Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File:                     6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier:          WastTIoDvsAETNILoJsf1Orb6RBCU83fEGn5si26nBI=
Subject key identifier:   F7:AE:CC:95:17:98:1C:AB:53:48:C1:9F:21:26:CC:C0:C5:08:5B:FD
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer:       /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial:       019E1C7DFC52C7C2E8E550B0179EAEAB91B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number:          03CF
Signing time:             Tue 12 May 2026 14:01:19 +0000
Manifest this update:     Tue 12 May 2026 14:01:19 +0000
Manifest next update:     Wed 13 May 2026 14:01:19 +0000
Files and hashes:         1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: 2/4bOuaHCPN/2ITMo+59+14SEBvN15Lam17hE3nzIgA=)
                          2: hkxJH8qDns81hHO_TEwuH8z_Eac.roa (hash: WI/ahDUF+5IzjpWVPH44VyOD7TChtaZ1JW84a/hYGec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:fc:52:c7:c2:e8:e5:50:b0:17:9e:ae:ab:91:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
        Validity
            Not Before: May 12 14:01:19 2026 GMT
            Not After : May 13 14:01:19 2026 GMT
        Subject: CN=f7aecc9517981cab5348c19f2126ccc0c5085bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:ae:fc:cf:a6:2e:72:02:eb:27:83:d5:cf:
                    c8:26:50:a5:15:e8:de:3a:ca:39:be:e8:34:2e:df:
                    56:bb:8f:d7:57:52:c5:50:13:52:41:58:8c:f3:25:
                    f8:b4:d7:89:60:42:89:c4:55:21:a2:a3:a1:5c:db:
                    81:5f:71:cd:94:93:4e:71:ae:83:b8:dc:90:51:ba:
                    cd:21:46:a2:f6:93:7c:4b:09:01:36:5a:c2:d4:b4:
                    95:00:72:76:67:c5:c7:df:18:c0:f4:5a:07:93:6d:
                    1e:94:c9:ab:5a:7a:2a:7f:47:ca:68:54:56:32:2c:
                    ba:4e:f1:43:aa:ef:3f:4c:32:43:17:3e:b5:0e:db:
                    e3:24:62:39:36:b3:4c:71:c7:dc:b7:cb:70:1e:ad:
                    05:7b:ae:7e:44:e2:36:7e:4c:40:94:52:8d:71:7a:
                    50:43:f9:66:c3:64:8f:9b:1a:8b:11:53:06:19:82:
                    ad:82:21:5f:cf:c6:4e:c7:dc:f9:85:4d:05:ed:11:
                    f4:11:5b:f8:ee:26:15:c0:75:62:81:e1:62:2d:0a:
                    32:52:6d:9c:74:8d:a0:ae:ec:35:9c:b5:2a:08:4b:
                    67:30:ad:23:59:32:ad:32:89:b8:ef:d2:70:10:96:
                    d7:e3:92:21:8a:c4:69:97:06:5b:85:bc:17:83:8a:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:CC:95:17:98:1C:AB:53:48:C1:9F:21:26:CC:C0:C5:08:5B:FD
            X509v3 Authority Key Identifier:
                keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:f4:ee:7f:fd:99:30:bd:72:10:f0:47:57:17:8e:b7:b8:
         ab:36:f3:88:76:90:27:f5:79:41:4e:40:78:66:5c:91:93:f2:
         4e:60:3f:51:63:ea:57:4d:99:f0:36:32:8d:fd:2c:5f:2f:6d:
         8d:33:5f:c1:1c:97:d8:08:ac:21:fa:e0:20:6d:ed:bc:a8:d8:
         1e:28:62:24:44:79:d4:ed:da:c0:05:e8:3e:23:ad:a9:63:70:
         8a:5c:59:6b:3c:aa:2c:4c:f5:9a:ac:91:1e:a9:27:13:cf:7a:
         f0:0f:06:d8:83:07:74:a8:04:dd:f3:7e:e6:15:fb:67:ca:55:
         e0:5d:e9:29:09:1b:c4:93:0e:02:b1:bc:db:3d:3c:1b:5e:25:
         dd:62:cf:5c:ce:fc:d6:72:0d:89:94:66:c7:d8:6d:d8:bc:da:
         9f:32:e0:cc:88:96:fc:f8:eb:1a:0e:46:12:43:00:c7:09:ab:
         8f:68:e9:d2:63:ff:b2:34:77:2c:a5:2b:02:90:34:b5:d0:c1:
         3c:86:3c:58:d0:bb:d5:d0:27:70:93:b8:6d:9c:e0:7f:09:7d:
         dd:77:70:dc:07:45:3f:0b:d5:bb:ce:60:ca:73:be:91:0b:9a:
         ca:0a:b4:dd:cc:02:89:a3:f8:02:d0:48:6b:bf:d8:82:22:00:
         00:6a:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:21 2026 by rpki-client