Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
File:                     6kHoOY_3zvtSIWNusighJuv-O3g.mft (raw, json)
Hash identifier:          /pE3z3rzk05mURtuH8lxvDehBtq34S3QyV9PThncHTA=
Subject key identifier:   1E:9C:6C:00:1C:2B:B3:53:0E:67:7E:E1:CB:A5:ED:20:D0:31:19:53
Authority key identifier: EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
Certificate issuer:       /CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Certificate serial:       019E2024179938B8767F0175925CE3CF1B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
Manifest number:          0556
Signing time:             Wed 13 May 2026 07:01:36 +0000
Manifest this update:     Wed 13 May 2026 07:01:36 +0000
Manifest next update:     Thu 14 May 2026 07:01:36 +0000
Files and hashes:         1: 6kHoOY_3zvtSIWNusighJuv-O3g.crl (hash: 97TAwEiqy/HQi65s0FISSWknQskUQhXU7RDSForM2hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:17:99:38:b8:76:7f:01:75:92:5c:e3:cf:1b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
        Validity
            Not Before: May 13 07:01:36 2026 GMT
            Not After : May 14 07:01:36 2026 GMT
        Subject: CN=1e9c6c001c2bb3530e677ee1cba5ed20d0311953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:87:47:6e:30:6b:64:ed:b8:21:17:60:cb:
                    84:bf:c1:54:d7:3d:4b:2d:23:f6:76:3b:76:46:83:
                    41:62:ef:5a:04:54:48:67:39:99:e9:90:06:e4:12:
                    5a:53:cc:06:0b:91:64:00:b8:a9:d8:aa:8d:d3:94:
                    78:d7:f7:1d:c7:fa:7a:fa:54:2c:b4:74:1a:50:9c:
                    f6:e7:da:65:ee:7f:37:0f:46:6d:5c:bb:b0:ff:4a:
                    4c:85:93:27:06:13:c9:82:09:47:7f:f0:08:b3:b1:
                    2a:61:93:f8:18:29:22:ea:f7:54:69:06:ab:51:08:
                    d8:60:5d:9b:79:62:78:1c:8d:ed:f7:04:7b:19:60:
                    eb:0b:98:cc:83:13:ac:df:6b:07:ac:45:e8:2c:27:
                    00:45:aa:03:29:a3:f5:2a:df:ba:10:49:9d:70:cf:
                    0a:29:9d:e0:02:e3:19:e3:b2:35:4d:fa:ee:f0:09:
                    eb:f5:74:f8:92:56:86:1a:d7:04:87:45:88:02:50:
                    ca:84:ae:ba:b6:02:a8:a5:c0:52:59:db:12:8b:0b:
                    37:6f:39:7e:0f:00:47:6a:a0:26:20:9b:ee:e0:bb:
                    9c:58:45:5c:bf:26:bb:43:99:59:87:83:8e:f1:8a:
                    ae:36:1b:09:42:b5:1e:75:c3:4f:82:47:99:0f:8a:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:6C:00:1C:2B:B3:53:0E:67:7E:E1:CB:A5:ED:20:D0:31:19:53
            X509v3 Authority Key Identifier:
                keyid:EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:fa:ef:b9:87:b6:4c:20:66:2d:99:eb:fb:c6:67:dd:dc:
         64:64:cc:2c:e6:24:ad:80:fa:b6:53:4a:f7:95:96:b0:87:49:
         a9:7f:5c:99:ea:8d:b8:ed:04:6d:d0:2d:44:5f:06:6f:39:a8:
         5d:c9:58:0b:6a:f1:38:bf:3b:9f:ed:88:27:ba:ab:5a:d0:fd:
         84:f5:29:04:06:c6:18:91:7d:7b:02:16:2e:59:b9:78:82:a0:
         ba:f9:68:7d:0e:8c:60:9c:1a:f9:36:a7:25:01:e1:99:bb:3a:
         b4:bc:3e:07:91:43:ad:b3:e8:93:4f:cc:02:36:fc:7e:80:bd:
         e1:6a:70:3c:19:eb:3e:90:f8:62:55:73:7f:bc:49:cb:66:46:
         50:71:29:32:3c:b0:91:7f:9f:3d:e0:6f:37:3d:4b:26:b4:73:
         da:fc:46:4f:c8:8f:84:75:74:e9:01:55:17:fe:be:40:ff:35:
         27:75:b6:8d:96:30:5d:26:8f:76:ae:5a:0f:c2:09:a9:fc:c0:
         de:20:11:9b:4d:c8:e5:f0:c8:14:4e:f1:5f:d7:c9:03:d8:b6:
         e8:79:ba:d2:80:13:ff:bf:81:0e:f4:6d:e6:f7:b4:66:14:a2:
         37:d7:89:96:b6:52:7c:ed:da:d6:c2:f2:88:09:4a:58:e6:58:
         a8:85:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:15 2026 by rpki-client