Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File:                     6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier:          +mqoEq4kzKl74+WsQkDycP/AekW90d7dMQYnw1Iw9EA=
Subject key identifier:   67:AE:B9:E9:2C:EB:85:32:B0:A7:F9:6A:83:D8:4C:70:29:2C:D0:14
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer:       /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial:       019E1F10F05C654FB0BA1291B09EF062FE98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number:          1301
Signing time:             Wed 13 May 2026 02:01:04 +0000
Manifest this update:     Wed 13 May 2026 02:01:04 +0000
Manifest next update:     Thu 14 May 2026 02:01:04 +0000
Files and hashes:         1: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: P8J1R2ka2Cpjv6uEs+LK3m1SCf7hZm/7/GxWIseLKyE=)
                          2: SjzLfenUX4kznR2y8ruZeOnFvmw.roa (hash: vzCbx03F8+rxM1liQuyxsAk6fpt98wQC2kvOe4mhFm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:f0:5c:65:4f:b0:ba:12:91:b0:9e:f0:62:fe:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
        Validity
            Not Before: May 13 02:01:04 2026 GMT
            Not After : May 14 02:01:04 2026 GMT
        Subject: CN=67aeb9e92ceb8532b0a7f96a83d84c70292cd014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:2a:a7:38:29:3c:b8:d8:ab:6a:d0:38:51:
                    29:65:7a:e1:cf:78:a4:0e:31:6e:f3:fb:04:67:ec:
                    7f:fe:82:91:a9:6d:25:7e:3e:5f:82:6a:b8:5d:65:
                    e9:3e:54:cb:1c:83:d8:e7:30:1a:11:d0:66:11:56:
                    e3:07:33:b0:79:01:02:63:7a:5d:0a:ee:32:ad:7e:
                    b1:1c:b6:ce:87:55:81:9b:05:e7:ae:da:e0:7a:d5:
                    03:58:ab:9e:a7:f8:00:af:f4:05:43:0c:d2:c5:d3:
                    cd:e8:47:1a:ae:ed:c9:e6:da:39:cd:09:95:69:9f:
                    b6:da:31:7a:36:1f:8a:13:d9:4e:07:bd:7a:d2:0e:
                    b5:99:ba:e8:8a:f6:0e:ed:28:25:83:68:02:dd:ce:
                    1a:1b:e5:35:e2:12:08:b3:00:52:62:eb:dd:20:b1:
                    d3:e3:f7:a0:c8:32:e9:f8:fc:35:9e:8d:86:e2:f8:
                    79:a3:8a:03:a4:36:fc:3a:02:3d:56:32:6e:b5:86:
                    66:37:b1:a0:42:e3:bf:d7:ec:70:f3:a9:de:33:65:
                    fd:76:a5:11:2f:fb:b5:45:04:c8:46:d5:07:a6:4a:
                    4a:db:d4:21:84:6f:b2:f6:ae:a9:25:b6:73:5e:24:
                    8c:2c:c3:bf:bd:fa:6c:ac:a6:74:20:61:e0:0d:0d:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AE:B9:E9:2C:EB:85:32:B0:A7:F9:6A:83:D8:4C:70:29:2C:D0:14
            X509v3 Authority Key Identifier:
                keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:04:d7:f0:a7:d9:48:a2:b9:84:a2:50:d2:38:a8:40:57:9b:
         9e:3d:b6:c4:78:71:f1:59:79:02:d4:69:2e:b8:7b:63:a7:7c:
         c3:49:93:0f:65:a3:d2:fd:22:99:aa:72:6d:4b:49:98:dc:dd:
         2c:ea:d7:3a:0e:16:fe:c6:5e:51:55:b2:c8:57:5b:49:f4:ed:
         e5:c2:7c:51:78:91:14:fd:c6:5f:9b:94:ad:07:2d:71:ca:c8:
         7b:79:38:f9:c2:30:00:57:9d:a5:a2:52:65:a4:a5:46:2e:01:
         ed:ab:97:6d:79:d5:5c:44:69:97:51:40:4e:9f:5f:e4:a6:ea:
         09:48:1f:bd:c7:9b:4d:68:43:3c:0d:c2:87:93:56:75:92:44:
         59:79:4e:f5:1e:4a:8b:5b:01:fd:17:95:38:18:ad:f4:57:b5:
         27:71:e2:24:19:67:cd:1e:33:57:9a:01:13:86:c5:cf:13:b8:
         eb:ee:ca:25:ae:72:75:7e:3c:84:1d:79:58:94:cf:0c:8a:ff:
         b7:e3:5c:86:f8:1e:c7:d6:c4:83:09:bd:4a:dd:7f:3d:9b:f2:
         0d:64:3b:da:79:00:9a:03:69:b2:30:d9:11:3a:e3:74:33:43:
         34:24:91:36:25:00:88:ee:d0:a9:75:6a:4b:ff:7e:d6:49:31:
         7e:be:a6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:20 2026 by rpki-client