Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File:                     6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier:          oJXe1oSKrg4tuLw+gSOR9P0LfmQAiE7UXIz9lofQKx4=
Subject key identifier:   65:AF:86:1E:46:0B:87:81:31:AD:1D:DA:F1:AA:89:FF:44:C3:BC:FE
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       019E30E028B37CC11DDD649D08334674B5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number:          1131
Signing time:             Sat 16 May 2026 13:00:57 +0000
Manifest this update:     Sat 16 May 2026 13:00:57 +0000
Manifest next update:     Sun 17 May 2026 13:00:57 +0000
Files and hashes:         1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: //Lx1fZnyQm/6dJwr/1yyEYQVI1qoNGlZOmc97vzJK4=)
                          2: aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa (hash: 8KWuhZN2MwzTsWUN92o6fPQusuIkbhVe5Tp3v7UnNEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:28:b3:7c:c1:1d:dd:64:9d:08:33:46:74:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: May 16 13:00:57 2026 GMT
            Not After : May 17 13:00:57 2026 GMT
        Subject: CN=65af861e460b878131ad1ddaf1aa89ff44c3bcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:c4:d7:de:03:77:cd:6b:a3:2e:8b:dd:0b:
                    97:a7:31:b5:39:9f:4a:27:1f:ca:15:0c:8a:4f:b0:
                    64:0f:02:05:3c:00:8d:94:ea:0f:d4:13:6d:e0:3a:
                    62:f0:21:42:70:75:ae:cc:03:54:cf:1b:ca:20:0e:
                    3b:ad:ef:dc:04:a3:ba:c3:27:d8:91:40:d6:d6:9c:
                    b7:be:df:de:80:cd:bc:3a:a5:91:50:e6:4a:fa:90:
                    b9:39:db:06:cd:c3:ee:73:5c:c7:d7:e1:e8:36:13:
                    4d:55:7e:08:ec:0f:1e:7a:7a:be:0f:30:83:cd:1b:
                    2a:0c:0a:7e:89:24:b5:bc:41:9a:ec:7c:31:24:8f:
                    50:05:3d:c9:d9:f9:bf:66:59:d1:dd:86:4e:97:66:
                    08:45:06:6d:b7:6b:e6:e3:7c:cf:92:92:3b:4c:9a:
                    87:9e:3f:9f:49:e9:85:e0:73:25:9b:28:72:95:6f:
                    b0:aa:2a:82:cc:5e:58:22:9a:dd:bc:28:48:5a:81:
                    ec:32:45:f3:1f:9c:04:8e:34:7e:eb:93:a1:e9:a4:
                    76:81:97:66:26:6e:7a:54:75:5a:4e:34:36:24:ec:
                    8d:8e:2b:99:60:8d:4f:40:c2:ac:f1:85:a0:8d:90:
                    d5:05:19:64:dc:87:9c:8e:7c:23:91:a1:d8:f3:3d:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AF:86:1E:46:0B:87:81:31:AD:1D:DA:F1:AA:89:FF:44:C3:BC:FE
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:43:dd:29:c6:2d:e7:70:31:ad:aa:28:d0:56:15:e3:a7:c2:
         e7:bc:37:6c:6e:19:f0:4e:91:88:9c:24:16:88:4b:5f:e2:a4:
         11:4d:b4:b1:58:c2:17:7d:a4:d9:a4:d4:7c:72:e0:dd:71:28:
         26:9b:c2:11:43:69:6a:45:86:29:b7:5f:d8:45:54:96:bd:4e:
         0d:17:f3:ff:4e:67:1b:d8:9e:e6:c5:88:93:d3:7c:b2:3a:35:
         65:19:d4:cd:0f:a8:7e:5e:f1:6d:bb:21:a3:07:d3:a3:00:98:
         1a:e2:9a:68:af:a6:d1:63:1d:a9:42:da:82:0a:f3:7f:43:ac:
         e9:86:1f:d6:e3:1e:16:58:4e:b3:c7:64:60:24:6c:bc:8f:24:
         ab:02:98:e7:45:b0:01:66:2d:db:b6:fe:f4:3f:dc:07:33:1a:
         3f:40:a4:13:8f:87:00:db:d5:dc:b7:f4:a8:05:aa:f7:1a:45:
         64:94:20:d5:36:5d:e1:34:9e:2b:91:7a:57:a2:1c:85:66:3f:
         6c:96:e2:e3:ee:e6:ef:5b:c3:50:83:18:37:b7:4d:d9:03:ee:
         2f:7a:ea:86:c2:c3:e4:e2:04:05:7a:b2:f5:8a:c5:45:21:de:
         c3:6a:f9:c1:70:25:27:0a:79:73:c4:43:ef:65:05:3b:3a:8c:
         24:7c:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:12 2026 by rpki-client