Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          BiwGXgZGjuqWPueQ0uCZ3GuMQ/yO3hYro4YT/tc8Vbk=
Subject key identifier:   EE:B3:D0:40:ED:FB:E4:3C:36:5C:49:70:F7:16:B2:BB:FB:8D:99:05
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       019E3004EDCDD0E63D8EEF9E4B0B2F229D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          08DD
Signing time:             Sat 16 May 2026 09:01:29 +0000
Manifest this update:     Sat 16 May 2026 09:01:29 +0000
Manifest next update:     Sun 17 May 2026 09:01:29 +0000
Files and hashes:         1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: dwqXWxDdi81nIMi8yFJ1CkijhuzewWRFQ5hdtpUmHcA=)
                          2: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (hash: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:ed:cd:d0:e6:3d:8e:ef:9e:4b:0b:2f:22:9d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: May 16 09:01:29 2026 GMT
            Not After : May 17 09:01:29 2026 GMT
        Subject: CN=eeb3d040edfbe43c365c4970f716b2bbfb8d9905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:c4:af:23:ba:a0:8f:a6:aa:e9:4a:5e:17:
                    dc:d6:b9:fa:8d:bf:5c:18:f1:54:ec:57:bf:f7:ab:
                    0c:dc:32:36:22:2d:70:59:81:6f:cc:f6:58:ba:40:
                    89:15:03:57:92:d5:37:f3:a4:bb:45:48:d6:7c:e6:
                    24:40:36:c5:b3:04:29:f7:7c:b3:3e:c9:61:b8:66:
                    0e:39:4e:7f:ce:a8:11:50:1d:57:d8:1d:6f:18:b3:
                    d6:db:93:c8:c9:b1:ab:8f:b4:62:0c:60:18:af:b3:
                    3f:5f:36:4c:8a:8d:62:d9:80:3d:fe:77:3c:cb:af:
                    17:2a:65:ce:1c:9d:f7:28:ec:0a:b2:15:29:3a:82:
                    68:79:49:5f:bd:7f:dc:09:de:b2:0d:77:3d:7d:0e:
                    74:0f:46:3f:99:72:09:8d:24:ed:0d:79:3c:08:c5:
                    07:ce:af:f7:37:88:4c:17:ce:a6:da:f2:66:56:20:
                    b7:59:c6:7c:21:e4:18:97:3c:51:83:57:1c:2e:4b:
                    9f:bc:cd:d9:71:43:13:e5:04:0b:ce:05:11:e6:98:
                    7b:e4:0a:21:e6:e9:b7:bc:68:9c:c3:07:eb:67:6b:
                    73:3b:a9:79:42:8a:30:68:33:d2:70:b3:1b:9c:6c:
                    69:fb:1e:84:71:ba:28:93:d5:81:28:99:5d:76:77:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B3:D0:40:ED:FB:E4:3C:36:5C:49:70:F7:16:B2:BB:FB:8D:99:05
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0d:bb:ff:54:34:4b:50:97:3c:7f:c7:aa:49:77:43:2e:3d:
         f8:8f:6b:df:99:9f:45:92:31:99:a1:2b:5f:ac:9c:d7:85:ce:
         48:5b:83:ee:da:fe:e6:92:6b:db:15:f9:7a:48:5e:d8:8c:2d:
         e5:3b:0d:82:bb:1c:71:30:0d:fc:90:6a:bd:a1:73:d1:44:83:
         af:c6:3d:c7:7a:1a:6c:8a:2e:5e:4e:87:d0:90:e7:2b:8d:e2:
         9d:3c:91:28:e9:db:09:63:4d:6a:e4:2a:78:68:9c:f7:19:6d:
         fc:93:19:2d:95:37:9b:c1:8d:58:25:5b:c5:db:3e:bf:7f:08:
         7b:2c:54:a5:82:91:05:96:f2:e5:73:22:0e:87:48:32:4a:d1:
         60:96:22:cc:2f:e3:87:73:e7:4e:5d:c5:c1:43:cb:94:45:66:
         ce:41:5e:37:e6:5a:cb:cf:2a:31:1e:be:84:ff:a6:b2:93:fb:
         92:be:ce:0b:57:8a:8c:be:e5:07:b8:00:db:4b:47:55:ef:94:
         b2:44:b7:0e:d0:3d:18:8f:60:f3:f2:56:69:1e:b4:bf:d3:19:
         f0:3e:58:d5:a4:a6:83:0b:2a:d1:d8:56:40:dc:fe:c0:7f:00:
         78:87:11:c7:69:7e:ca:0f:88:b9:f4:68:5b:86:e1:4b:20:08:
         1b:e4:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:50 2026 by rpki-client