Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File:                     6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier:          1/7fwGauJ8aRm11lGl1VdYlnmwklkIFZyZJ9HBtzlCA=
Subject key identifier:   F0:58:E0:63:AE:D7:CA:6D:1E:02:BA:FB:13:B2:F2:5D:44:12:71:E4
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer:       /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial:       019E2F975C17D8CE7199D6BFF04E2A04CB11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number:          1402
Signing time:             Sat 16 May 2026 07:01:49 +0000
Manifest this update:     Sat 16 May 2026 07:01:49 +0000
Manifest next update:     Sun 17 May 2026 07:01:49 +0000
Files and hashes:         1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: aMyvjdgdGQvTId5dWoOlij6epPq2uZWdHvH2O9Okxm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:5c:17:d8:ce:71:99:d6:bf:f0:4e:2a:04:cb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
        Validity
            Not Before: May 16 07:01:49 2026 GMT
            Not After : May 17 07:01:49 2026 GMT
        Subject: CN=f058e063aed7ca6d1e02bafb13b2f25d441271e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:22:4c:c1:05:c1:90:1f:cd:17:4f:46:9a:
                    e5:3d:bd:79:04:fe:07:73:e4:1f:95:c6:05:67:be:
                    2a:c5:3b:bc:9f:58:3a:eb:73:13:70:ed:38:3e:d3:
                    b0:ea:0a:83:ce:d4:a1:cd:69:cb:71:dc:46:4f:b2:
                    21:8f:9b:e9:63:74:8b:00:1a:bd:8a:3b:69:cb:a8:
                    02:5d:28:10:5a:fe:4d:04:af:44:5f:80:ba:82:1c:
                    2f:96:93:2e:86:ed:75:a3:c7:b7:e1:91:e4:e0:74:
                    a2:be:da:e4:06:fd:0c:77:6d:f6:9f:11:58:35:7f:
                    93:78:f2:91:b4:b7:47:b5:13:c7:d1:5d:f8:b6:93:
                    d3:a6:b7:0a:c6:fc:f9:4d:09:31:5e:64:14:08:a5:
                    c3:10:e0:02:9d:cf:90:22:ac:1e:e9:9d:a3:c9:27:
                    19:77:40:75:03:2d:61:99:cf:d1:ba:4f:e4:8b:ca:
                    04:c2:9f:c0:60:ed:de:95:06:74:eb:71:38:3f:fe:
                    f6:7a:bf:8c:45:46:c8:76:53:3a:5b:8d:6e:1a:92:
                    f9:49:cd:93:00:01:6c:c3:b4:23:49:96:e1:f9:1a:
                    c2:d2:d2:7f:dc:fa:ea:e0:91:c8:27:74:83:94:b9:
                    f2:f6:ae:90:9b:47:1e:91:83:2c:52:41:1e:59:91:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:58:E0:63:AE:D7:CA:6D:1E:02:BA:FB:13:B2:F2:5D:44:12:71:E4
            X509v3 Authority Key Identifier:
                keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6e:6f:ed:e4:67:5f:1b:ee:c2:6e:c7:17:52:8d:be:58:1f:
         b4:8c:37:ce:b8:ff:c0:07:33:cf:43:04:3d:8a:b5:f8:40:0f:
         60:f7:46:e0:6b:e1:5e:6e:81:bf:78:84:bc:60:61:64:80:98:
         a1:2d:6b:02:7d:9f:65:90:27:d1:23:98:d3:8f:92:3f:07:78:
         70:26:5d:18:ed:31:17:10:95:77:e6:f9:a3:95:aa:24:3b:0f:
         e1:c0:f2:38:d2:0c:17:ce:07:63:f5:06:ee:f4:d3:65:b2:c2:
         75:f0:eb:37:42:86:71:b8:25:85:d6:4e:bf:6c:bc:26:12:12:
         49:09:21:f9:e1:5c:24:4f:dc:ae:f9:63:bb:e2:69:69:ca:3b:
         11:3e:cb:95:7b:96:b3:b0:72:e5:34:ec:69:93:c7:d2:07:d6:
         af:13:23:9b:20:cf:5e:60:cc:e5:48:47:90:87:fe:99:49:a5:
         44:68:d8:fd:d4:94:54:3a:8a:85:d4:ca:a0:b1:ad:61:44:71:
         0a:13:17:cc:4e:5c:7a:5b:c7:a4:89:11:1d:88:77:06:7c:d3:
         7b:b7:fa:d5:e5:fa:90:81:8a:86:c6:c8:96:fe:51:aa:b8:7a:
         6d:8a:51:e3:50:fa:b8:a8:02:f4:8d:6d:0b:de:50:cb:77:87:
         90:c1:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:23 2026 by rpki-client