Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft
File:                     6G5_VaMBVrTuZE6My9BzvcCC7sY.mft (raw, json)
Hash identifier:          XYla++tPC8p+SYqAds9aFwKWhJv3nbwXWK9o/DzBFbE=
Subject key identifier:   12:51:D1:7E:E9:24:3C:87:30:ED:1E:6C:65:CA:DE:05:80:4C:2D:07
Authority key identifier: E8:6E:7F:55:A3:01:56:B4:EE:64:4E:8C:CB:D0:73:BD:C0:82:EE:C6
Certificate issuer:       /CN=e86e7f55a30156b4ee644e8ccbd073bdc082eec6
Certificate serial:       019E1D90C1694E6761D690DF0AE12958650C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft
Manifest number:          06
Signing time:             Tue 12 May 2026 19:01:26 +0000
Manifest this update:     Tue 12 May 2026 19:01:26 +0000
Manifest next update:     Wed 13 May 2026 19:01:26 +0000
Files and hashes:         1: 6G5_VaMBVrTuZE6My9BzvcCC7sY.crl (hash: JdFGqxlj6A6Cd529MNJAH4jdDr5WPmvtILMcDZ/cuzU=)
                          2: gpGElzUmjuqdHJapTLDmhRMtBQc.roa (hash: JkjRa61rvVX6ySfU/bRKh17xcEVLrstc9W5WtCiKQvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:c1:69:4e:67:61:d6:90:df:0a:e1:29:58:65:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86e7f55a30156b4ee644e8ccbd073bdc082eec6
        Validity
            Not Before: May 12 19:01:26 2026 GMT
            Not After : May 13 19:01:26 2026 GMT
        Subject: CN=1251d17ee9243c8730ed1e6c65cade05804c2d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:e5:7f:68:a1:46:fd:38:cf:e3:89:90:29:
                    44:c1:24:03:7f:54:3d:89:d7:f9:d5:34:90:6d:07:
                    e0:e4:15:af:2b:14:f4:12:08:fa:87:da:dd:2b:61:
                    fd:d2:c1:ea:25:c0:ce:8d:f2:73:d5:2c:4b:79:e6:
                    b3:8d:18:9d:95:9c:1e:b4:07:84:c8:01:9f:61:b3:
                    9f:0e:db:bc:01:ee:43:63:a7:f9:27:8a:c9:7a:3d:
                    be:23:a0:12:2b:ee:06:f3:f2:15:b8:db:85:50:b8:
                    46:6e:7f:f9:f1:5c:bf:3e:b0:57:1a:c3:1b:0d:a0:
                    1b:29:e2:04:d0:e8:07:1a:0f:c6:dc:ec:e5:ba:fa:
                    2a:25:24:81:8e:ac:bd:51:c9:3d:28:be:39:8b:a2:
                    01:d8:a6:75:99:97:c4:82:93:41:92:5c:7d:e0:f9:
                    6b:77:5f:09:f9:12:0c:dd:ad:8e:0b:2c:08:c6:64:
                    dd:77:e7:03:a2:d3:e6:06:0b:59:fd:68:bd:ba:a2:
                    6f:ca:81:8d:e9:30:5f:27:1f:19:30:b4:1c:0a:c7:
                    ff:c4:20:70:43:1a:b4:b4:2b:db:2d:bf:82:90:dd:
                    4e:d5:79:97:1b:74:49:33:b1:46:40:7d:3f:bc:60:
                    df:44:e5:65:97:33:36:c3:f4:2c:a4:5e:69:ab:a9:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:51:D1:7E:E9:24:3C:87:30:ED:1E:6C:65:CA:DE:05:80:4C:2D:07
            X509v3 Authority Key Identifier:
                keyid:E8:6E:7F:55:A3:01:56:B4:EE:64:4E:8C:CB:D0:73:BD:C0:82:EE:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:17:28:00:5b:ff:d3:de:7b:0c:2b:cd:9d:df:b7:3a:52:8f:
         0d:e3:f5:83:f6:b3:c6:a0:5c:55:60:94:ea:2a:d8:79:e3:67:
         83:a4:c2:49:40:a1:31:67:54:76:02:a7:ce:2c:ed:e9:cf:95:
         a1:45:93:ae:30:57:38:8e:3e:60:d5:7b:c8:22:64:39:9c:17:
         e7:35:b8:69:3d:49:c6:61:c5:ac:d3:dc:eb:38:a1:6a:8d:81:
         cf:ba:ff:a7:74:55:b1:f4:27:d3:a7:c8:36:de:c5:45:b7:0c:
         a9:6b:67:ef:c6:01:bc:ba:49:ea:a1:61:55:02:5d:ed:5f:1f:
         0c:52:b9:6a:b8:c0:80:5f:fe:6f:57:7e:ab:db:bd:8c:ec:9b:
         9c:9f:d2:aa:64:29:98:7a:7a:a8:c1:91:4b:80:2f:6d:c2:00:
         fd:c5:d3:41:f1:07:38:8c:c0:01:56:35:52:48:20:7c:bc:04:
         ee:b7:fc:90:1c:dd:f5:e9:d6:83:cc:1a:b4:28:8a:3b:4e:07:
         e9:75:6b:c9:bd:1a:90:55:1c:7e:0f:aa:cc:bc:60:83:38:1f:
         80:f1:ad:ba:4f:aa:a4:2f:a5:07:5a:a6:ca:d9:c8:bf:ca:5f:
         3b:ef:89:ff:7d:c9:e4:f9:9e:e3:09:b4:e5:7c:ab:f3:4e:8c:
         c7:5c:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:11 2026 by rpki-client