Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File:                     X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier:          dsZHCkYL78Lswk2rgLbFNCx4+53DqDyyEXFe02VzbXI=
Subject key identifier:   D2:31:A6:C5:4C:37:C5:6B:10:A2:8D:F8:94:FC:E5:C3:73:08:EF:63
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer:       /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial:       019E1ED9D3401093DAED9B988CAAC9F82775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number:          0D2D
Signing time:             Wed 13 May 2026 01:00:52 +0000
Manifest this update:     Wed 13 May 2026 01:00:52 +0000
Manifest next update:     Thu 14 May 2026 01:00:52 +0000
Files and hashes:         1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: mGA5BcZCTaEMQoeL5Xwac+Kk7XZV72mVU8JMYtok82A=)
                          2: zX6QTKu5bdfzDlEKlxRngpN7jFg.roa (hash: Es/vRwC7rF9QD60Cujq+vg2mRaTno8Hpf1rSpL/09/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:d3:40:10:93:da:ed:9b:98:8c:aa:c9:f8:27:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
        Validity
            Not Before: May 13 01:00:52 2026 GMT
            Not After : May 14 01:00:52 2026 GMT
        Subject: CN=d231a6c54c37c56b10a28df894fce5c37308ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:b1:be:83:ee:d9:e7:ee:35:43:ff:73:30:
                    64:4a:3c:43:a1:73:d1:2b:2f:09:d1:f8:81:bc:4d:
                    dd:89:6d:a9:0b:c7:79:95:c5:f4:f0:c9:91:91:96:
                    31:ff:6a:b5:e9:cb:7a:21:60:18:24:bd:91:21:a9:
                    49:d0:6a:60:5d:73:85:09:f3:5a:4f:ce:8f:08:d7:
                    42:24:ca:6f:a9:67:ed:36:6d:f5:5a:16:cf:ff:4f:
                    68:68:5e:ec:25:88:5d:7b:d4:eb:a3:be:dd:d5:47:
                    ae:98:5c:24:7a:f0:d9:3c:37:7b:2e:8d:e7:e0:44:
                    b8:b2:e3:40:2e:15:06:65:a6:7f:b6:0e:5c:cc:fa:
                    7b:d0:f7:cb:53:2d:84:ed:c3:2f:70:54:28:9b:7c:
                    dc:26:5f:2d:42:ab:d1:29:41:dc:81:84:08:44:d5:
                    bc:a2:80:6e:20:1a:8b:d6:88:fa:cc:19:a1:64:5d:
                    ef:38:36:de:e3:b0:14:e2:c7:36:15:79:ca:c0:e1:
                    64:78:6b:1c:78:88:cc:ef:90:53:d6:77:1b:2e:c9:
                    1c:1a:a9:b3:5a:10:6d:e7:11:29:e2:fd:f5:ab:87:
                    f2:97:a0:0a:ff:10:49:05:62:ce:02:66:9b:8b:34:
                    83:54:7d:92:69:08:da:0e:20:30:c1:e7:ee:78:fb:
                    fb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:31:A6:C5:4C:37:C5:6B:10:A2:8D:F8:94:FC:E5:C3:73:08:EF:63
            X509v3 Authority Key Identifier:
                keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fc:c0:ef:23:8a:e8:0b:3d:a2:21:ac:20:f4:df:7f:f7:95:
         07:ee:ab:e9:35:3d:57:2a:2a:96:aa:fa:9a:ee:e9:dc:8e:5e:
         dd:80:5d:e6:be:e1:32:38:76:a2:ba:96:95:c1:4f:db:b7:91:
         96:47:9a:91:bd:f4:2f:f3:43:af:fa:5e:c5:64:8f:b3:f4:9f:
         fd:be:86:f3:bf:4d:62:49:86:03:b5:33:2f:23:ae:81:95:75:
         80:a3:b8:c5:9b:06:bd:b7:c7:ba:3d:47:c6:f9:8b:05:0e:1f:
         a2:dd:c2:41:a4:35:84:7a:46:64:a5:8c:da:38:b1:00:d2:2b:
         b1:9b:87:27:51:f4:3e:26:4c:22:be:4f:4d:44:86:dd:28:81:
         02:25:03:0d:51:df:a6:1a:31:3d:eb:b8:d4:77:76:7d:0b:3f:
         82:3a:86:74:9f:f3:fe:5b:95:2a:0a:33:6c:3b:b0:72:3c:54:
         88:55:13:5e:2c:2a:8b:68:04:81:48:87:df:5e:2d:0b:aa:d3:
         90:c2:ab:a8:f7:e4:ce:1e:2f:f2:a4:d5:92:dc:76:45:1d:07:
         75:1a:c0:f8:4a:5c:2c:52:64:a3:f3:a9:06:d6:6e:6e:40:bb:
         89:37:aa:21:20:fc:17:9c:03:81:7a:4f:34:3f:80:c4:1f:5a:
         54:58:16:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:25 2026 by rpki-client