Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
File:                     6E2eW-w81Mrhfl-Hsu6lImpO518.mft (raw, json)
Hash identifier:          1+zNthoUhC4p4pGD6vxy2LM5QcENjuZ4MvEBpW+qrUE=
Subject key identifier:   64:4C:B1:A9:88:55:3D:34:EE:30:2D:61:E5:0B:29:83:FB:C9:E4:BC
Authority key identifier: E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F
Certificate issuer:       /CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
Certificate serial:       019E30E0DDBEAB77E1B861243FD8F947A630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
Manifest number:          0EFB
Signing time:             Sat 16 May 2026 13:01:43 +0000
Manifest this update:     Sat 16 May 2026 13:01:43 +0000
Manifest next update:     Sun 17 May 2026 13:01:43 +0000
Files and hashes:         1: 6E2eW-w81Mrhfl-Hsu6lImpO518.crl (hash: AZedAqUGLSWJXrpzcJS8BBshKNd00z9WclGT/7ROTzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:dd:be:ab:77:e1:b8:61:24:3f:d8:f9:47:a6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
        Validity
            Not Before: May 16 13:01:43 2026 GMT
            Not After : May 17 13:01:43 2026 GMT
        Subject: CN=644cb1a988553d34ee302d61e50b2983fbc9e4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:a1:1b:a5:39:bd:08:6e:89:ea:e2:f7:5d:
                    96:c3:2e:3d:51:25:20:bd:95:72:14:7c:f7:61:9b:
                    d0:eb:16:62:ad:a9:fa:f3:2c:79:1a:14:6d:b8:dc:
                    84:55:80:f3:09:a3:8d:ec:c5:51:4f:fd:05:71:8b:
                    f4:1f:7d:be:a1:ff:09:e3:55:8a:2d:d6:9f:48:f8:
                    4a:57:6c:f1:47:86:09:39:13:51:39:3d:58:59:e8:
                    2c:85:8d:9d:d2:3f:20:e7:b5:ed:da:90:2e:4b:39:
                    7b:22:29:46:ce:16:6f:ce:38:c3:f0:fa:0f:c3:30:
                    91:0e:84:c1:aa:ae:f4:36:75:82:6b:94:3c:e5:24:
                    4e:88:b7:f7:8a:ad:3e:6a:8a:3b:ae:34:7c:f0:04:
                    3e:5e:63:4d:d7:da:da:19:2d:ac:c4:b7:c4:f2:d1:
                    35:b7:a8:d0:c6:6c:b8:ba:86:99:ec:5f:5c:40:51:
                    51:95:0b:a6:0d:34:b6:80:87:60:0c:60:49:b9:38:
                    52:da:13:07:f5:44:fd:2e:da:c4:59:49:14:17:cd:
                    8c:26:d1:6d:cd:7f:2f:09:57:54:b8:62:30:1d:af:
                    86:18:1e:73:72:eb:ee:46:68:5a:db:52:5b:6d:a2:
                    78:47:7e:b1:e6:1b:22:86:80:66:65:41:9d:3f:47:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4C:B1:A9:88:55:3D:34:EE:30:2D:61:E5:0B:29:83:FB:C9:E4:BC
            X509v3 Authority Key Identifier:
                keyid:E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:87:4a:54:98:52:32:39:9b:7f:ca:e2:3f:2d:5c:1b:57:
         28:f0:de:f2:f3:a7:ed:7a:b3:04:2a:5b:3b:1a:88:68:e0:0a:
         8e:77:d0:dc:a8:c2:b4:54:82:b0:75:b7:44:55:7e:75:50:ee:
         ea:d5:4c:2d:d1:d6:58:10:df:e5:41:97:12:d4:5a:01:f3:0a:
         c7:91:c2:52:ea:9b:29:5b:89:c9:f0:4e:3f:8a:4b:1b:16:cd:
         50:8a:a1:84:09:b7:51:af:57:0b:08:c5:42:8f:bb:5d:78:45:
         68:04:cf:25:f5:0a:c0:da:97:79:a0:52:10:76:62:e5:11:59:
         74:6c:31:52:ab:2e:c4:3c:98:43:65:59:ac:22:25:a5:7e:ef:
         7d:6c:98:10:dd:c7:28:12:54:de:20:0b:7f:18:3c:59:ff:4b:
         14:12:bb:b1:d9:d7:ee:86:bb:3b:b3:30:fa:8c:d6:52:80:da:
         b7:6f:c5:68:86:51:28:df:98:64:6f:9b:43:a1:fa:47:cc:f4:
         8d:86:5f:a5:8f:ab:3f:57:45:fe:98:66:44:a3:bd:d4:8b:77:
         a4:8c:47:c9:00:55:4a:de:6e:01:14:b8:8d:5b:cb:32:01:57:
         fd:44:5c:90:f4:47:d3:87:9c:c3:1a:9d:3a:ab:d1:15:a9:ec:
         d5:ae:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:33 2026 by rpki-client