Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File:                     6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier:          sggmpgnooKff7VR+1bEII7U1aHtk1NfAV+sK9lMcyus=
Subject key identifier:   B6:EC:89:A4:15:A2:8D:21:97:D9:E4:21:80:FB:A1:56:DD:76:77:39
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer:       /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial:       019E30E0489CB256A67DCB4EDD1E75F99FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number:          1061
Signing time:             Sat 16 May 2026 13:01:05 +0000
Manifest this update:     Sat 16 May 2026 13:01:05 +0000
Manifest next update:     Sun 17 May 2026 13:01:05 +0000
Files and hashes:         1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: D1/z3NprDiZAjR+aXaAGPwVO0MAocyEgsBj4Njgtmz8=)
                          2: NCFpucR4-r83kyx2khhJCgLkruU.roa (hash: TaSCKdlQI8N/cQC2z/f6Jx4oLGmqI6E65JRRfPyvaiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:48:9c:b2:56:a6:7d:cb:4e:dd:1e:75:f9:9f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
        Validity
            Not Before: May 16 13:01:05 2026 GMT
            Not After : May 17 13:01:05 2026 GMT
        Subject: CN=b6ec89a415a28d2197d9e42180fba156dd767739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:45:66:fb:8d:80:e1:e9:fa:2c:d3:96:6c:
                    af:a0:67:7b:80:5f:05:d3:68:01:fe:03:8b:c4:ea:
                    b5:97:c0:3e:f1:4e:28:35:b6:3e:22:ba:67:d0:db:
                    d3:f2:74:d0:c1:61:ea:5f:69:08:65:ab:ee:c4:2a:
                    f8:8d:38:ed:5e:d1:8e:c7:93:24:e4:9e:12:ee:06:
                    a4:11:d0:a4:3e:8a:5f:c4:e2:dc:31:d0:b1:26:3f:
                    68:d2:9b:f8:63:35:84:e5:77:95:f0:8c:f1:30:4d:
                    4b:f9:d9:00:8d:77:65:7b:da:54:07:22:0a:c6:6c:
                    bc:bf:3d:04:be:fb:50:67:10:01:e3:10:2f:b0:00:
                    05:ca:75:4c:28:62:cd:25:64:57:ad:46:30:6b:68:
                    ac:f0:f7:48:e5:10:a9:6c:6f:ee:05:a2:fb:9d:09:
                    58:2b:19:f3:42:7e:81:29:49:98:5f:1e:8d:18:13:
                    e8:74:15:65:f0:f2:24:60:7d:48:af:3b:45:55:f0:
                    71:02:8f:b6:5a:aa:3d:9d:a4:63:cf:a4:f0:01:4d:
                    e8:34:27:c7:96:11:d2:70:f3:69:d1:13:eb:ce:f9:
                    3d:7c:74:9f:3f:8b:fa:ee:e9:2f:eb:0d:e7:59:8a:
                    d5:c0:6e:82:7a:cb:f5:ce:6e:1a:38:ca:b9:be:84:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:89:A4:15:A2:8D:21:97:D9:E4:21:80:FB:A1:56:DD:76:77:39
            X509v3 Authority Key Identifier:
                keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:5b:de:48:c4:a6:a4:06:e4:c1:2b:f6:34:eb:72:c5:d2:
         d9:75:76:54:9b:5b:49:86:65:c2:db:ad:cf:80:f0:18:e2:2b:
         86:8d:08:60:08:20:8e:22:2c:2c:44:57:a5:25:06:26:bf:0a:
         f8:b0:0f:af:06:f5:45:49:65:54:8e:f9:47:57:11:61:77:80:
         86:7f:c4:af:7a:af:59:f1:3d:1c:04:cc:98:89:33:2a:d2:43:
         3c:d0:70:02:50:e2:a4:33:46:4f:23:65:ae:50:10:75:f9:22:
         60:3c:d9:fd:75:62:aa:f5:8e:e1:06:19:60:79:f8:2c:97:b3:
         eb:dd:7a:51:b6:2b:d1:30:06:9a:61:9a:4d:77:07:eb:33:6e:
         d3:d3:40:18:92:0a:a7:ba:5c:c4:5f:09:92:02:c1:20:a6:df:
         87:1b:39:e9:95:96:8b:19:f9:8c:83:62:74:e1:1e:1c:b5:fa:
         ad:58:c6:45:84:18:2c:5c:80:77:08:49:2d:3b:ea:27:b3:a7:
         16:e9:4e:0f:de:bd:e8:62:ee:85:86:0b:9f:5f:99:b7:0f:89:
         92:3d:09:fb:7b:19:6a:89:66:3c:e3:7b:0e:f6:cc:c7:b4:58:
         e3:f4:80:a9:d3:d5:5c:1d:64:4f:81:6d:99:73:b3:2b:d2:87:
         8b:b8:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:56 2026 by rpki-client