Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File:                     49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier:          tAN8xOIaqCjSMTyr9i5WwC6XF8zrv3CkOKkPOTULPxg=
Subject key identifier:   0A:DB:2B:70:99:F5:BE:E5:74:BD:EA:00:41:71:90:A4:C7:82:DB:C6
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer:       /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial:       019E1D59CFA550444BF18877A114438AEACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number:          F6
Signing time:             Tue 12 May 2026 18:01:25 +0000
Manifest this update:     Tue 12 May 2026 18:01:25 +0000
Manifest next update:     Wed 13 May 2026 18:01:25 +0000
Files and hashes:         1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: 6DOmN0caAVOdaIh4OF+sPiAMSH9CNcnBbjMZ26We1Wo=)
                          2: KIZ8Qo_Osa0eeRKHpCezFEWpt38.asa (hash: BUCO47iMjOX10Oz4gqlvyalBtDL8T56NMGskn473Wu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:cf:a5:50:44:4b:f1:88:77:a1:14:43:8a:ea:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
        Validity
            Not Before: May 12 18:01:25 2026 GMT
            Not After : May 13 18:01:25 2026 GMT
        Subject: CN=0adb2b7099f5bee574bdea00417190a4c782dbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:63:40:50:d5:b7:ea:f7:95:f6:73:f9:cd:
                    4b:86:a6:e7:70:61:0b:28:19:79:79:24:6c:cb:ec:
                    87:cd:db:9a:21:fc:38:3b:a8:e1:d5:5e:b8:d7:1f:
                    8b:8a:3c:5f:a5:fe:7f:59:34:16:49:bd:c3:2a:f9:
                    09:b2:1f:78:a0:2a:02:bd:93:70:b3:e1:11:72:0b:
                    b7:9a:62:59:3e:8e:a2:f2:83:60:47:90:fd:18:cc:
                    0d:a7:50:d3:fd:1b:d7:28:de:75:a1:2e:d3:84:38:
                    c3:c3:a5:34:ee:03:e4:72:4f:e7:53:c6:54:fe:bc:
                    b5:33:60:6f:58:42:6e:66:49:21:3b:31:9c:7a:77:
                    eb:d7:fb:24:9d:c4:54:42:1c:bf:d1:20:d2:25:89:
                    33:aa:31:76:90:54:21:fb:f5:8f:29:d7:35:b1:f8:
                    62:66:c1:5a:e4:4d:91:b8:02:d4:c4:c3:8b:13:d6:
                    87:8e:68:5b:d0:d0:7d:85:ed:b3:7a:d9:35:12:a7:
                    3a:fb:5f:d8:0b:bb:b2:22:3d:20:10:ed:e6:74:27:
                    41:38:35:96:c1:a6:df:22:7e:89:09:74:b0:5f:92:
                    91:3f:a7:93:e6:79:d1:7c:1b:d0:ab:d0:ff:73:70:
                    dc:d9:79:3d:30:e2:b2:a6:87:c2:16:c5:91:4c:a6:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DB:2B:70:99:F5:BE:E5:74:BD:EA:00:41:71:90:A4:C7:82:DB:C6
            X509v3 Authority Key Identifier:
                keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:c1:8d:d5:29:67:4e:4d:e6:63:92:4c:f7:97:28:7a:4f:
         c4:f1:f7:e1:48:6c:0b:ff:32:09:30:a0:f4:ab:f8:68:29:f8:
         0a:35:73:f2:01:2f:6d:95:1f:2f:03:6d:2a:12:a5:3f:71:50:
         79:83:f2:17:6d:27:9a:8d:d7:e8:ec:cc:86:ac:b3:56:ee:66:
         70:9c:db:b3:bf:c2:6e:7a:9b:54:f2:6e:18:1b:6e:09:49:c0:
         fb:61:88:09:b0:c5:64:6f:59:33:5c:ef:28:ac:30:19:2c:0b:
         7b:a4:73:5c:67:64:f7:8f:67:84:21:83:3f:a5:96:bd:ee:27:
         46:ef:ba:7a:4b:66:30:63:fd:aa:42:b2:51:da:8b:8a:ef:f0:
         70:07:a2:99:26:b8:e1:5f:b6:17:23:54:3b:1d:f1:46:7f:f7:
         58:fc:2f:20:c4:ac:de:f8:e1:1b:a8:c9:73:24:f0:bf:d3:d7:
         f0:69:b5:25:2b:62:ec:8b:a8:39:87:b5:38:bc:8e:59:69:20:
         2f:a0:c2:8f:97:8f:b4:6f:1c:1e:f3:db:16:ea:fb:96:63:75:
         82:89:7f:7c:15:13:50:74:85:64:4a:c5:f4:25:ee:c6:e6:b0:
         86:5c:ad:69:bd:d6:6f:e0:f1:6d:df:70:1e:3a:9a:f1:c6:41:
         b4:28:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:57 2026 by rpki-client