd:fd:3b:92:0d:65:49:fd:86:39:ed:97:8f:d8:6d:
         da:9f:73:f4:c3:f0:1a:1b:62:11:0f:34:cd:ac:dc:99:db:d6:
         9b:e2:83:27:04:80:11:47:67:5f:d1:6a:c4:d0:8a:7c:e2:ef:
         82:37:65:e1:87:45:fb:6d:29:79:38:18:f4:95:bd:c1:45:5c:
         a8:17:f5:00:15:4d:8c:84:3a:a9:b4:37:11:e1:ee:c3:e4:f4:
         8f:c1:ae:e0:06:a3:42:1c:c6:75:fd:93:cd:7e:25:27:d0:5e:
         46:a9:2b:26:8d:6f:0b:8f:fd:db:27:6a:d8:3e:16:b2:1b:bc:
         68:c1:8e:2a:ef:c8:9c:1c:1e:3c:af:15:3b:b2:2f:9e:8f:98:
         e6:e3:32:03:ba:a1:99:9c:0d:5c:68:4e:ae:cf:61:75:c5:75:
         5f:f9:32:49:7d:48:d9:28:ed:5e:fc:c2:96:51:69:15:a2:09:
         f8:bd:b4:c2:95:2a:01:e9:de:74:c3:2b:18:82:8f:c6:52:ed:
         2c:66:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:16 2026 by rpki-client