Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          Si+lCyJF38sNTZEG+3xNWmqmC0cGXAk2SmnvCPB7m+w=
Subject key identifier:   1A:44:AF:12:A3:B4:4E:2C:A6:E9:A3:40:89:B3:3B:F4:29:D0:D1:08
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       019E2FCDFDE76BF82CBD6D288D1ACFA63ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0C29
Signing time:             Sat 16 May 2026 08:01:29 +0000
Manifest this update:     Sat 16 May 2026 08:01:29 +0000
Manifest next update:     Sun 17 May 2026 08:01:29 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: HNSxngQjcugD7Md4GxYfN1/sVkQ4u1YOTDovw7ew28A=)
                          2: H6-FSC2W-7MZwFLducWzxTiTk1Q.roa (hash: M01qYjr1lkeGo2Zh4TnE75ep6vS7RdnFiFA27dCWb7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:fd:e7:6b:f8:2c:bd:6d:28:8d:1a:cf:a6:3e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: May 16 08:01:29 2026 GMT
            Not After : May 17 08:01:29 2026 GMT
        Subject: CN=1a44af12a3b44e2ca6e9a34089b33bf429d0d108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:ed:90:dd:bb:00:61:2c:08:df:e7:93:d5:
                    1f:c2:3e:be:b2:34:73:d1:21:4b:02:d1:08:93:5d:
                    12:3a:f5:8a:11:3e:3f:17:9a:2b:a8:2a:19:17:e2:
                    30:5c:56:7b:8f:8c:66:9c:a1:92:dc:da:64:1a:7c:
                    dd:e7:6f:81:f5:a2:5e:f2:28:0f:21:4a:3d:40:76:
                    7a:28:fb:d6:bc:09:d5:a1:86:c0:76:ab:29:ca:89:
                    30:85:f6:7d:5a:52:12:32:30:75:d9:93:a6:86:d4:
                    d1:fd:08:e2:97:b9:a5:7a:7c:08:11:d8:8b:47:4d:
                    d7:63:c7:ab:d1:7f:42:a2:93:84:a3:1f:52:17:40:
                    d0:f7:8b:6f:17:f1:06:f3:3e:1a:7b:e3:33:15:53:
                    cd:79:88:d8:6d:7b:80:cf:09:d7:60:a2:16:ed:74:
                    37:85:ab:74:ea:54:93:27:27:5f:fd:8e:8d:a3:02:
                    75:6a:ec:45:a0:f6:ea:ba:fd:85:f3:b8:ff:20:e6:
                    0e:e7:0e:84:00:18:33:2f:3c:e8:82:9b:d2:26:45:
                    06:3a:12:75:f5:a9:84:23:d5:a0:e6:c1:4a:a6:71:
                    b2:62:d0:bd:7f:8a:ae:eb:dd:cd:48:95:4e:04:2c:
                    94:01:5c:e3:27:7a:5a:19:10:bc:b9:20:46:18:13:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:AF:12:A3:B4:4E:2C:A6:E9:A3:40:89:B3:3B:F4:29:D0:D1:08
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:2f:8a:4c:f6:bf:60:73:d2:73:77:79:fb:06:d0:a0:26:
         e2:75:f9:66:9a:03:de:a3:ea:a8:11:8a:4e:4e:39:49:53:f8:
         04:2e:d3:f3:89:1c:ab:b1:f7:ea:43:6b:ed:0c:34:0b:ea:62:
         de:45:ff:7e:b0:00:ab:b8:34:ad:28:a1:1f:27:8c:33:29:07:
         53:03:a0:70:77:46:75:ed:c5:0d:78:4b:ac:92:be:47:e8:1f:
         6e:ee:e3:b2:e1:ee:db:8e:2b:0b:7d:eb:70:1f:d7:ea:5a:7d:
         7e:65:d8:ea:6d:a3:fd:28:69:fc:dc:10:f5:ac:56:0b:73:df:
         12:4d:c5:29:af:8b:19:e7:f4:50:6b:5e:4d:f7:fb:5b:31:42:
         7a:fc:b7:63:da:d2:31:e9:ce:fa:43:cd:50:99:0d:72:ce:b3:
         48:a7:0f:9a:c7:e3:fd:95:62:47:77:74:70:4e:72:da:df:52:
         a6:9f:a0:7f:76:3c:78:00:15:e5:d7:47:54:c0:8c:bc:a3:89:
         b5:49:a9:51:4c:1c:de:9f:a9:78:f4:ec:55:df:9a:31:ff:d7:
         e8:88:4b:76:2e:4e:e3:10:3d:56:0f:76:6c:2d:c2:9f:14:ee:
         6c:2a:f5:67:f7:a7:fa:5a:6e:8c:25:4a:91:1d:4f:1f:a6:50:
         ff:d5:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:02 2026 by rpki-client