Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File:                     6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier:          Jdq6clyptTlCP0uuCRJ/6krU9G2iMvmLP/jCrO3iumc=
Subject key identifier:   62:66:2B:50:7B:E7:F7:2E:DA:D2:B0:6D:DA:37:D6:7B:95:11:BF:AA
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer:       /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial:       019E1C102FDADAF3F4EAF473C8EEA2A22059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number:          0850
Signing time:             Tue 12 May 2026 12:01:23 +0000
Manifest this update:     Tue 12 May 2026 12:01:23 +0000
Manifest next update:     Wed 13 May 2026 12:01:23 +0000
Files and hashes:         1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: ejEMjzWPNJNX6TxUEJQd8ctNvd805z/Xvgf0uqClgeU=)
                          2: hElyins30a6CcTsBId_5i9QZESM.roa (hash: XTxIIPJV+tyv9VF/zIfOPYzhtJazNs7LRzbWZlggukw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:2f:da:da:f3:f4:ea:f4:73:c8:ee:a2:a2:20:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
        Validity
            Not Before: May 12 12:01:23 2026 GMT
            Not After : May 13 12:01:23 2026 GMT
        Subject: CN=62662b507be7f72edad2b06dda37d67b9511bfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:ef:28:86:ff:64:a7:af:23:8c:14:bb:4d:
                    11:70:51:de:57:df:01:2b:8f:22:89:33:b6:ed:c1:
                    82:96:9a:06:ce:bc:d5:40:df:7e:5c:e3:b0:7e:ea:
                    bb:fd:e4:2d:b2:6f:cf:ab:76:3e:be:57:b4:1a:ce:
                    40:fa:96:e4:fb:dd:83:89:a1:07:71:90:d7:d8:a2:
                    8f:2d:c6:55:e4:9a:ec:0a:38:34:62:b8:af:3f:b7:
                    ad:6c:9d:e2:92:41:fc:02:31:85:35:3a:d2:49:c6:
                    3d:8e:de:68:b8:74:47:1d:ce:52:82:a5:a2:c9:61:
                    53:1e:02:b6:f8:95:49:bf:55:0e:9f:9b:eb:36:69:
                    f6:35:ce:08:3a:a1:6c:f9:5a:1a:bb:c2:cf:ab:ce:
                    80:59:47:5b:8e:32:2d:7f:ab:b3:c2:04:08:b7:86:
                    e3:42:bf:34:f1:a0:cc:3a:c7:87:ab:7f:27:fc:94:
                    6c:0d:42:cb:5c:38:8a:16:44:c2:77:9c:67:82:f7:
                    bc:5e:35:49:22:fd:1e:56:11:c4:5f:ac:ca:e1:fa:
                    62:0b:ef:e0:28:5f:af:51:11:e5:3d:d0:51:c5:bf:
                    e7:e2:68:e1:04:dd:7b:e0:23:72:1f:10:33:4a:3f:
                    b1:9e:e7:5e:82:86:fe:99:a3:a3:43:a4:50:86:de:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:66:2B:50:7B:E7:F7:2E:DA:D2:B0:6D:DA:37:D6:7B:95:11:BF:AA
            X509v3 Authority Key Identifier:
                keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0f:27:33:73:a4:c6:fe:18:20:9d:b7:bf:c9:ca:76:14:4f:
         d5:07:e4:d2:25:0d:7e:63:21:3d:0a:bd:4b:3e:a9:e1:40:8c:
         8d:45:19:71:56:ff:46:eb:ae:10:f8:19:1b:f0:13:5e:b6:26:
         fb:34:86:7e:ef:e7:f9:c3:b4:e2:fe:18:bc:ce:f1:80:e5:dd:
         08:b6:f4:b2:7f:9a:30:a6:01:1a:98:41:15:be:e5:78:30:d1:
         4d:02:1f:66:13:2d:ec:94:6c:97:84:d9:cc:56:7d:a5:ad:ac:
         a9:89:94:c2:ef:96:b4:52:98:8c:90:18:29:40:d1:e6:a6:af:
         6d:53:a6:8c:41:4f:07:62:94:c0:af:85:6d:7f:fc:5e:29:85:
         87:13:b0:d2:2e:8b:47:1c:56:74:be:28:ce:32:7f:17:ca:85:
         56:fb:50:26:e4:2f:41:83:ae:80:72:6b:ea:e0:87:a8:50:87:
         e5:02:9c:46:09:63:3a:7d:2e:fa:2c:09:e7:e3:e1:0e:f2:76:
         23:63:21:38:0e:74:a5:b3:59:ef:bb:7e:01:71:88:9b:2d:86:
         cc:f3:8a:50:fa:0d:95:ac:93:c0:51:9f:93:8c:1a:94:d6:cb:
         fc:9c:b7:75:14:f0:ed:2e:b1:95:bc:bb:71:8c:68:8d:4b:7b:
         74:11:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:02 2026 by rpki-client