Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
File:                     U6d_390Uwt8Vjr_C5s_ConmmSME.mft (raw, json)
Hash identifier:          qWTN840YVM/9sAXDi7VC1YHLErz6DYBZWHLmryhRjjw=
Subject key identifier:   65:A4:FD:4A:C3:07:65:F2:D0:76:94:73:39:3A:2E:43:68:95:B6:BA
Authority key identifier: 53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1
Certificate issuer:       /CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
Certificate serial:       019D28BB2C2E474C8A87BF53FE50094AD932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
Manifest number:          1293
Signing time:             Thu 26 Mar 2026 06:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:48 +0000
Files and hashes:         1: U6d_390Uwt8Vjr_C5s_ConmmSME.crl (hash: UwGguCIZKCFpLPFfgwAweioErjm+N1YvYo9dWev/5GQ=)
                          2: n5fGK8uQ1IXVs4gItqnXi96bOCA.roa (hash: 9Xe7j5MzjEYIo3j8TehBH8vYadVuml9WRHAXRG8x2oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:2c:2e:47:4c:8a:87:bf:53:fe:50:09:4a:d9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
        Validity
            Not Before: Mar 26 06:00:48 2026 GMT
            Not After : Mar 27 06:00:48 2026 GMT
        Subject: CN=65a4fd4ac30765f2d0769473393a2e436895b6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:10:0f:00:d0:d1:e2:68:c1:60:87:c6:e2:
                    26:a8:2d:3e:43:63:36:b5:57:36:dd:d2:4f:66:f5:
                    2d:43:f3:db:bb:f7:3b:c0:a9:db:71:b2:0c:ed:30:
                    fb:18:5c:08:61:8b:78:32:1e:2a:a5:85:20:1f:8c:
                    ba:e1:ac:80:d9:90:30:66:a8:d1:0b:80:f6:cc:2e:
                    ab:ce:31:58:6b:84:f6:3a:22:9b:20:0b:21:7a:1e:
                    e4:d6:27:f9:45:35:38:b6:cf:e2:3e:51:89:5a:04:
                    88:0d:3f:38:f7:80:b2:2a:8b:f8:1b:9c:bc:59:f3:
                    a4:fe:24:85:0a:ac:42:2b:98:c0:a8:63:97:a8:b9:
                    31:0c:e5:29:26:da:29:25:db:e6:6f:6f:20:30:b8:
                    2e:04:cb:51:fe:48:22:92:54:2f:d2:f6:ca:79:b1:
                    35:4d:54:ba:47:11:1e:88:a1:1d:02:55:cb:5b:5c:
                    24:6a:12:10:71:80:a2:6e:de:ea:06:79:5b:a3:0f:
                    9c:35:5f:88:6b:17:b7:75:e0:13:76:1e:8d:b7:35:
                    14:e6:05:1c:b5:a1:d7:f5:9d:01:86:54:86:dd:df:
                    52:1c:47:40:3e:d1:a2:18:f6:e2:31:27:8b:1f:12:
                    89:e9:f4:3f:fc:33:b3:ad:cf:53:fa:9c:a5:4a:c5:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:FD:4A:C3:07:65:F2:D0:76:94:73:39:3A:2E:43:68:95:B6:BA
            X509v3 Authority Key Identifier:
                keyid:53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:84:fc:51:f0:d7:f1:ab:1a:7a:ad:2c:c9:b1:62:5e:b9:47:
         04:c3:6b:51:c9:a5:41:9c:94:ee:7d:59:0a:8a:74:5c:0f:f6:
         30:7d:b7:74:be:ee:86:b3:93:fb:dd:62:7e:df:17:80:9a:0c:
         00:a3:e9:e3:17:e8:8c:b2:66:7a:7e:56:e0:28:ed:a0:51:e6:
         58:1f:26:44:d9:47:cc:96:dd:45:2d:4b:2d:42:14:a7:79:9b:
         08:48:1d:33:a2:ad:29:4d:1d:be:a0:3c:fb:be:70:ab:f5:cc:
         63:c3:03:1d:be:08:c0:0b:2a:04:01:be:22:30:84:35:e5:a8:
         3a:b0:47:19:9c:d5:a2:f2:05:b6:00:91:2d:15:63:ef:aa:b9:
         86:86:a7:1e:99:83:f2:8e:e5:31:48:a1:81:1a:63:b9:86:41:
         0e:70:21:64:83:27:4c:ee:28:84:13:6c:17:ee:c5:3e:c6:9c:
         84:64:81:0f:2e:06:c9:9c:1f:53:d6:3a:3b:0b:0a:92:ff:f7:
         30:3a:fb:03:3d:9a:43:71:c8:75:67:c7:b3:3a:61:1a:60:26:
         9b:f1:5a:2d:a7:0f:d0:1b:c3:79:c1:e8:c4:96:63:fc:73:7f:
         8c:8a:11:25:19:80:ac:79:60:26:01:42:c1:19:1b:eb:0b:cb:
         9a:71:8f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:54 2026 by rpki-client