Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File:                     7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier:          gEpBMZyZ2kPsy/9eUNie9cnc5Nof+dRucu4kfGRh17U=
Subject key identifier:   46:C6:C7:96:D7:F5:A9:07:8D:5C:71:F0:E6:AA:0A:49:97:4A:98:27
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer:       /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial:       019E2F972F7A022F2017FCA41E973DE1BE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number:          0E6A
Signing time:             Sat 16 May 2026 07:01:37 +0000
Manifest this update:     Sat 16 May 2026 07:01:37 +0000
Manifest next update:     Sun 17 May 2026 07:01:37 +0000
Files and hashes:         1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: uHKFtnI5ZsbTpWD1JHoG1EF66R/qSAAUcPfTpIEt/0E=)
                          2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:2f:7a:02:2f:20:17:fc:a4:1e:97:3d:e1:be:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
        Validity
            Not Before: May 16 07:01:37 2026 GMT
            Not After : May 17 07:01:37 2026 GMT
        Subject: CN=46c6c796d7f5a9078d5c71f0e6aa0a49974a9827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:9a:22:a2:bf:46:5f:66:73:eb:e1:42:67:
                    b0:b0:15:12:92:9a:9d:f4:39:c8:2d:4f:d8:3d:e3:
                    ef:d7:05:56:37:cc:47:12:03:e8:c6:8b:ca:2a:7f:
                    5c:f4:87:80:fa:27:f0:6c:f8:7d:2b:ed:49:b7:1b:
                    7a:b6:ec:36:b2:a7:8e:22:91:24:51:03:7f:82:60:
                    ef:fd:62:c3:b9:28:44:b4:ed:1e:71:90:c5:6e:0d:
                    dd:9e:02:f9:3b:b6:ad:26:7f:9d:66:1a:6e:07:b7:
                    7a:fe:b7:a1:54:26:8b:3b:f9:2c:ac:af:2c:86:45:
                    01:60:d0:c2:39:7e:46:fd:11:94:27:e2:61:d3:1e:
                    3a:10:3b:d9:91:dd:51:48:f3:37:3d:50:5c:5a:7a:
                    f8:30:d3:5e:07:8f:91:1b:db:5f:f4:01:46:8e:0b:
                    31:e3:d9:cf:e4:71:cd:df:6b:d2:a5:8d:f0:ab:34:
                    83:87:8f:fa:b7:22:09:99:c7:5b:f6:d7:ce:fe:85:
                    4a:89:d7:f9:7e:77:ba:20:3a:d1:cd:2e:d8:f9:45:
                    71:e6:6f:d5:de:7b:66:31:b5:e1:6d:ca:e8:10:ee:
                    22:d6:ea:60:5c:51:dd:de:2e:2d:e9:78:a5:0a:2b:
                    e0:35:95:3a:f3:f5:d2:76:52:b9:bc:bb:8e:2b:6d:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C6:C7:96:D7:F5:A9:07:8D:5C:71:F0:E6:AA:0A:49:97:4A:98:27
            X509v3 Authority Key Identifier:
                keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:60:fe:ed:52:37:f1:ff:9c:d0:58:22:e5:5a:c7:cb:3f:
         73:4a:d5:f6:61:5f:e1:de:51:1c:d2:91:c9:a7:25:13:41:95:
         ae:8e:ec:ea:da:71:1d:72:66:e3:02:a6:6d:af:36:69:2a:11:
         ca:a9:d3:6d:ef:d5:02:05:d4:8a:75:60:8d:cf:23:b6:1f:3c:
         0a:62:70:f6:71:63:b1:23:c0:0f:48:38:c8:6d:03:97:60:7f:
         e6:30:b9:c8:9e:48:cd:5e:82:d4:70:c7:91:28:bf:67:00:fe:
         b7:17:3c:3e:e4:28:8a:d4:73:1b:83:40:0c:88:12:40:55:61:
         5d:c0:b0:34:78:c5:21:4a:94:5c:20:2d:66:d6:4b:f9:a7:14:
         3b:c1:49:25:03:c1:b9:d7:3b:3b:bf:07:02:13:60:a6:1b:67:
         a7:43:c8:1d:ed:a2:b3:9f:f2:1f:a4:87:67:f4:d6:31:8f:6d:
         ec:7e:e3:a3:6c:88:20:c6:5d:00:3b:f6:59:36:47:a2:b2:bc:
         03:21:57:2a:b7:02:e1:34:a6:40:0c:d3:63:4b:4c:f2:11:f0:
         2c:49:d6:fa:9c:02:6b:dd:ab:a5:1c:54:db:78:f5:85:4a:46:
         09:7e:f6:57:45:23:0a:d7:32:31:f8:37:ef:1f:09:e5:70:c6:
         26:6b:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:02 2026 by rpki-client