Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          xlFNhHSTCSOwJM9e134Qof77HQTKUp4ewRTj0Q/IsZY=
Subject key identifier:   B7:B7:61:BC:CE:52:AD:AE:62:3A:D5:1B:83:CB:EE:12:58:62:F4:BA
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       019E1DFEB2D2530EFFBFAEE59EE2A01FB928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          1207
Signing time:             Tue 12 May 2026 21:01:31 +0000
Manifest this update:     Tue 12 May 2026 21:01:31 +0000
Manifest next update:     Wed 13 May 2026 21:01:31 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: DTuvZW1QjCO5BI5XGm7dL1fdBvQRcOr3KXDiah1WO0g=)
                          2: JHZzuCbY7H0te7-M11FOsaEJkB4.roa (hash: KwT//EDVtL7MXcat5zcL7S0XiNpCz55laXIuKNdqZ68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b2:d2:53:0e:ff:bf:ae:e5:9e:e2:a0:1f:b9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: May 12 21:01:31 2026 GMT
            Not After : May 13 21:01:31 2026 GMT
        Subject: CN=b7b761bcce52adae623ad51b83cbee125862f4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:7a:5f:98:66:96:ec:b4:a5:47:f7:3f:ab:
                    eb:5f:89:04:02:0c:e2:86:86:93:66:3c:5b:66:f7:
                    69:ea:92:75:7c:51:06:ad:08:aa:78:24:10:b2:d3:
                    9a:0a:8a:bf:17:e1:e8:71:84:9d:6e:99:a1:bb:76:
                    d2:32:61:71:d3:a2:8b:7d:00:d7:75:f7:28:c0:e7:
                    10:82:a9:8a:d6:d8:03:a1:29:c1:a5:02:80:da:f1:
                    f9:cd:53:94:61:d0:f0:8a:7a:64:f5:a1:aa:f1:73:
                    bd:be:9d:3e:76:2f:41:f4:b3:ad:56:6c:4f:61:73:
                    88:ce:86:d7:a1:2e:fb:01:16:e8:85:63:86:03:73:
                    6e:56:15:0c:9b:f1:d1:79:c1:40:62:f2:ac:0e:cf:
                    58:3b:a6:7a:14:ac:8a:d4:e7:9f:80:db:07:86:75:
                    25:f4:eb:b2:2b:66:de:6e:60:48:9b:e5:66:19:9b:
                    03:3a:ae:df:8a:94:92:a3:92:8a:5b:76:9b:10:1e:
                    09:86:e5:fb:b5:68:17:a0:f6:0e:6d:56:46:4f:0f:
                    b0:41:86:42:9c:2d:fd:c3:71:86:c9:3d:44:6a:59:
                    b3:00:c5:c3:d4:d5:7f:c4:68:10:02:7a:0c:bd:5b:
                    fe:3a:9a:dc:87:ba:8e:75:dd:4f:ad:59:09:5d:b4:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B7:61:BC:CE:52:AD:AE:62:3A:D5:1B:83:CB:EE:12:58:62:F4:BA
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:79:5e:af:f6:ad:5f:1b:29:97:c5:a8:d8:89:b4:ca:27:19:
         e1:e8:1f:03:e4:12:d7:65:ed:bf:17:32:8a:69:45:8b:f7:49:
         29:98:7b:d8:16:32:14:97:ff:26:a4:7b:9f:99:c6:f2:a7:6b:
         ce:94:a8:63:c4:dc:7c:33:54:be:67:bf:c5:85:a0:da:40:79:
         da:29:1b:71:b8:5a:ec:06:b8:5a:dc:df:e8:87:86:d7:33:ce:
         af:ea:a6:04:2d:20:9f:d3:df:87:a0:a8:47:a9:80:0e:f6:77:
         65:b1:59:12:db:83:50:d5:9c:ec:6f:49:f6:ae:95:1e:4e:b6:
         a7:ed:83:85:34:49:51:a9:f8:03:6b:7c:b6:01:18:1e:b4:35:
         21:74:3b:16:5a:ab:c1:4b:85:da:5a:b1:72:2d:6b:01:fa:e2:
         53:7d:11:90:bd:ee:f3:21:4e:7e:ce:d8:b3:07:08:2b:7c:f7:
         c6:7c:be:15:94:cf:e8:49:c1:c9:e9:a2:4b:6b:47:b2:cc:c8:
         46:c2:5f:9f:5b:8f:59:59:9e:b5:56:68:c4:fb:cf:eb:de:8d:
         f8:a1:2d:4d:49:42:4e:22:34:cd:05:95:51:97:d6:2a:e0:d7:
         58:10:79:63:d3:3f:bb:d5:03:31:4c:3b:17:9d:1e:f7:a7:a6:
         cb:82:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:50 2026 by rpki-client