Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
File:                     7VxHFPIguKxeq3Au-sEaEUJdCmk.mft (raw, json)
Hash identifier:          9mvSVC9DD7TpOY5BgUNvjZgW5gLngFUyQglwSygYJqY=
Subject key identifier:   01:3C:8B:15:F9:ED:25:4E:82:19:CC:8C:36:B6:1B:D3:19:DF:C0:F8
Authority key identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69
Certificate issuer:       /CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
Certificate serial:       019E1C4789A01A5117ECE588B6A91F3C849A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
Manifest number:          01E6
Signing time:             Tue 12 May 2026 13:01:50 +0000
Manifest this update:     Tue 12 May 2026 13:01:50 +0000
Manifest next update:     Wed 13 May 2026 13:01:50 +0000
Files and hashes:         1: 7VxHFPIguKxeq3Au-sEaEUJdCmk.crl (hash: n+ZBG1c7Nvx8VgRFJsKDmSOdEfo8b6CXYc73om3C/ZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:89:a0:1a:51:17:ec:e5:88:b6:a9:1f:3c:84:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5c4714f220b8ac5eab702efac11a11425d0a69
        Validity
            Not Before: May 12 13:01:50 2026 GMT
            Not After : May 13 13:01:50 2026 GMT
        Subject: CN=013c8b15f9ed254e8219cc8c36b61bd319dfc0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:0a:ca:6f:94:50:7d:0f:9e:b5:45:b5:bd:
                    1c:44:64:06:7d:8e:d4:f2:46:e2:58:2b:c5:53:31:
                    9e:b9:a6:2c:9f:5e:0a:1b:fc:90:97:1d:ba:21:2a:
                    61:91:c5:15:65:1a:c0:d2:bb:83:57:f3:5e:0c:b4:
                    1e:d5:47:2e:c6:61:ef:ae:af:7a:59:51:d7:08:da:
                    ed:65:67:ec:f4:ab:7b:9f:a9:ac:0e:84:18:8f:56:
                    1c:34:7d:35:ee:33:c7:d8:54:79:53:2c:6e:b7:be:
                    bf:af:6f:23:73:46:ab:56:e0:8c:7d:bc:17:57:ae:
                    0f:1b:ec:b6:d5:5e:7d:42:49:47:bc:4b:64:3c:58:
                    15:52:bc:09:3b:e3:96:00:bf:10:bc:fb:4d:50:0c:
                    73:7c:b2:02:27:f1:b1:c3:33:27:32:a3:5c:c6:2d:
                    1d:da:d3:b9:6b:9d:ef:87:57:8a:6c:a8:de:03:78:
                    6c:49:81:fc:be:8d:48:bc:b2:a9:91:81:4a:04:c2:
                    9a:fe:4f:72:20:49:63:04:5f:ab:0a:1f:24:69:c3:
                    23:14:4e:23:c4:db:2e:46:12:79:79:41:5d:ea:75:
                    f9:42:53:90:a8:6c:26:49:5c:68:c9:82:eb:37:00:
                    84:1a:44:06:72:17:58:75:7f:f3:77:7c:05:8b:06:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:8B:15:F9:ED:25:4E:82:19:CC:8C:36:B6:1B:D3:19:DF:C0:F8
            X509v3 Authority Key Identifier:
                keyid:ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9a:e7:ac:7c:0d:6d:01:e8:17:8c:1d:41:e7:e9:66:ce:bc:
         27:d6:da:c5:5f:5a:94:b7:02:c0:eb:bd:cd:c0:f4:a6:a4:c9:
         ed:c0:a7:1f:05:a3:41:df:76:04:43:f1:9e:54:67:9c:56:f8:
         6d:2d:47:2f:fc:f0:e7:9d:30:2c:35:f5:3b:8b:16:25:1e:05:
         7c:c5:aa:38:d3:99:81:7d:07:1d:9f:f5:9f:22:d8:ba:7a:c0:
         74:1a:b7:8f:7e:2a:dc:06:9d:ba:a4:b5:61:9c:7e:9b:21:4c:
         52:29:d1:1a:5d:51:a7:38:fe:34:3b:5d:ba:e2:7d:1f:28:68:
         34:73:e3:6a:86:aa:f7:d0:fe:d7:2f:e4:6a:ba:cc:29:f6:2e:
         7a:97:3c:7b:68:24:1b:cc:eb:b0:aa:6b:16:62:13:8a:49:e1:
         f8:ea:28:9b:e6:ca:ff:d7:49:2d:fb:32:29:2f:45:87:90:b0:
         c2:30:75:65:a9:f9:18:ee:cf:8d:0d:a9:1e:19:5c:b1:33:1e:
         5c:7c:70:42:f4:77:dd:bc:7b:76:33:a1:a5:4c:bc:89:5a:18:
         83:5f:df:d4:45:d5:90:27:1c:19:a8:b2:7f:eb:08:b5:31:43:
         8d:cd:55:7d:6c:df:67:fc:31:73:fc:55:81:5d:68:c8:82:a4:
         56:3b:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:22 2026 by rpki-client