Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          1fvYdXNHDhD+bJg73/UwC2cksVFdBPUSV6z4VsxFMa8=
Subject key identifier:   08:28:A6:72:A4:9A:87:3E:F2:95:EF:6D:19:12:31:71:13:E5:19:DC
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       019E300588652B04DF94CED5A4B32E3DB1BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          1005
Signing time:             Sat 16 May 2026 09:02:09 +0000
Manifest this update:     Sat 16 May 2026 09:02:09 +0000
Manifest next update:     Sun 17 May 2026 09:02:09 +0000
Files and hashes:         1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: UXfesfU5YNfju3evGrW6WXDKBqwyi/8DSxQKPrMQVzI=)
                          2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:88:65:2b:04:df:94:ce:d5:a4:b3:2e:3d:b1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: May 16 09:02:09 2026 GMT
            Not After : May 17 09:02:09 2026 GMT
        Subject: CN=0828a672a49a873ef295ef6d1912317113e519dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:13:23:53:97:12:1b:a6:04:2f:ee:1c:2f:
                    19:85:c8:bf:63:87:1e:84:d7:38:5c:e0:e3:f4:49:
                    59:e4:7e:cf:47:05:2c:a4:b2:3d:39:83:a7:13:9f:
                    1f:a0:82:b0:28:55:aa:1b:f2:79:b6:b5:f9:75:58:
                    2c:7f:c8:a6:5e:8e:c5:85:38:58:6f:82:8c:0e:9f:
                    81:05:a1:42:13:ed:5a:06:a7:27:47:94:d9:43:39:
                    95:17:03:cf:96:46:de:51:2f:5d:99:06:a2:37:ea:
                    ea:e7:66:29:b4:30:78:e6:7c:2d:4a:8b:ad:4f:96:
                    eb:58:a2:fd:f8:2c:1f:ba:5d:c1:bd:86:e0:da:76:
                    e6:2a:a7:0b:44:1a:a8:e7:cd:9a:14:d6:5a:58:0f:
                    46:30:17:88:a5:6e:f3:22:af:bc:db:9f:4d:a7:60:
                    60:1d:e1:51:54:6c:ac:be:79:56:bf:06:32:72:5c:
                    01:e1:47:01:85:94:58:e7:10:8e:ea:c5:05:fc:81:
                    67:52:1e:13:71:55:42:0e:53:78:0b:3b:31:ac:c5:
                    4e:c0:1b:18:c6:0e:e5:28:4e:8d:62:a1:13:7c:ae:
                    43:af:ad:ce:a3:f7:a9:e3:9c:8f:d1:28:8c:71:db:
                    e3:66:cc:0d:79:0c:f7:f6:18:2a:13:d3:b5:14:ee:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:28:A6:72:A4:9A:87:3E:F2:95:EF:6D:19:12:31:71:13:E5:19:DC
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:af:e7:63:87:97:ab:61:2c:b1:e4:e1:55:45:49:de:f9:
         ca:56:5e:e0:ef:4a:88:1a:df:ec:29:be:d8:d4:ca:e0:4d:07:
         e3:db:38:2d:eb:09:4d:77:af:5d:2e:dc:a0:ec:38:f0:73:8c:
         61:90:42:30:e5:42:c8:12:07:e4:fa:bf:ff:87:84:71:09:09:
         ed:e3:fc:61:30:de:ee:52:10:4b:7a:59:56:8c:69:fc:09:e2:
         51:49:91:96:a1:41:e2:74:75:18:0a:97:f8:a4:39:9f:71:69:
         77:d2:03:5b:31:f8:45:65:d4:c8:81:3c:ba:87:6c:c1:4f:40:
         6c:04:b5:f6:62:ca:ad:b0:5e:d0:e2:ca:e4:cc:77:4e:43:0f:
         31:c6:32:97:91:a9:2c:dc:0c:1b:fa:a4:55:9d:2d:4d:75:0a:
         3c:2e:f6:a1:4a:22:66:02:a4:d2:6c:5b:6d:38:3b:9c:15:a4:
         cb:30:d5:71:d2:b2:94:53:80:13:a6:0a:35:ce:d5:db:dd:f0:
         fd:5b:31:85:9e:88:d8:6e:72:c9:e6:c3:2c:60:eb:9b:67:cf:
         ed:90:e0:f3:d2:04:89:20:b6:39:fc:77:ef:3f:e2:4d:84:84:
         45:6e:c7:01:11:f0:ef:a8:35:90:23:59:6a:3b:04:e0:31:e8:
         d7:7a:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:52 2026 by rpki-client