Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          a0zSDGxC0X3JpjQ2LZu83QWRxY5tRb+wUODeI+IHWpk=
Subject key identifier:   18:A1:43:71:EA:79:3C:6A:47:16:44:8D:45:FF:FA:7E:A1:E4:10:22
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       019E1FB5735EEA9E6488A315A962289AEF9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0E62
Signing time:             Wed 13 May 2026 05:00:45 +0000
Manifest this update:     Wed 13 May 2026 05:00:45 +0000
Manifest next update:     Thu 14 May 2026 05:00:45 +0000
Files and hashes:         1: 5s94JKAXDJrQpueM4W0HRuRUXqQ.roa (hash: CzNnEJOva2qyeDIKL4O8DARiGLjA2TNz7kBujtqjE84=)
                          2: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: BJNPmNWBUXYki6SN+9TbyWDF0NrjwMPcnv4K2hRm1tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:73:5e:ea:9e:64:88:a3:15:a9:62:28:9a:ef:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: May 13 05:00:45 2026 GMT
            Not After : May 14 05:00:45 2026 GMT
        Subject: CN=18a14371ea793c6a4716448d45fffa7ea1e41022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:e2:ca:30:1c:21:fd:8f:12:ef:a6:8e:7b:
                    57:84:07:a1:69:e0:29:c7:50:05:38:7a:26:4a:2b:
                    b6:a4:b5:71:3d:76:bd:3b:2b:38:ae:da:50:65:26:
                    45:19:d8:fd:6f:33:e1:6f:4d:d5:b7:8a:fe:33:d3:
                    bb:e4:d3:6d:75:f5:01:4c:37:d4:a2:08:8c:f5:69:
                    94:e9:29:03:47:43:7c:73:b6:50:75:d6:c8:80:04:
                    12:71:49:38:6b:c7:ad:e7:0a:d6:d2:2c:3f:98:39:
                    21:33:38:2c:a1:f7:1f:5f:36:a1:b5:83:50:78:1b:
                    f9:3a:36:8d:7a:8b:9e:3c:39:00:f3:ce:c4:43:53:
                    0e:97:d3:ca:eb:a3:d8:38:61:98:51:f3:59:b8:d4:
                    08:e7:f6:2f:48:74:de:bf:c2:0e:b3:6f:8e:e7:17:
                    0f:da:71:61:cc:73:56:b6:d9:4b:d5:ee:7e:3f:94:
                    d4:9f:68:8e:5a:8b:4f:cf:79:8b:45:7a:5b:a3:d3:
                    1c:3d:e9:cf:35:f4:0c:37:53:15:2c:54:51:c5:c7:
                    61:55:b6:8f:04:bc:9c:35:f9:e7:a5:0a:ef:47:5c:
                    c1:9f:78:75:0f:e1:d3:32:bd:eb:0c:60:54:90:2e:
                    2f:2d:94:54:2a:7f:ca:1b:41:ef:8a:de:56:f2:cf:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:43:71:EA:79:3C:6A:47:16:44:8D:45:FF:FA:7E:A1:E4:10:22
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5a:bd:ab:ac:99:68:54:1a:24:7c:9c:d9:5c:24:81:1d:c3:
         46:f8:00:7a:23:35:3c:f5:7a:1c:c1:91:c7:88:e1:8f:ca:19:
         9b:4d:bf:44:95:46:1c:8f:b1:cb:7e:1c:bb:be:e2:19:f3:ea:
         a4:fb:34:24:b2:2d:3e:d8:87:09:46:ae:79:24:c0:f9:27:b8:
         0a:e5:a2:b9:90:bd:56:32:73:4a:eb:80:93:5a:fe:c4:0f:e1:
         eb:84:7b:ad:f1:5e:15:02:32:7c:21:91:fe:a4:52:66:85:ee:
         cb:80:44:05:94:cb:6e:b3:2e:95:8c:0d:38:55:8f:bd:30:5b:
         6d:5b:a3:cd:48:a8:48:40:39:15:7c:dd:af:06:2b:9a:55:7d:
         ca:e4:ef:05:f1:71:d6:8c:03:d0:f0:15:e6:a5:64:b8:db:58:
         11:1f:0e:27:c5:44:24:a6:c0:be:fd:11:dd:c4:a7:4c:68:9f:
         a0:9f:45:bb:b2:61:4d:54:b8:3e:f1:32:40:38:fc:2b:14:f4:
         72:9b:63:53:e7:3a:c0:5c:f7:da:53:02:0e:72:a5:99:80:84:
         72:c4:62:76:68:96:8f:c9:54:f4:b9:d6:f7:e8:1a:7e:0f:09:
         a3:ec:8b:89:e1:e2:da:f4:d1:3e:28:08:56:3d:66:e3:5d:49:
         51:41:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:23 2026 by rpki-client