Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
File:                     6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json)
Hash identifier:          OEb5HAkwV0yOUijlkAMc4obtFPZUIPYZj/HFccpVBaU=
Subject key identifier:   9E:B3:CD:7D:43:32:B5:27:97:1C:AF:A4:3A:B4:9F:A0:A8:D0:9B:38
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Certificate issuer:       /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial:       019E2F6034273B21311FE60B554EC3745074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
Manifest number:          111E
Signing time:             Sat 16 May 2026 06:01:34 +0000
Manifest this update:     Sat 16 May 2026 06:01:34 +0000
Manifest next update:     Sun 17 May 2026 06:01:34 +0000
Files and hashes:         1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: di5k/1ghy5Efp+/0ZlCuB2WZINmeRCcZsYofbdfwI3I=)
                          2: DAPMuxk_tOuoRjCSRzXJujqyl8k.roa (hash: lWuY23Ph8QIbtaF8HQP8ymDgzu9J9XtgohwKflMSPm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:34:27:3b:21:31:1f:e6:0b:55:4e:c3:74:50:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
        Validity
            Not Before: May 16 06:01:34 2026 GMT
            Not After : May 17 06:01:34 2026 GMT
        Subject: CN=9eb3cd7d4332b527971cafa43ab49fa0a8d09b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:bf:19:66:1d:b4:14:f1:b8:08:98:30:db:
                    f8:1a:fa:02:9a:ab:fa:b5:cc:69:1f:03:d8:fb:c9:
                    d5:3e:76:38:44:60:34:d2:aa:96:d0:d2:0a:c7:da:
                    56:64:cd:9b:fc:3b:5d:1c:dd:cf:b2:04:a6:1d:b3:
                    2c:f4:a7:56:8a:93:33:ce:83:24:e8:52:26:ec:54:
                    17:cc:f1:55:68:09:a5:8c:58:b2:b7:69:4f:c2:5e:
                    fa:65:46:3f:77:97:7f:a3:08:26:de:9b:0f:dd:ac:
                    e0:64:a9:b9:a4:63:b8:27:68:b0:8b:eb:42:d5:37:
                    48:1d:d9:25:c3:ff:52:82:24:77:db:e1:50:0d:a6:
                    11:df:e8:9f:d8:ac:6e:ca:4e:9d:ed:9e:08:2e:93:
                    81:ca:d5:98:a3:0b:6b:b5:1e:65:9d:15:78:5f:49:
                    a5:20:0a:28:64:d0:1c:a1:39:39:df:db:cf:9a:1b:
                    99:9b:cb:c1:37:76:a5:a4:9c:6f:95:0c:c5:51:47:
                    e5:9d:27:42:ef:12:03:72:82:df:b2:bd:3f:b7:b0:
                    b9:19:49:62:f5:85:f4:21:ef:e0:ff:be:aa:d9:5f:
                    be:c6:25:0a:5a:8b:48:c5:c1:66:0e:b9:8b:51:91:
                    9e:12:a9:ce:0f:49:5e:1c:2d:96:93:3b:72:a0:32:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B3:CD:7D:43:32:B5:27:97:1C:AF:A4:3A:B4:9F:A0:A8:D0:9B:38
            X509v3 Authority Key Identifier:
                keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:71:da:a8:31:4f:cd:74:15:ca:71:3b:b8:20:c1:46:4c:
         bf:ff:9d:31:06:fa:c3:c4:5e:f2:e0:e4:fa:de:87:3b:31:ee:
         3d:ce:33:d7:4c:91:02:54:34:9f:3f:19:7d:b9:93:e0:41:19:
         e3:73:84:a4:67:93:65:5e:cf:00:b8:50:ce:d0:c5:4a:c5:61:
         f6:7a:95:c2:e2:a4:fa:20:a6:0b:86:1e:21:26:61:37:7d:a9:
         0c:7e:69:8a:b6:20:ee:51:3a:cd:2a:7f:eb:63:72:c0:7b:c0:
         34:a0:c2:1d:1a:b5:67:7f:10:31:36:f0:6c:3b:46:f6:a6:34:
         67:63:6d:20:13:f4:94:f4:91:6d:c7:92:a5:44:75:9b:4c:94:
         73:2a:9a:87:4f:7f:0f:8a:c6:d8:0c:68:86:03:9c:57:21:f8:
         ac:3e:57:3e:4d:4c:75:6a:88:d9:56:dd:28:20:1e:34:82:ef:
         53:48:a3:aa:69:e0:6e:e5:bc:7b:03:10:7b:51:9a:6f:f3:b8:
         c0:22:e7:7c:2b:53:63:cb:51:5b:a7:59:fb:0e:37:9e:a4:b4:
         f1:c5:c0:04:d9:a9:8b:16:15:a0:a1:98:43:ab:1b:0f:9b:21:
         f9:05:7d:90:a1:1e:cc:30:cf:9c:05:4e:20:b2:82:5a:35:ba:
         33:75:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:38 2026 by rpki-client