Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          RbvMASzyFTj7OyUUgWZU0nyAHXBYg7pocPS1UL3wbAA=
Subject key identifier:   01:E8:66:D1:8B:1C:B8:1B:00:C9:4E:E2:AA:80:A1:77:C6:52:B3:BF
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       019E1D224EFEA2246DFF25E69087ACA34C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0D72
Signing time:             Tue 12 May 2026 17:00:48 +0000
Manifest this update:     Tue 12 May 2026 17:00:48 +0000
Manifest next update:     Wed 13 May 2026 17:00:48 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: hdI36aQoRYtQrI/FeZNill/USdVX5Z2v47wuE899qxY=)
                          2: CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa (hash: nNkOheFA1Bvc9D0wPsf9Fhra1hW/4NT0jdBtU1SIYdk=)
                          3: KaO-__UQ_4-yFi8MMxv305lzDlw.roa (hash: MPyADIXrlTVIshlYvvPri9A+eTXT/5p1O9Y/NNCFTew=)
                          4: myL47iydC8eKGLu8PQ2TD5S3cnE.roa (hash: l0U46siz8BLtzrVkMhNRaqElDbC1K1LmUtKA9hKwXgg=)
                          5: ojYHQmSAFTm29RLFj7gCPdYmCjg.roa (hash: 7+saW1Xd2Xb7UDM8OgcUC8MrbOvLnaAq3EyCVMvJhAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:4e:fe:a2:24:6d:ff:25:e6:90:87:ac:a3:4c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: May 12 17:00:48 2026 GMT
            Not After : May 13 17:00:48 2026 GMT
        Subject: CN=01e866d18b1cb81b00c94ee2aa80a177c652b3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:e8:b0:82:28:ec:98:e6:06:d0:89:c2:b5:
                    84:10:4e:de:e6:7f:a1:b8:66:54:54:ee:e1:35:97:
                    d5:fe:33:c8:e2:09:71:72:67:fa:53:08:de:47:8b:
                    0b:9d:77:16:1f:bc:a6:a8:75:24:26:08:56:62:92:
                    7b:3f:52:5a:0f:33:9d:a4:00:78:0a:a9:7c:a2:13:
                    18:1f:de:60:f9:5f:98:a2:3e:4f:f9:ee:cf:af:7e:
                    4c:6c:ce:41:b5:ee:fb:0b:13:19:3c:50:0b:4e:04:
                    36:1e:91:c3:e2:27:2f:63:ef:58:ce:74:6c:9e:99:
                    73:4c:5a:e1:3a:80:69:5e:6c:48:e5:95:ca:20:f9:
                    d5:02:db:5c:60:68:ad:79:59:22:82:11:84:39:dc:
                    95:76:98:66:e5:7a:25:64:62:c3:db:8d:4d:7e:d1:
                    ff:98:ce:89:36:84:89:ee:17:b6:52:a3:ad:70:36:
                    5b:58:f6:29:11:e8:cc:1b:74:79:23:19:c3:a9:5b:
                    22:74:a7:61:67:a2:30:97:a4:35:4c:89:d9:7c:61:
                    48:c5:7a:cc:3f:99:c4:8a:e2:7e:6d:05:3b:fc:09:
                    bb:9f:75:5d:95:31:6b:d9:2f:34:61:32:b4:97:9c:
                    1b:9e:cb:fc:22:ed:28:7f:95:d0:a6:ac:5c:c5:47:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:66:D1:8B:1C:B8:1B:00:C9:4E:E2:AA:80:A1:77:C6:52:B3:BF
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:03:e6:bf:7c:a5:2a:8f:e6:89:32:b2:96:e6:77:0e:0f:e0:
         b8:70:c0:89:32:7d:69:7e:70:99:48:48:46:93:fd:cb:2d:c0:
         ed:c2:1d:85:ae:c9:c6:39:f2:2e:97:fc:e5:02:ed:6b:ee:3e:
         b7:4d:8d:8f:d8:b8:06:85:a8:9d:15:8c:f6:87:20:0b:8c:17:
         25:3c:89:05:f2:be:61:a6:27:c8:22:ce:44:15:86:2c:8b:b2:
         76:ab:1b:19:53:c0:0b:d9:88:30:f0:53:20:5a:e5:35:4b:96:
         7e:ab:f3:3e:9c:04:32:5f:75:12:24:ff:24:94:7c:7a:0f:1d:
         9b:4d:70:65:a2:7a:01:95:c2:bc:0d:7c:c3:80:e5:1c:ef:91:
         f1:34:a1:58:31:11:cc:c6:2f:d8:49:a3:3a:15:ca:5d:f0:57:
         32:b0:ea:ab:87:d8:6b:ca:4c:f3:a1:40:1d:9f:67:cf:17:0d:
         38:7f:ec:8a:1a:91:4a:87:56:ce:38:0b:b3:e9:28:85:76:ae:
         82:41:70:a6:40:5d:76:5c:13:c9:62:0b:4b:64:03:5c:66:fe:
         82:11:d7:fd:83:e6:dd:f0:b3:41:ab:74:ad:70:81:ff:d1:99:
         d2:85:e2:5d:e5:27:27:b8:ae:b4:25:59:b7:45:81:a1:83:49:
         53:ca:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:31 2026 by rpki-client