Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File:                     H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier:          5oWwDpZbhnxL8QPvO3BKvVGarIt4Zb/9nZx9wNNs/EA=
Subject key identifier:   84:CD:97:C1:25:D8:AD:82:16:D8:53:C9:42:3C:9B:7A:B4:1A:2A:7A
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer:       /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial:       019E2A022B2B30970E40EB8A53B3482ED5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number:          07F6
Signing time:             Fri 15 May 2026 05:00:45 +0000
Manifest this update:     Fri 15 May 2026 05:00:45 +0000
Manifest next update:     Sat 16 May 2026 05:00:45 +0000
Files and hashes:         1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: nJDzKPj2OXdQPOgaOjvmF1TQ9ksg/kcCu9rxRBPAwdQ=)
                          2: YN0WF7H7M2n4t-XjARACyM9WR6o.asa (hash: eBj4EH+AV57EzbfzhlBRa9LcrLwEw5t3KkUj9eOh2sM=)
                          3: YZf1I4HDqm3z0PL6TqKmws28UHo.roa (hash: Iy79aoCujC05IKj4CdK/qSAtze1gZOoSXAO4h9l6iV0=)
                          4: Yo-fullWGeKl8XOqwwQWGl8ohSo.asa (hash: 0VBufQNMO7/4QkFPpkFZhTVHEaQ91TkdNNCouWLIjsE=)
                          5: iDGkEHzaPIBC_ltNyeNPjxHWcLQ.roa (hash: m+RgaOaS95hD5eR5RGnGQAMM12oNRJddtp+/tKr5w0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:2b:2b:30:97:0e:40:eb:8a:53:b3:48:2e:d5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
        Validity
            Not Before: May 15 05:00:45 2026 GMT
            Not After : May 16 05:00:45 2026 GMT
        Subject: CN=84cd97c125d8ad8216d853c9423c9b7ab41a2a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:96:9c:9c:15:81:4f:b6:c5:d9:ee:01:0e:
                    28:06:22:a3:cb:bb:d1:ed:9f:1c:db:bd:49:a2:51:
                    68:27:c3:b0:a2:ea:c7:52:4e:c8:a6:48:c6:45:95:
                    03:52:8f:53:68:90:e4:b0:26:52:b4:f5:8f:15:1f:
                    6a:a9:6b:8a:cf:88:55:87:4c:6d:36:69:f2:a0:06:
                    c4:c7:cb:2d:49:8e:6e:22:73:6e:e6:d8:71:c7:a6:
                    39:70:94:2f:ec:a9:5f:9c:a5:2b:6e:bf:9a:83:dc:
                    f2:36:d9:bf:26:7f:ab:90:50:a4:83:91:fa:79:c8:
                    fa:17:86:38:67:8f:e0:53:79:0b:db:77:a0:2b:68:
                    9a:78:c6:93:a4:b3:88:70:ed:c7:fd:10:32:68:43:
                    1d:1a:ad:87:3e:35:d0:ac:c9:67:3c:51:80:bb:23:
                    07:db:a5:4c:e8:bd:c2:fd:d9:0c:f7:41:97:b0:2f:
                    b0:49:db:a4:ea:1c:9e:47:5d:ae:62:55:16:d5:a5:
                    66:c6:40:d5:a4:d0:91:40:82:ae:d0:a3:cd:84:66:
                    f3:f2:fa:84:61:2d:a9:f1:5e:9c:ef:e6:99:e2:04:
                    2d:0a:96:51:14:9e:39:13:e9:01:be:de:ee:5c:57:
                    1f:98:b3:e8:ab:f5:8f:d0:a2:33:d0:46:34:a2:33:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:97:C1:25:D8:AD:82:16:D8:53:C9:42:3C:9B:7A:B4:1A:2A:7A
            X509v3 Authority Key Identifier:
                keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:b0:b1:c6:f2:14:0e:16:79:b2:c3:56:96:a8:4b:98:a9:
         b8:b6:cf:a6:18:11:16:69:41:dd:28:68:ad:ce:b6:5e:a2:c3:
         c5:eb:06:5b:2d:5c:55:79:f4:28:c7:89:83:8e:f4:53:e2:06:
         1c:3a:8e:cf:d9:36:96:dd:de:11:03:11:52:07:14:af:68:c0:
         61:fb:2e:4a:2d:2f:60:e2:1b:87:be:98:b4:e5:d6:73:db:51:
         f5:95:5c:c5:70:d7:50:73:88:dc:ad:b0:0a:02:be:ad:1f:2e:
         8a:cc:ba:d6:87:7c:ff:4e:78:ee:69:cc:6c:5e:13:9d:71:7d:
         4d:80:51:61:d0:35:82:f1:07:60:2e:66:72:8e:59:92:98:b3:
         ca:5d:59:61:16:f4:0c:45:99:45:0f:27:57:4f:61:4e:e0:66:
         5b:4d:ab:5d:c0:50:0a:41:2b:19:d3:81:40:c7:9b:28:47:67:
         d4:52:e4:41:8c:78:f0:1c:01:27:ac:80:7d:e2:bb:ed:f9:a6:
         af:1b:87:d5:e6:61:ae:0b:d4:8f:b1:02:95:26:b5:84:4d:a9:
         3c:bc:c6:a0:67:97:b2:76:42:94:a3:a4:a0:7b:37:4c:a1:5e:
         99:d7:c9:9d:de:5b:25:4b:fa:92:7a:73:69:59:c6:db:68:cd:
         79:99:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:56:08 2026 by rpki-client