Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
File:                     6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft (raw, json)
Hash identifier:          gd5JF/DlhrmuBujsp12pYJoC9LA+q21AYZodQjDSz6w=
Subject key identifier:   4A:68:E6:F4:F8:F8:CC:F0:0D:99:6D:30:2E:A7:FF:8D:AF:77:39:0A
Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
Certificate issuer:       /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Certificate serial:       019E303B4A34F3B6EC50874B67E4B176814B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
Manifest number:          065E
Signing time:             Sat 16 May 2026 10:00:52 +0000
Manifest this update:     Sat 16 May 2026 10:00:52 +0000
Manifest next update:     Sun 17 May 2026 10:00:52 +0000
Files and hashes:         1: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl (hash: I0cz2DSpVDfPKyNaaXIS3OiZ4OTtoR49FmMyps0x+8Y=)
                          2: BVYN4mpgVpQOoKQGpc1xRKPLhCo.roa (hash: Z4P+UxXaSgUPpz9h0OSP10XtT9KI4gXF8z8dqug7dp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:4a:34:f3:b6:ec:50:87:4b:67:e4:b1:76:81:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
        Validity
            Not Before: May 16 10:00:52 2026 GMT
            Not After : May 17 10:00:52 2026 GMT
        Subject: CN=4a68e6f4f8f8ccf00d996d302ea7ff8daf77390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:88:13:1b:b9:88:3e:0a:f4:a7:24:44:d8:
                    93:9b:6f:0a:b1:b3:b5:9a:02:05:40:7e:43:84:ca:
                    5f:1b:30:96:02:e1:ad:8a:91:6a:e4:9c:ec:3b:ef:
                    b4:65:e9:5b:5f:f8:a6:06:00:84:cf:4e:52:a6:19:
                    14:b8:cd:9b:ef:e4:14:cd:28:99:9f:41:34:54:b2:
                    92:33:4d:62:e4:04:9e:2b:c2:df:f5:dd:8b:22:80:
                    e4:db:7c:01:48:e0:23:93:23:5b:f1:80:c3:5c:0e:
                    43:cd:ed:d0:70:66:22:dc:12:bf:08:84:2d:d7:cc:
                    01:4c:7d:3c:9f:bf:bc:61:d8:13:c8:3c:c8:78:c4:
                    fa:1c:62:2a:f3:14:89:a3:84:f9:9c:d6:43:e2:ad:
                    71:fc:ae:c5:3f:1f:0a:90:d0:d4:6b:d7:8d:15:ea:
                    b8:bf:15:44:0d:10:f4:10:5f:6b:0d:19:28:44:2f:
                    5f:33:d7:fe:b6:5e:59:f5:ef:fb:75:12:6f:90:f8:
                    54:ac:cd:14:15:bb:fe:93:be:79:1a:ff:73:eb:98:
                    aa:d9:f7:f7:c8:21:9d:be:18:0e:f4:f0:51:fa:43:
                    4c:af:7c:de:49:31:a8:ed:d3:c2:07:2c:3b:fa:78:
                    dc:23:83:7e:de:0c:32:85:7d:b0:4e:8b:93:a7:92:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:E6:F4:F8:F8:CC:F0:0D:99:6D:30:2E:A7:FF:8D:AF:77:39:0A
            X509v3 Authority Key Identifier:
                keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:8b:25:f5:6a:26:91:df:6d:66:3d:a8:bb:74:4a:89:16:
         97:c7:57:33:32:4e:a0:a6:2b:2d:a9:1d:e4:8e:bb:d4:87:3c:
         a9:fe:37:b4:60:77:db:c1:e0:30:81:0c:4c:92:9f:28:9d:b1:
         f3:3c:cd:61:ed:af:a9:44:1d:56:02:cd:99:c9:0b:bc:42:9a:
         cd:f9:35:05:18:ba:ae:5f:0b:ac:42:02:9b:d6:e9:f6:49:97:
         26:88:eb:a4:47:31:bd:25:7c:82:79:96:cf:2f:81:9f:b2:26:
         bb:a8:21:d9:f9:73:39:f5:ab:2c:ef:71:3c:e5:e4:a6:3d:3a:
         5a:92:49:3a:98:d7:3c:76:d4:cb:83:7f:82:f8:ee:46:2a:d1:
         7d:98:71:24:0f:c8:5e:7c:e7:f3:c1:f6:e2:c8:7b:49:11:69:
         09:95:b8:61:fb:8b:99:14:24:6d:b1:f2:0e:01:38:cc:b4:70:
         0b:fd:3b:27:a0:a1:53:88:6b:a3:02:12:1d:41:ec:9a:6d:ca:
         a6:cc:76:b2:40:54:9a:b1:50:d5:d5:af:f7:29:99:b4:77:bf:
         9b:db:43:2e:e0:11:e2:83:57:3d:2b:fc:5c:73:01:85:ff:a9:
         11:9d:9e:69:1d:09:20:f8:5b:4b:0b:cf:25:d8:ed:4e:56:25:
         63:69:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:17 2026 by rpki-client