Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          CTX9IkeC/pmmAyRGVoH/ADnHqclH6OV+KvFdw5F9doE=
Subject key identifier:   83:79:27:9F:2D:2B:22:80:65:43:B4:30:6D:73:16:C7:01:7D:66:5C
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       019E303B3001287E961872C32128EE97B08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0D84
Signing time:             Sat 16 May 2026 10:00:45 +0000
Manifest this update:     Sat 16 May 2026 10:00:45 +0000
Manifest next update:     Sun 17 May 2026 10:00:45 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: TpbuQ/XJQm8NCKxdnAP38Z/2PHTXksfokhzcLb946wQ=)
                          2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:30:01:28:7e:96:18:72:c3:21:28:ee:97:b0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: May 16 10:00:45 2026 GMT
            Not After : May 17 10:00:45 2026 GMT
        Subject: CN=8379279f2d2b22806543b4306d7316c7017d665c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:39:fb:9a:6f:fc:4b:f9:c3:93:89:0c:05:
                    cc:bd:2b:a3:57:5c:3f:18:ee:7a:e3:77:da:cc:8a:
                    a7:b4:a3:be:66:d8:ae:b2:90:4a:d1:3a:84:d7:18:
                    56:4c:9c:94:cb:20:87:6f:08:8a:cc:64:36:48:3b:
                    3e:b5:d7:ad:4a:78:0f:05:a7:fe:37:83:a9:c3:42:
                    6b:94:18:ab:16:c0:86:ac:94:b8:20:c2:ca:49:ad:
                    d0:65:5a:93:3b:0d:79:82:80:73:f5:c3:bf:f5:55:
                    f2:58:1d:73:eb:2c:80:8a:3a:64:29:b5:a0:28:e6:
                    29:81:d5:4a:9f:0b:66:39:e1:5a:6d:fe:c8:b4:4a:
                    72:1c:00:99:26:b9:59:19:54:3b:5d:06:e6:49:d9:
                    3d:51:a8:13:45:1f:77:44:be:c6:c2:14:ac:33:90:
                    43:c0:77:d8:fe:60:29:a2:3e:2a:d5:4b:3d:e2:c5:
                    dc:a1:4c:f3:f9:14:22:6d:6c:c1:4a:76:a1:90:66:
                    07:ea:73:36:47:44:81:6d:18:22:3e:5f:17:a9:a5:
                    83:a2:26:c1:fc:0b:02:84:f9:77:17:e5:a9:55:54:
                    42:2a:18:8d:83:3d:01:ca:d7:d0:65:85:43:09:16:
                    fc:25:fe:ab:43:d5:af:36:84:a2:1f:7f:d3:80:43:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:79:27:9F:2D:2B:22:80:65:43:B4:30:6D:73:16:C7:01:7D:66:5C
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:da:11:57:98:7e:56:93:ac:72:7c:bc:a3:62:6d:2c:4f:
         2b:8e:8a:e6:1e:93:3e:ce:8a:b8:ef:48:3b:b1:36:34:28:f7:
         d0:ad:94:86:44:e6:59:ec:0c:b5:c1:d2:9f:25:46:a4:78:94:
         36:9d:ac:5b:6f:8c:3e:5e:bb:c6:9c:ae:1f:37:e0:14:53:2c:
         7b:15:bd:55:34:9a:d3:2a:c8:3d:f0:3e:74:72:ce:ad:27:01:
         f1:3b:a4:51:9c:c6:40:a7:87:e4:2f:86:72:cc:c2:b8:fb:ff:
         3e:bd:ef:54:3c:cb:3b:1c:9d:cd:62:57:12:d4:c0:9d:3e:ec:
         6d:95:73:a0:0c:a1:22:53:70:1e:7b:0a:79:ae:1f:b9:94:16:
         04:fb:9e:c6:a0:45:de:09:ba:6a:88:6e:4e:d1:b7:63:0d:0e:
         5f:2f:7d:7e:2b:60:68:11:69:eb:fd:89:4d:d8:cd:8b:16:76:
         37:54:cd:e1:13:93:ce:8b:b9:8f:6a:1d:94:31:81:e2:f0:10:
         79:ec:d6:d8:f9:ea:ec:ff:de:3f:38:aa:bf:21:1f:8b:c6:71:
         26:7b:63:56:28:38:4c:8c:dc:ab:c8:31:ab:da:c0:f1:7e:ee:
         74:c3:19:6b:26:f5:eb:82:75:7d:ea:58:e6:a9:b1:1a:63:0f:
         80:81:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:12 2026 by rpki-client