Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File:                     6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier:          RAm+MKn21OMKVPX2GHTt33/0OGcBcSkfm8lMMYjhEFY=
Subject key identifier:   7A:0D:62:79:11:62:59:79:25:04:1E:6F:FD:F8:BF:D5:1D:81:4E:0E
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer:       /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial:       019E311747BB4914172CEDFE77FE6D5FB6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number:          0861
Signing time:             Sat 16 May 2026 14:01:09 +0000
Manifest this update:     Sat 16 May 2026 14:01:09 +0000
Manifest next update:     Sun 17 May 2026 14:01:09 +0000
Files and hashes:         1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: aTtpLNIR8JGQj6YGLiRmhathvgvFc4OU076tZCDhtiw=)
                          2: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (hash: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c=)
                          3: sUUUlDmsoS6747nfIf4AnZev3Mw.roa (hash: VNLA7YgLPaW7HOG2eQTqxctatvOH0tDHQtJnBRxlotk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:47:bb:49:14:17:2c:ed:fe:77:fe:6d:5f:b6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
        Validity
            Not Before: May 16 14:01:09 2026 GMT
            Not After : May 17 14:01:09 2026 GMT
        Subject: CN=7a0d62791162597925041e6ffdf8bfd51d814e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:ec:2a:63:92:61:a5:d2:a5:7f:8d:dc:9a:
                    5f:92:3c:d2:97:32:69:9d:f1:c7:4e:32:fd:88:06:
                    ca:f3:12:f8:b4:b4:0a:6b:73:8c:55:e3:c8:93:dd:
                    c4:2c:6a:eb:e2:63:0b:af:4c:d1:06:7e:86:df:7d:
                    6c:4f:63:28:28:ab:06:a3:10:c3:c8:f9:48:3f:df:
                    2d:82:0a:c1:f1:cf:3e:87:96:9c:20:0f:aa:60:15:
                    c7:bf:84:3d:66:2b:d0:80:da:ed:ea:15:fe:41:36:
                    15:65:c5:1e:d3:71:cd:be:b1:d6:80:8b:d4:3e:a3:
                    7c:b0:b9:92:4f:a2:e7:8f:3f:5f:fe:85:f5:7d:85:
                    40:dd:67:59:1a:bf:c8:8f:8d:82:c1:0b:29:b4:b9:
                    b8:3d:34:88:bd:82:88:30:12:bd:2b:f6:88:ad:f5:
                    a8:4f:da:32:d5:3c:6a:ac:5f:55:13:52:47:6d:57:
                    89:df:c9:13:a9:47:25:9d:52:c8:aa:5f:fa:83:da:
                    93:a8:e4:b4:97:3c:3e:b7:e0:5e:62:1e:b9:fc:37:
                    4c:5e:b4:a7:0c:d5:0e:39:4a:68:a3:56:06:47:8f:
                    fc:11:ff:f0:0b:e2:fd:72:a2:5b:e0:c6:91:bb:88:
                    25:f2:dc:46:f8:a3:b8:93:69:43:d2:3f:77:b9:68:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:62:79:11:62:59:79:25:04:1E:6F:FD:F8:BF:D5:1D:81:4E:0E
            X509v3 Authority Key Identifier:
                keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:84:0a:94:90:6d:35:88:da:f6:b0:d3:bf:39:08:6e:6b:59:
         2f:db:0d:89:72:65:bc:69:03:b4:68:4f:29:0e:73:00:ac:57:
         55:2b:0f:bb:f7:ab:3d:9d:1e:71:6b:d5:1f:79:43:f2:94:d7:
         76:5a:65:04:14:eb:59:e0:f4:91:fa:77:e7:92:55:d5:b4:05:
         27:86:c1:6b:a8:b3:7b:1b:bc:d5:25:d0:d8:a0:20:b8:09:c6:
         e4:bd:53:fd:a3:c3:6e:17:11:42:9d:d5:47:1a:ea:c7:ee:d5:
         a3:38:ec:5e:4e:92:2a:9b:cd:32:3d:71:7e:e8:60:cf:3d:7c:
         7b:a4:72:04:3c:0f:ca:eb:59:21:ba:af:1a:24:43:6b:a6:fc:
         1e:43:8c:74:cc:7c:38:68:19:81:7d:e8:0d:0d:2a:d7:ff:a0:
         ae:94:d5:68:c5:90:0f:b3:a6:ab:4d:3b:89:e5:8c:7b:93:dd:
         ae:19:c0:b4:39:3c:e6:ac:a1:58:27:7e:14:98:80:de:0c:8b:
         d7:9b:27:e5:e1:d6:b2:99:d9:33:ff:09:c5:4b:f5:38:e0:2e:
         69:28:4a:a9:15:79:51:85:b5:5e:43:8c:c7:b4:75:53:aa:01:
         34:c6:8f:1e:c6:52:60:d9:c0:19:18:da:38:1c:f9:f7:ef:cd:
         64:9f:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:56 2026 by rpki-client