Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
File:                     6O49Zbp3JHe5IjKroRTJtnDa38A.mft (raw, json)
Hash identifier:          ttlYmMkyehWvSTQcGXR8OjtA6wOKQqxefuU+Kztd7+c=
Subject key identifier:   D0:63:08:0E:D8:94:F5:BF:5F:F7:53:B3:D7:76:2B:AC:F8:CE:6F:38
Authority key identifier: E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
Certificate issuer:       /CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Certificate serial:       019E1CB4EEF988834EA86AAE6B2366D9C2A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
Manifest number:          029E
Signing time:             Tue 12 May 2026 15:01:20 +0000
Manifest this update:     Tue 12 May 2026 15:01:20 +0000
Manifest next update:     Wed 13 May 2026 15:01:20 +0000
Files and hashes:         1: 6O49Zbp3JHe5IjKroRTJtnDa38A.crl (hash: Z2DdmwK5fH75Z6uSPNTRUJMMZ+SHjpfw4DD9N+HcZ1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:ee:f9:88:83:4e:a8:6a:ae:6b:23:66:d9:c2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
        Validity
            Not Before: May 12 15:01:20 2026 GMT
            Not After : May 13 15:01:20 2026 GMT
        Subject: CN=d063080ed894f5bf5ff753b3d7762bacf8ce6f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:76:2b:68:91:34:c1:58:47:8e:ae:f7:58:
                    e4:f0:17:99:8c:36:2f:44:10:7f:58:8d:ba:2e:75:
                    f8:65:60:b1:0b:3f:05:25:d0:98:cb:4b:a2:ab:41:
                    43:e5:f8:6f:d7:5e:c0:46:13:ba:e2:b7:8b:3d:cf:
                    47:13:91:14:c8:42:85:9e:a1:b9:cc:d3:28:fd:c1:
                    3f:e9:bd:bd:af:31:ec:66:74:9b:21:6a:09:ab:23:
                    91:35:5e:73:d2:51:8a:41:1d:7b:c0:31:cf:8a:d2:
                    d6:de:b5:04:67:bf:d1:10:85:f6:76:7f:09:0e:db:
                    11:29:3e:3a:76:de:08:e4:f9:47:db:c8:30:27:fb:
                    ac:62:1f:19:59:7b:43:a0:4a:4d:12:41:ce:92:af:
                    8d:7f:bf:ac:35:1d:11:32:cf:67:2c:fe:e4:e3:fb:
                    c7:b3:e8:1c:7e:d5:4b:49:35:28:e0:2b:55:35:c9:
                    6b:d8:88:c9:4e:dc:45:32:94:2d:87:72:05:e0:b7:
                    d7:44:07:ac:5a:35:a4:5b:ac:43:4f:87:e1:09:4a:
                    26:2b:8f:7c:02:ff:6a:04:c8:10:29:1a:d9:7e:53:
                    97:4d:77:4b:ef:09:03:3d:f2:47:1b:d7:37:bd:d6:
                    15:30:b1:eb:35:a3:db:a7:bf:49:d5:fb:d6:b8:9c:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:08:0E:D8:94:F5:BF:5F:F7:53:B3:D7:76:2B:AC:F8:CE:6F:38
            X509v3 Authority Key Identifier:
                keyid:E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1c:24:0e:0d:3e:4c:c4:e3:53:98:a0:28:2a:63:b7:a7:8a:
         ba:69:5c:f5:f7:c0:ac:48:1e:5b:aa:3a:f4:89:af:c5:9f:11:
         1b:d4:a5:5d:96:ec:9d:c8:14:bf:12:2a:f5:86:30:2e:04:9a:
         04:2b:0d:39:55:69:19:51:a4:a2:20:ae:de:e4:1d:d4:76:06:
         cd:a9:2b:78:4d:25:ce:4e:f2:e7:05:fd:43:0c:5d:c3:08:48:
         b9:a3:4e:a8:b7:03:7e:37:d9:75:e6:cb:6a:52:22:a8:71:45:
         cd:c2:cd:6a:d8:a6:23:f8:71:53:c0:79:bf:17:01:a7:42:1d:
         c3:90:5c:e5:fc:e2:ad:51:4d:b5:3c:00:fe:64:68:fa:b9:27:
         e3:a7:46:b9:0d:4b:46:25:af:94:fb:a1:b8:ad:35:21:25:b4:
         aa:d5:72:f7:49:64:2c:00:88:66:0d:0c:ee:e6:57:59:6a:f6:
         27:dd:f8:21:70:57:1a:b7:1b:59:aa:d8:52:f0:a1:0a:42:d8:
         ed:1b:96:b6:77:06:ba:03:21:9a:6b:0d:4d:39:d1:ee:d3:73:
         f8:03:ce:50:bd:c7:b5:44:40:fd:ac:f0:dd:81:43:35:d6:c1:
         34:f1:89:35:ee:fc:d5:12:b2:81:ec:df:d0:7a:42:6d:2e:c2:
         a0:09:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:26 2026 by rpki-client