Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
File:                     ahjtHt_p75yYdyAyDp28ketQWa0.mft (raw, json)
Hash identifier:          A3wXYUvlEqKW5R2GROdKqEq+FdDCpfC/ZC1YY+zLV6g=
Subject key identifier:   C2:90:E0:23:64:82:A7:19:AE:83:04:EB:69:D5:3D:18:F8:FD:93:CD
Authority key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Certificate issuer:       /CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Certificate serial:       019E1D595305063FF45B3D01596222A928EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
Manifest number:          D6
Signing time:             Tue 12 May 2026 18:00:53 +0000
Manifest this update:     Tue 12 May 2026 18:00:53 +0000
Manifest next update:     Wed 13 May 2026 18:00:53 +0000
Files and hashes:         1: ahjtHt_p75yYdyAyDp28ketQWa0.crl (hash: 6g3GtHaAHagc40zIsu0D4PwifSP+lmUddVQPBLZxOPU=)
                          2: cVgf6zYHcxsLW9bXFfBT2wbbXtY.asa (hash: e9U9Ggfq0Q0bxFuYqJQPA4Kvtu4sRsMsGLECB9T3Dnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:53:05:06:3f:f4:5b:3d:01:59:62:22:a9:28:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
        Validity
            Not Before: May 12 18:00:53 2026 GMT
            Not After : May 13 18:00:53 2026 GMT
        Subject: CN=c290e0236482a719ae8304eb69d53d18f8fd93cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:0a:8b:26:01:d6:67:a7:a6:77:d3:68:4c:
                    2f:5c:cf:30:97:16:b9:b0:87:8e:74:87:eb:52:ec:
                    e7:3b:69:5a:93:35:08:40:28:f0:a4:9a:82:16:77:
                    e0:74:5b:14:6b:c5:4a:85:79:f0:ea:bc:8c:df:ba:
                    82:4e:7d:f2:93:c9:53:f3:59:29:24:80:af:59:87:
                    16:67:3e:84:ee:30:d7:8d:45:1d:f8:8c:a2:08:e4:
                    61:7a:44:0f:a1:f6:bf:99:b5:14:00:44:1b:e3:49:
                    d5:33:13:3f:07:9c:18:97:0f:71:f7:11:b9:a0:3b:
                    e5:c0:2c:bc:6e:29:28:1a:83:fc:b9:cb:ef:61:05:
                    7a:40:a0:65:24:03:bf:72:e5:62:e5:68:e8:9f:3c:
                    ea:5d:fe:be:c9:74:08:ea:34:57:37:bc:6d:e5:00:
                    f3:56:e6:6d:75:65:ca:f7:79:2f:64:23:01:64:b1:
                    db:ca:31:22:3f:a0:e2:20:d8:df:f2:2e:1b:2e:c0:
                    b1:94:84:ca:b4:93:11:af:66:cf:d9:60:77:ca:55:
                    cc:30:f6:59:a3:04:13:da:3f:b2:db:f1:7b:f6:48:
                    e4:13:e6:5e:0f:cd:4f:5e:c1:8f:e1:3b:1a:01:e3:
                    c3:f7:5a:c5:fc:ff:9d:a9:bc:49:fc:66:60:21:b6:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:E0:23:64:82:A7:19:AE:83:04:EB:69:D5:3D:18:F8:FD:93:CD
            X509v3 Authority Key Identifier:
                keyid:6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:36:92:4e:38:89:ba:6a:c7:e5:92:cd:b2:a4:bf:34:30:2f:
         43:6c:9b:1c:3b:5a:f2:43:e1:6d:ac:86:80:ca:4e:13:64:e5:
         2f:a4:00:f3:4d:45:02:5f:2a:71:80:58:20:d9:12:8e:87:34:
         1c:20:49:cd:23:08:d1:df:36:d9:42:90:ca:e7:2f:e5:12:8e:
         61:22:3d:50:52:e0:52:8b:03:f3:45:e1:65:db:eb:ed:07:7c:
         b6:52:a9:4c:24:6e:86:c0:ae:d5:39:52:7d:bc:bf:72:b2:14:
         be:0b:76:13:e0:54:7e:73:82:65:b1:a2:e3:19:60:36:2c:a4:
         63:31:4f:5c:a2:47:f5:65:ed:c7:0c:86:02:b8:3e:92:ed:d0:
         34:96:e8:6a:8a:10:49:56:29:00:fa:68:b6:29:90:7a:30:75:
         5c:77:19:73:09:5e:73:87:00:80:87:e6:74:87:51:dc:43:f0:
         73:53:d1:1f:a5:a1:6a:f2:c9:93:47:f4:ad:34:78:30:24:eb:
         fb:c8:c6:87:6e:e3:1e:b2:30:0e:09:85:e3:5c:9c:66:87:cb:
         c2:45:cc:c2:6b:5d:e8:e6:8f:78:90:d0:b7:01:bc:c4:ac:30:
         bb:8d:f4:7d:d7:2b:6c:51:ea:a1:23:71:cf:f6:3d:af:ca:6f:
         dd:eb:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:59 2026 by rpki-client