Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File:                     6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier:          5z8Mgnw4BVsDnYMQgtPub59qWxsREjLRTwFg5oocQVc=
Subject key identifier:   9D:AE:10:88:5C:36:D3:51:FB:36:CD:7B:B4:38:93:C2:B3:CD:C4:4F
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer:       /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial:       019E30E0B77D0F1195FE6235D0EAC4B1111A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number:          0FA3
Signing time:             Sat 16 May 2026 13:01:33 +0000
Manifest this update:     Sat 16 May 2026 13:01:33 +0000
Manifest next update:     Sun 17 May 2026 13:01:33 +0000
Files and hashes:         1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: KqGjMSrofWMjAAw1KzCSbGg06fvgyu9hodN7+WOi+g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:b7:7d:0f:11:95:fe:62:35:d0:ea:c4:b1:11:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
        Validity
            Not Before: May 16 13:01:33 2026 GMT
            Not After : May 17 13:01:33 2026 GMT
        Subject: CN=9dae10885c36d351fb36cd7bb43893c2b3cdc44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:32:c9:01:f3:ad:05:cc:e4:98:66:22:ba:
                    68:b9:11:47:1e:b4:2b:eb:2d:ab:a0:f4:a4:6c:94:
                    5e:2b:4f:1c:59:71:29:88:ef:13:69:db:a7:9b:fd:
                    98:df:6e:af:ae:17:e5:6b:35:f6:d3:23:88:3a:34:
                    d5:56:d8:6e:d9:32:82:59:95:c1:0f:c0:b5:f0:75:
                    9d:c9:32:88:ac:78:4a:1a:c3:38:72:ca:86:64:f1:
                    ad:3c:94:5e:46:7e:91:d0:98:61:d8:81:5c:e4:d9:
                    9d:de:13:fc:bb:10:10:54:cb:e4:c6:8e:9b:db:1c:
                    48:fd:13:1e:d6:5c:89:a3:36:31:2f:14:18:d7:88:
                    61:45:d5:01:8a:cf:e4:4a:6e:ef:e6:6b:af:1f:78:
                    e3:07:d2:b3:ef:87:ba:be:c1:e2:e9:a5:4b:08:22:
                    1f:f9:19:1f:90:fa:bd:ef:dc:0f:0d:fe:7e:26:98:
                    25:28:4d:b2:f8:e9:88:35:bf:94:86:17:23:5e:4e:
                    8f:67:dc:16:d2:60:6b:1f:4c:fb:e2:0f:cb:6c:73:
                    3c:2c:3e:b2:fe:4b:42:11:44:65:99:01:d0:6c:45:
                    9a:c1:c5:9e:3b:ad:97:38:26:de:af:10:4b:a0:0a:
                    3a:27:e4:ec:1d:61:5e:89:b6:c5:d2:86:80:c7:be:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:10:88:5C:36:D3:51:FB:36:CD:7B:B4:38:93:C2:B3:CD:C4:4F
            X509v3 Authority Key Identifier:
                keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:df:7e:e5:03:19:81:6b:34:cd:ee:79:b4:c9:08:cc:29:dc:
         b6:9e:29:18:34:15:d0:fc:f8:76:fd:eb:4a:f6:c3:2d:f4:81:
         dc:a7:2b:8a:24:ef:b1:c5:79:93:07:72:1a:df:ee:e5:e1:27:
         f8:63:d4:4d:56:be:25:f9:9c:89:09:3a:7b:51:4a:74:51:40:
         5d:f5:ce:88:6f:0a:19:79:f6:46:6a:ff:c8:1f:33:c9:6b:f5:
         46:f5:70:cd:5b:b5:90:16:98:04:87:b0:6d:40:b7:b7:83:72:
         c7:63:43:2c:9e:08:1f:0e:bc:1c:92:ea:4d:e1:bd:33:1a:55:
         7f:96:7c:75:2a:fb:87:18:61:0b:bf:af:dd:e7:f9:73:02:aa:
         46:57:4e:c4:49:ba:ec:f9:1d:74:96:e4:eb:27:8d:ca:e2:57:
         ba:3a:5c:c4:72:e2:ae:3e:28:e4:e0:50:5b:3c:f9:88:ab:d6:
         06:eb:ac:e6:bb:33:e2:a9:08:b3:fe:d1:71:bd:f9:11:72:59:
         9b:ec:fd:38:f1:4e:32:e2:ea:6b:18:cf:a7:c2:10:85:1f:bc:
         99:24:25:3f:2c:eb:7f:e9:95:6e:a2:e3:36:c2:12:0b:15:09:
         7a:56:41:80:ad:d4:e7:79:0f:1e:b8:a9:93:1a:2d:e2:ad:ec:
         7d:03:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:05 2026 by rpki-client