Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File:                     b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier:          hyKB7pOFvEJ5xAW/EQjw/2N98/QW4CHfdNO+/12jmEE=
Subject key identifier:   E5:8C:D6:14:35:38:77:ED:6E:6E:06:2A:5F:4A:2B:9F:F0:D4:04:CF
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer:       /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial:       019E307272F25A053C3394B46EE96A6BAF0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number:          0596
Signing time:             Sat 16 May 2026 11:01:07 +0000
Manifest this update:     Sat 16 May 2026 11:01:07 +0000
Manifest next update:     Sun 17 May 2026 11:01:07 +0000
Files and hashes:         1: 4EQFHPchKGJRSlfAMbJURA8f5Vw.roa (hash: r/Hza9cO99krJK0iZfoHSiR1NTC0AWSrrarH8tZXu0g=)
                          2: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: 8PvbuLznrp7e4m4Ako6Tx06Sl5TVZSELXiiJLiEXKFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:72:f2:5a:05:3c:33:94:b4:6e:e9:6a:6b:af:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
        Validity
            Not Before: May 16 11:01:07 2026 GMT
            Not After : May 17 11:01:07 2026 GMT
        Subject: CN=e58cd614353877ed6e6e062a5f4a2b9ff0d404cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:4d:96:af:ca:d4:7b:cc:66:e8:e9:bc:7a:
                    97:06:49:5d:73:41:2d:f1:fc:bc:72:2d:fd:89:8f:
                    46:06:d4:db:d4:69:22:b2:e5:4b:d6:1f:46:85:84:
                    20:51:00:2c:70:c0:82:e1:45:68:3d:ff:d5:95:86:
                    27:a1:f4:de:a1:13:3d:4f:e3:f0:bb:23:2a:6d:10:
                    62:fd:07:41:81:f2:d5:c0:72:8a:79:ee:e1:41:71:
                    6f:c7:14:a5:be:9d:45:33:9d:bd:97:31:1c:7c:e5:
                    52:3e:ff:2b:05:12:11:d5:06:25:cb:fa:c9:b6:bc:
                    31:05:19:3d:27:00:68:6b:16:44:15:5e:93:7a:86:
                    4a:bb:83:9b:4e:b2:cd:9a:ec:9d:63:b5:1f:33:f4:
                    eb:39:32:73:50:e8:ee:bb:e8:24:36:e9:32:98:43:
                    17:13:b1:34:e8:a2:db:85:cf:ba:c1:c1:66:ec:98:
                    fb:3e:ab:13:77:0a:29:fd:24:06:3f:8a:e6:c7:62:
                    7c:81:fc:a7:ec:2c:17:be:51:d9:24:68:c6:ea:4a:
                    9b:ce:b1:d8:61:d6:86:e7:93:cb:66:26:8d:31:8a:
                    c6:3a:47:a8:c0:62:ec:f3:d4:6b:58:ef:02:fa:6b:
                    75:c9:2a:ed:25:37:2d:86:4b:4d:44:21:18:70:9a:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8C:D6:14:35:38:77:ED:6E:6E:06:2A:5F:4A:2B:9F:F0:D4:04:CF
            X509v3 Authority Key Identifier:
                keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:28:9e:d5:99:50:58:a5:cb:b2:50:0a:05:bd:a3:41:af:
         e3:f3:b6:3b:f4:29:6a:29:8e:1c:b4:11:ca:d4:d3:c3:09:95:
         db:f2:fd:b2:dd:44:19:49:6a:40:4b:67:8a:46:03:4d:48:ce:
         cc:b4:d5:46:10:6f:4f:93:f2:75:e5:ce:3b:10:a3:30:de:9e:
         ec:30:84:9c:0d:72:05:c2:f7:9d:62:df:7c:2a:a5:98:78:be:
         88:e0:54:c5:f4:79:c7:cd:3e:54:0f:0d:2b:26:4b:b8:a2:72:
         a9:61:f7:a1:50:21:84:bb:59:0a:28:5b:67:8c:8b:88:61:ff:
         bd:b4:5a:3a:8f:44:b9:88:18:ab:6e:5d:47:a9:37:be:11:cb:
         c4:6f:21:1d:7b:ff:8f:74:29:89:cb:d2:b1:0b:34:c4:16:77:
         07:3c:fb:10:39:6f:dc:41:66:f5:e8:61:64:40:02:dd:50:fc:
         38:2e:c0:52:ff:0c:bc:30:04:02:f0:a5:97:54:83:59:bc:68:
         68:0c:5d:a3:55:9d:53:b6:ce:54:08:02:f7:07:25:f5:d6:41:
         db:55:7f:2d:34:92:7d:6a:51:bb:e8:2b:87:f5:ca:83:82:3c:
         6a:41:2a:ae:2d:e8:aa:eb:63:d2:7f:b9:99:3c:e2:c0:2b:b2:
         32:6e:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:33 2026 by rpki-client