Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          nGZQxSYq2YGBD7Gyj/yHucnJ9lpIzFNh/uZjbD4FA50=
Subject key identifier:   85:A8:D5:A4:E3:69:41:3D:49:96:08:62:EA:75:BD:C1:A8:16:A2:65
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       019E3185E405EA2C74BC299DF57783285ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 16:01:58 +0000
Manifest this update:     Sat 16 May 2026 16:01:58 +0000
Manifest next update:     Sun 17 May 2026 16:01:58 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: npFmiZr3vIGb9p+MLTSd47UEsN0yhHhKocx/De4yNJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:e4:05:ea:2c:74:bc:29:9d:f5:77:83:28:5a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: May 16 16:01:58 2026 GMT
            Not After : May 17 16:01:58 2026 GMT
        Subject: CN=85a8d5a4e369413d49960862ea75bdc1a816a265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:f9:d4:42:30:f2:36:cf:ac:89:03:a3:11:
                    ab:8e:63:20:0d:54:57:de:fe:fa:ab:54:0d:24:4f:
                    4d:a8:22:88:bb:71:c1:df:2c:da:4a:31:54:01:34:
                    ce:dd:74:e4:33:55:be:70:42:3d:1d:1a:2f:17:16:
                    f1:d2:b6:59:a4:95:7f:1d:37:3b:b1:55:cd:2c:ef:
                    6b:23:db:1d:a8:6e:43:fd:1c:6b:7c:ea:d6:f6:a8:
                    e9:b8:bb:1e:e3:61:fd:c0:65:89:20:d0:f8:cb:b6:
                    2b:65:99:82:99:fe:c2:e8:36:50:19:22:19:fa:fc:
                    32:d0:14:91:e8:b3:a4:b3:c1:34:27:bc:e1:b1:ec:
                    8f:61:cf:bd:bd:fb:f2:fb:b5:e3:c8:0e:37:4a:46:
                    20:30:5b:c1:75:b3:38:c5:b5:b7:13:4a:02:a0:d5:
                    5c:5e:31:f8:79:fd:d4:4a:5f:25:81:74:8f:77:9a:
                    d5:42:ac:82:19:a9:27:0d:3d:a9:33:6f:1e:fe:13:
                    63:1c:7f:45:00:ee:50:4b:fe:7e:f0:14:36:c6:72:
                    e8:dd:04:ab:20:46:e3:4d:03:d9:2f:a7:75:4a:19:
                    bd:a9:84:2b:df:a5:15:32:28:cb:e3:b8:9f:be:83:
                    58:30:6d:b5:b8:1f:48:cc:1c:64:be:c4:cd:db:28:
                    7d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A8:D5:A4:E3:69:41:3D:49:96:08:62:EA:75:BD:C1:A8:16:A2:65
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fa:24:8c:df:24:05:88:6b:6a:26:6f:04:4a:40:16:ce:bf:
         cd:9d:28:ad:f2:12:34:83:30:bd:90:97:a6:4d:cc:9f:69:cc:
         99:49:f9:b8:d6:bc:bb:2b:d3:a2:45:50:84:e7:65:a7:82:fa:
         a3:93:73:21:01:cc:e5:3b:f4:43:60:8c:5e:a7:8d:d3:4c:14:
         5d:5b:91:63:ea:35:d1:51:b6:59:57:73:d9:01:d2:ce:f2:b8:
         2a:dd:4d:45:47:5b:72:ca:f4:2a:6f:f0:ea:5a:ae:70:ab:4b:
         09:e4:90:9a:3d:b6:68:62:52:c0:83:f7:15:ab:45:8d:b2:b7:
         33:88:eb:8b:63:be:c5:b2:1e:87:89:02:d9:98:ef:e2:b6:6f:
         a0:5a:91:45:6e:c1:5e:d5:92:4e:b8:29:a2:4d:1b:5f:f2:9d:
         f8:81:0c:6e:f9:7e:a1:bf:53:b7:5b:e4:d2:75:2b:7e:85:46:
         f0:64:0e:65:42:32:58:45:71:1e:24:ba:2b:96:a4:7a:f6:ce:
         8b:9d:be:a4:2d:61:b8:26:4c:f7:a7:be:00:16:7a:25:d8:b5:
         46:c4:e0:76:c8:93:58:05:23:18:92:cc:3f:54:df:92:06:8e:
         02:cb:61:2c:05:eb:09:84:3a:c8:d0:d8:a0:d1:d2:82:bd:14:
         ee:82:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:10 2026 by rpki-client