Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
File:                     6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json)
Hash identifier:          VhQSpVXUExpNrvWWbi8ZRrvtBipcIW7qFtVLtC9ySdc=
Subject key identifier:   A2:D3:48:00:C0:B7:5B:56:3F:14:53:F4:31:12:F2:41:40:65:CE:45
Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
Certificate issuer:       /CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Certificate serial:       019E1D907CBC75E42A605E20AEF287401111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
Manifest number:          0252
Signing time:             Tue 12 May 2026 19:01:08 +0000
Manifest this update:     Tue 12 May 2026 19:01:08 +0000
Manifest next update:     Wed 13 May 2026 19:01:08 +0000
Files and hashes:         1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: pS0HkfP/i7FASeRXm+6vSbyY+912Ix/9HIXVtgCbN+Y=)
                          2: TCYoAFJaTqATlFl0u6eQAyMZXJ8.asa (hash: v+oV8YQrF1EVh7SFPiMT8Uf4NtlNNpd/LZU5zlH6PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:7c:bc:75:e4:2a:60:5e:20:ae:f2:87:40:11:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6
        Validity
            Not Before: May 12 19:01:08 2026 GMT
            Not After : May 13 19:01:08 2026 GMT
        Subject: CN=a2d34800c0b75b563f1453f43112f2414065ce45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:f3:3b:21:3d:21:62:25:eb:a5:29:59:d2:
                    2b:8f:f9:28:05:8f:32:1f:99:4e:9f:5c:59:7a:73:
                    58:60:0b:5a:60:fa:ec:fc:b6:7b:1d:a7:cf:3b:1c:
                    8f:67:68:1d:a7:39:e7:07:95:11:45:a7:05:5e:2d:
                    49:5b:d3:2b:bb:ed:f1:74:42:79:7e:3e:51:f5:1c:
                    0b:e2:52:f8:66:13:5a:49:22:f3:c9:ef:02:91:10:
                    62:29:b1:08:d0:a6:5f:9e:0c:de:35:e3:bc:ff:de:
                    42:6c:02:0d:fa:bb:b3:5e:a7:36:c6:9c:3b:77:a8:
                    6f:d3:1f:8c:4f:8d:13:16:ed:51:8c:8b:81:76:60:
                    2c:71:e0:21:39:2b:aa:47:78:f0:81:fb:84:9e:c4:
                    09:b2:22:51:14:90:39:c2:5b:48:ec:66:40:a5:6f:
                    c9:df:0c:36:75:9b:5f:71:94:48:08:08:9e:7b:7d:
                    4d:b3:d8:c4:8e:9e:4e:b2:be:49:3b:8c:74:43:39:
                    03:b5:9a:83:4e:2f:cc:64:6d:f7:fb:0c:45:06:2a:
                    8d:1e:3a:a3:0b:97:48:b3:e4:d3:ed:dc:13:32:92:
                    ca:42:9c:bb:8c:47:9c:b3:bd:fb:c9:fe:30:9d:8e:
                    4c:fe:ca:10:bb:e5:38:c8:ed:77:5e:25:3a:20:23:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:48:00:C0:B7:5B:56:3F:14:53:F4:31:12:F2:41:40:65:CE:45
            X509v3 Authority Key Identifier:
                keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:e3:5e:a1:35:15:76:18:dc:af:53:fe:a5:17:0a:84:3e:
         8e:83:4b:1a:2e:65:72:19:d6:1f:58:43:d1:fd:6e:d7:87:ff:
         e5:f6:0a:2c:26:dd:7c:6d:64:4b:f8:07:a0:cd:13:db:ca:4d:
         34:22:f5:1d:e2:0a:cc:ac:e2:19:03:aa:fc:9e:8b:6a:b7:b9:
         db:cd:8d:55:b9:d3:1d:56:96:02:a5:66:ed:09:ff:bc:ef:01:
         3e:fd:6a:8c:93:f3:bf:e2:4a:d9:f5:0e:49:24:b3:8a:0d:a3:
         92:58:81:d2:45:d2:68:c1:bd:f7:54:bf:c3:e5:ed:e0:8b:94:
         16:66:fe:94:3a:57:66:f7:de:69:b5:3a:60:3c:d4:62:0d:5a:
         ee:3d:8b:cb:d1:dc:58:19:1c:ae:d6:1f:ff:90:91:b7:54:fd:
         46:fe:ba:d1:7e:6c:6a:0d:10:b9:1b:d3:63:98:96:61:a8:7f:
         e8:e1:f8:24:5a:ae:9e:c3:28:8f:4e:53:d4:4b:27:61:c5:cb:
         03:44:2e:1a:df:82:24:0a:a7:40:ad:3f:31:25:b1:af:28:c7:
         4f:34:8e:fa:6b:98:af:69:15:a3:9d:01:dc:61:62:85:d6:44:
         62:39:3f:24:6d:2d:f3:83:9c:cc:10:58:4c:41:9b:02:9d:2e:
         b2:1e:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:23 2026 by rpki-client