Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          +0CRUCwHT20lhTBykbNeQ+WE7W1CQayeZXuBw+ZhGC8=
Subject key identifier:   CB:E4:11:FB:E1:D6:AE:88:78:8D:A8:0C:A7:DC:EA:2F:2D:6D:F9:4F
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       019E1CB490EEB4770FF2298905CBA75D3F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          0FE2
Signing time:             Tue 12 May 2026 15:00:56 +0000
Manifest this update:     Tue 12 May 2026 15:00:56 +0000
Manifest next update:     Wed 13 May 2026 15:00:56 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: SO8R3Zp+80YIOXK1AK/h4R8tCJdT+o7rrvjTBtwUUPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:90:ee:b4:77:0f:f2:29:89:05:cb:a7:5d:3f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: May 12 15:00:56 2026 GMT
            Not After : May 13 15:00:56 2026 GMT
        Subject: CN=cbe411fbe1d6ae88788da80ca7dcea2f2d6df94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:19:4b:3c:61:4c:83:ce:69:4f:39:59:8e:1a:
                    4e:04:9a:a9:fb:6c:5a:e7:f7:d7:f9:14:9e:d2:3b:
                    f7:c9:72:f6:b3:40:7c:8f:4f:0e:58:e7:70:68:e3:
                    41:90:62:37:21:3c:fd:53:6c:7d:d5:59:50:fd:fe:
                    4b:8f:86:e9:11:42:b6:13:8a:4f:cc:15:0f:38:6c:
                    f7:5c:77:78:cb:ac:48:b9:97:fa:8c:43:0b:49:fd:
                    82:29:0d:85:86:02:4c:45:8f:50:61:d0:55:c3:65:
                    22:a0:df:74:61:e9:82:a7:2e:26:8b:26:35:c9:ed:
                    10:dc:94:23:ad:05:ac:0c:52:91:d5:0d:12:75:26:
                    90:4a:5e:07:38:f2:a6:7d:58:9c:27:a6:20:1f:b5:
                    d3:6e:05:28:54:dc:ae:dd:db:93:f7:a1:a7:af:2f:
                    14:de:10:8d:45:dc:5b:7a:dd:9b:d5:aa:6b:08:f4:
                    f6:04:4b:85:8c:32:28:5f:9e:0e:cd:35:9f:ca:20:
                    d0:5f:38:a8:12:89:ca:86:2d:1b:b9:d0:ce:a1:12:
                    45:f9:d8:0c:c4:f9:73:be:6c:52:39:08:0d:cb:af:
                    5d:b0:8a:14:d7:f0:33:38:0d:28:95:1b:13:f9:a3:
                    e9:37:ef:39:fa:68:7a:f8:db:4d:12:b9:f6:86:8c:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E4:11:FB:E1:D6:AE:88:78:8D:A8:0C:A7:DC:EA:2F:2D:6D:F9:4F
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:3f:2a:66:24:9a:45:d8:d1:d6:25:75:4d:7f:b8:50:07:
         56:59:fd:95:f7:ab:01:de:09:bd:e8:70:a8:8d:e0:d6:df:6d:
         70:50:e3:dc:41:39:7b:98:0a:bb:39:31:1c:fa:10:cc:31:4b:
         46:fc:ac:e3:7e:d2:e2:d7:f9:9b:f0:38:56:8a:bf:64:3b:62:
         cc:04:40:e9:af:e1:0b:72:96:b8:ff:f6:9c:07:5f:2d:c6:79:
         ad:ac:15:32:89:e5:10:dd:a9:5a:f4:c1:6e:7e:00:bc:77:36:
         5b:d5:d4:45:23:b1:52:fd:f3:b3:05:d4:30:33:97:ce:42:36:
         eb:0c:76:84:70:a8:a3:47:4c:c0:14:bd:2c:27:bb:ac:7a:d5:
         e3:19:fc:57:4e:3f:6c:22:9b:4e:62:2f:46:40:c4:c7:c9:f5:
         36:69:d3:72:58:17:60:42:df:78:bb:93:e0:f0:8d:f6:f6:98:
         18:7a:f2:ba:6c:52:d7:67:fe:a9:30:60:4f:9e:89:0d:16:45:
         bb:5d:35:df:66:d8:47:ed:39:d3:5f:93:13:8a:1f:73:5a:e6:
         c6:0e:ca:fc:d9:b1:e9:55:a7:87:72:33:6a:2f:7d:2c:04:d1:
         27:d9:3d:25:a4:fd:8c:87:1c:e1:af:7f:6f:8d:5d:26:a8:97:
         07:1e:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:05 2026 by rpki-client