Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          acNhQLWsRJrKMp1IUDciI+6Bl5WlXuzQBNbcl0dQKXQ=
Subject key identifier:   E1:77:C8:EC:A6:16:6A:06:CD:44:DC:B1:6F:7E:B0:86:AD:08:26:CD
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       019E30A9A324B5CF3A2F2347223DD810B7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0C4B
Signing time:             Sat 16 May 2026 12:01:24 +0000
Manifest this update:     Sat 16 May 2026 12:01:24 +0000
Manifest next update:     Sun 17 May 2026 12:01:24 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: Yp6mzxXLfqeIrDO0+EaFcOEDFMI+F1FgFg4lUsLrSeM=)
                          2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:a3:24:b5:cf:3a:2f:23:47:22:3d:d8:10:b7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: May 16 12:01:24 2026 GMT
            Not After : May 17 12:01:24 2026 GMT
        Subject: CN=e177c8eca6166a06cd44dcb16f7eb086ad0826cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:5e:47:91:3e:2c:c9:81:3f:07:e3:03:fc:
                    e3:89:41:19:79:7d:7a:2d:61:65:eb:0a:ca:a7:aa:
                    1c:8a:65:56:52:d0:6c:38:dc:ec:cf:9d:98:13:fb:
                    dc:11:b4:85:fa:f5:11:e0:54:43:83:98:c7:6b:63:
                    a5:de:5e:0e:7b:13:f6:d8:7b:d9:b2:ba:dc:77:66:
                    16:c5:69:fd:ea:f4:6c:fa:fa:f0:84:72:c2:18:a5:
                    04:fd:05:b6:08:5e:d2:c4:4c:c7:a5:f9:fa:30:f8:
                    02:a3:5e:fc:09:c2:a3:b0:0e:2f:2c:33:40:32:56:
                    49:77:63:18:9b:4d:f4:dc:e3:e4:95:4f:90:f8:b7:
                    24:ef:f5:80:0b:d5:e7:13:af:6f:a9:01:73:25:8d:
                    e7:35:1d:65:f2:87:cb:01:ad:38:06:76:5b:9b:66:
                    3c:c5:9d:31:81:80:af:c8:c3:24:cf:f8:e0:93:45:
                    18:08:50:a7:1b:a9:0e:4d:91:3c:54:dc:e1:e6:e6:
                    6a:d7:e7:ea:f6:ec:a9:f5:22:dc:c1:72:01:1c:bf:
                    dc:ed:9c:95:b5:9c:de:6c:c9:fa:83:9d:11:27:73:
                    8d:1b:cd:af:1c:65:1d:85:59:41:05:53:c2:06:a3:
                    23:dc:9a:89:f0:21:ea:01:62:5e:fe:f9:76:79:be:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:C8:EC:A6:16:6A:06:CD:44:DC:B1:6F:7E:B0:86:AD:08:26:CD
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:de:b5:91:60:04:47:e9:b7:53:ab:07:95:60:c9:14:da:
         b4:2d:fc:94:96:cb:f0:f7:48:2d:97:1b:01:ab:b5:86:30:bf:
         a9:97:ff:ae:60:fc:54:23:e2:e2:ab:ea:d0:f2:cf:4f:f6:22:
         07:6a:e4:0a:b2:f9:e2:18:97:f3:df:13:61:c8:f7:91:bc:af:
         a9:08:ef:a0:fc:58:e3:88:7c:fb:c4:28:87:db:74:4a:8f:d6:
         04:95:64:fc:b6:14:6f:76:54:5e:6e:df:1b:59:9f:ed:78:05:
         8f:54:2d:20:44:94:7a:1c:21:e8:c9:0f:f1:0b:6c:ff:10:ba:
         1e:cf:ea:2e:60:58:10:c8:fc:e5:b9:fa:45:7b:1d:82:d7:30:
         4a:4d:eb:94:7a:a9:1b:09:83:f0:cc:1c:96:de:72:f5:ca:52:
         b5:57:60:50:b4:52:87:26:42:53:34:f0:bf:b7:42:31:26:a1:
         b9:b9:5a:cd:57:dd:4e:09:ea:08:5b:d7:eb:65:87:6f:58:16:
         a7:76:1c:35:f1:8c:15:5d:b8:fd:0c:9e:e8:56:ef:13:b4:85:
         7b:5b:f1:42:0e:8c:2d:ed:fa:35:b2:00:62:9b:ec:a1:39:02:
         5c:4b:3d:06:4a:2c:5c:d4:78:74:e2:20:08:cc:b2:35:ff:28:
         f5:22:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:45 2026 by rpki-client