Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File:                     6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier:          zVzrgDdp/kB0ZTAQL6uZBbiMqpuj7dk6UajBAbnYDKw=
Subject key identifier:   5F:30:BB:20:CE:80:07:79:BD:28:23:6E:7F:33:77:AD:83:C2:C7:61
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       019E1CB545128D7140CA5C9AEB530B703508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number:          1703
Signing time:             Tue 12 May 2026 15:01:42 +0000
Manifest this update:     Tue 12 May 2026 15:01:42 +0000
Manifest next update:     Wed 13 May 2026 15:01:42 +0000
Files and hashes:         1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: m8V3TNdp6phPhUIPJEZHZbGp4hF1D/kJQMPWcz+Yp74=)
                          2: wEZCw-VLeU1jpA57GhD5o-3uPdI.roa (hash: 1vJM+R9B72RBGk03v5ie3GqXY2ZDTLcLKiRAG44iQm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:45:12:8d:71:40:ca:5c:9a:eb:53:0b:70:35:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: May 12 15:01:42 2026 GMT
            Not After : May 13 15:01:42 2026 GMT
        Subject: CN=5f30bb20ce800779bd28236e7f3377ad83c2c761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:7b:26:13:38:b0:27:a7:4a:8c:8d:bd:a6:
                    96:44:fe:c0:51:a3:78:86:a8:d2:44:84:7c:bc:f9:
                    23:c1:ba:0b:79:e9:ce:e3:14:6f:50:d0:b3:1f:99:
                    62:9c:ee:78:8e:c8:cd:78:38:b4:39:05:ce:73:8d:
                    c3:31:59:89:7c:d5:16:0e:39:4c:31:2d:bd:09:ad:
                    e3:ed:36:da:0e:a2:db:22:c5:fe:42:7d:82:76:7b:
                    07:a3:4b:64:ac:ce:b3:25:ad:3e:58:ba:04:19:8b:
                    7c:bd:f4:18:4c:fd:60:5c:46:b1:5e:bb:44:ae:30:
                    be:40:43:75:68:0a:1f:a7:93:7e:b1:82:47:fb:9f:
                    d6:8c:f0:89:3b:c0:1d:d6:a6:19:7c:5c:35:cf:34:
                    f9:86:79:c6:41:62:d3:8e:b9:a4:da:18:52:97:96:
                    1d:06:a0:7f:29:da:bc:f9:12:a3:2d:6a:dc:78:f8:
                    a0:4e:c6:ac:09:41:6d:4a:da:e0:81:f3:02:36:20:
                    5e:fd:6b:11:11:39:68:b8:1b:e9:dd:9e:38:46:e5:
                    02:38:f6:19:c6:0b:1b:ce:f6:9d:12:d3:18:82:38:
                    84:df:62:26:5c:2a:07:2d:31:6c:cf:7b:55:5f:8f:
                    ee:3f:0a:99:ae:e9:02:e4:b1:c4:85:2d:30:ce:38:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:30:BB:20:CE:80:07:79:BD:28:23:6E:7F:33:77:AD:83:C2:C7:61
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:0f:d5:08:35:e7:17:c9:2a:c0:8b:4b:49:7a:c1:91:ac:
         b0:06:4a:da:0f:0b:9e:c3:0b:0d:b9:e1:07:40:32:8c:62:1d:
         c1:6b:24:71:08:92:d2:47:0b:50:fa:ac:8c:ac:4f:b4:4b:37:
         5a:e5:20:f8:b1:df:a9:c3:2c:e3:80:0e:f7:4c:4a:6b:2e:31:
         24:5f:b1:50:04:35:74:68:36:b9:a4:cb:31:5c:ba:f8:a7:50:
         7c:ac:2c:7c:4e:1c:48:58:11:0e:45:de:6f:7b:a5:ad:52:26:
         e4:00:f0:f0:7f:28:96:80:da:f2:de:f4:f8:0a:3c:32:44:8d:
         36:3c:e2:56:f7:4e:40:37:6c:b9:1d:5d:60:97:22:34:d7:81:
         0d:56:89:b3:a0:df:46:e9:15:48:2b:ce:a2:76:c4:89:9c:96:
         04:aa:3e:e2:17:3c:27:fd:bf:5c:3d:f2:fb:03:9f:d7:65:9f:
         de:68:fb:2c:11:c5:48:d3:15:d8:d3:6f:06:ed:74:4d:d1:17:
         d3:9f:26:04:bd:77:ef:88:b7:1d:d2:8d:34:6a:20:61:5d:b0:
         9c:98:7c:9f:47:7b:28:b7:ff:f6:1b:e0:32:56:c7:4f:36:79:
         9a:23:8d:58:4b:41:a3:5a:a8:99:ff:2b:80:40:be:ce:c4:d6:
         6c:f6:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:39:58 2026 by rpki-client