Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          Zv7Hd2JnPTySH2c38ULwi5d+qbpBP0l5vGZVkyJ4VRE=
Subject key identifier:   05:BA:E5:2E:99:77:E7:53:9F:38:8A:9C:31:1C:CA:8E:A1:8B:07:72
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       019E2F96F113658F9B05B1601632B8A60642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0F66
Signing time:             Sat 16 May 2026 07:01:21 +0000
Manifest this update:     Sat 16 May 2026 07:01:21 +0000
Manifest next update:     Sun 17 May 2026 07:01:21 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: kGpeUM3F3bGR8CqUM7WLf4Jq/HjVJ6uAds0ojc+csPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:f1:13:65:8f:9b:05:b1:60:16:32:b8:a6:06:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: May 16 07:01:21 2026 GMT
            Not After : May 17 07:01:21 2026 GMT
        Subject: CN=05bae52e9977e7539f388a9c311cca8ea18b0772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:31:cb:06:b4:90:aa:8d:9a:41:85:83:db:
                    90:3c:b3:b7:0a:7e:ad:19:7c:a4:ce:11:e4:3c:3b:
                    58:c6:a4:74:51:99:e5:28:80:15:dc:fc:14:22:84:
                    26:bc:37:29:4b:9d:b4:3b:55:9a:26:68:4c:c5:d3:
                    93:dc:53:3e:63:22:9c:20:da:0c:02:3b:dd:c7:5f:
                    fb:ed:0b:bd:fd:91:25:45:a3:91:7b:b5:b6:22:9f:
                    3d:f6:8e:fb:dc:c2:f3:aa:c7:ba:6f:2c:fc:c5:a6:
                    dc:0d:6d:98:9f:0a:05:60:b9:41:f0:2e:25:c8:0d:
                    d1:76:cc:40:e3:50:f0:22:ee:61:77:86:42:ee:7e:
                    18:e3:19:c7:c3:53:b3:f6:0f:c4:6a:ae:8e:4c:0b:
                    4d:40:79:39:90:b3:4c:75:c8:68:ff:60:c0:8c:86:
                    63:a7:9e:3f:0e:6f:23:ab:c5:32:fd:a6:50:c7:32:
                    93:0d:83:4f:f8:91:78:43:42:8a:f2:f6:a8:be:98:
                    27:81:26:21:99:b8:0e:d8:51:35:9f:45:ec:54:19:
                    76:a8:52:63:3c:87:96:61:ba:27:e5:09:7d:09:60:
                    f2:bb:4b:ab:0b:8f:13:c3:c5:19:eb:71:a6:60:81:
                    5d:a6:f2:19:3a:0c:c2:71:13:ef:d7:c2:b7:8f:22:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BA:E5:2E:99:77:E7:53:9F:38:8A:9C:31:1C:CA:8E:A1:8B:07:72
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:18:66:42:26:75:6a:f3:35:b7:87:88:0d:d8:68:01:e1:
         fe:6f:06:7b:18:bb:b9:e5:45:cf:6c:04:b0:c6:03:74:d9:35:
         fb:e1:a3:5d:76:53:64:44:07:08:48:32:f4:57:de:51:fc:d4:
         ab:11:23:a2:ea:55:9a:6d:6c:c9:da:3f:73:3a:19:3f:c5:66:
         42:14:6b:f6:a8:5f:70:a7:33:ae:9c:69:a6:61:bf:d3:b2:99:
         48:63:56:f9:9e:d2:dc:a8:d5:ef:6b:7a:62:ab:58:2d:ef:1d:
         de:49:14:ef:1e:8f:37:7a:4f:5e:7c:5c:f8:4c:c2:ba:b8:ca:
         1f:87:95:3d:76:07:bf:a3:81:39:a4:e4:15:62:9a:aa:2e:2d:
         ad:89:14:10:d5:6f:b8:9f:76:7f:73:bf:43:7e:23:35:a7:42:
         69:d1:fa:a7:06:74:d2:1a:56:33:78:e1:80:51:6c:aa:3a:ed:
         83:27:f9:cb:b2:f5:34:b1:13:64:25:33:eb:7a:22:37:f7:97:
         0f:56:df:5c:77:35:34:2b:24:d5:47:8a:8e:da:f2:7e:1c:e5:
         51:4d:5f:79:0c:a4:1f:d3:b9:0e:2a:37:68:17:35:10:86:d0:
         f3:1c:08:f7:42:2b:dc:fb:25:2d:1c:cc:61:ca:6a:7e:ef:cb:
         7a:04:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:04 2026 by rpki-client