Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File:                     6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier:          3X0sqBv10uY2h5S4sqvfkFfJdUzHi0N8HYPKe1iX858=
Subject key identifier:   31:78:02:89:B9:5D:B7:49:B5:0E:67:98:A0:71:A8:69:97:37:89:95
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer:       /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial:       019E311780B3AE2F353CF5B9762EF2905DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number:          0DF4
Signing time:             Sat 16 May 2026 14:01:24 +0000
Manifest this update:     Sat 16 May 2026 14:01:24 +0000
Manifest next update:     Sun 17 May 2026 14:01:24 +0000
Files and hashes:         1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: 8Y8Z1IcUI4dQU1k6+4FLY4oeNYnkSoWfcWvV98ku/8c=)
                          2: jalRR1qf4gkRSHcE337u9bWw_gA.roa (hash: wlzbEgEP0/Wpmn8I5QNTgk6aKSZpv2Z3WVVZUuK0r98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:80:b3:ae:2f:35:3c:f5:b9:76:2e:f2:90:5d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
        Validity
            Not Before: May 16 14:01:24 2026 GMT
            Not After : May 17 14:01:24 2026 GMT
        Subject: CN=31780289b95db749b50e6798a071a86997378995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:5a:57:c2:cc:53:54:de:97:a7:18:91:30:
                    ba:7e:37:83:c9:b3:b0:54:7c:0a:db:2d:af:4b:67:
                    56:b0:da:8c:c5:bf:a0:cb:27:ca:af:5d:3b:ce:cd:
                    95:af:0e:28:48:ec:f2:f3:18:25:83:3a:00:ac:f2:
                    ab:eb:02:fe:92:af:b0:ec:e6:b1:06:d1:a0:15:b3:
                    96:fe:4c:a0:23:a7:6f:14:40:4e:dc:d8:15:a9:3e:
                    1f:6d:51:ab:30:38:96:26:20:c9:da:b0:08:ea:17:
                    77:d6:f6:b3:43:d7:dc:73:c2:fb:de:7d:23:0c:82:
                    f5:ac:3e:22:93:e6:01:aa:b6:72:4a:a8:33:99:7d:
                    8c:bb:1c:c9:9d:c8:ff:0d:23:45:be:bf:e2:37:75:
                    51:b7:fc:d6:a6:79:51:24:f2:f8:50:e9:22:49:17:
                    af:0f:3f:69:0c:97:bf:e6:bd:e1:88:27:d3:3e:b1:
                    dd:74:c0:a0:1e:ab:19:c8:40:95:a3:81:f8:e4:fc:
                    23:75:4c:77:23:fe:44:90:06:1c:97:9c:0b:94:89:
                    53:96:69:24:4b:d0:82:4d:87:87:39:7f:0d:97:21:
                    78:8f:fd:e5:00:0c:84:33:1f:60:ad:cf:e1:fc:eb:
                    c1:b1:27:ba:c4:23:e6:24:fe:ec:78:2b:2a:8c:f6:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:02:89:B9:5D:B7:49:B5:0E:67:98:A0:71:A8:69:97:37:89:95
            X509v3 Authority Key Identifier:
                keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:24:b1:a5:aa:79:ee:74:1f:0e:e0:c8:87:5f:26:7d:64:26:
         68:9d:d7:7d:13:c6:0c:1a:39:db:eb:dc:ec:c2:e0:4e:79:95:
         56:e0:49:4f:b9:29:15:00:62:3a:69:9b:35:4e:16:8e:19:24:
         57:66:32:92:4c:14:45:97:49:d3:f1:ff:b0:e5:f9:0d:ec:a3:
         b6:51:9d:61:84:3a:5f:66:a5:24:55:07:61:52:dd:53:b9:48:
         9d:6f:00:31:d3:3a:52:a7:5a:6d:84:94:ab:24:ab:e9:bd:b2:
         41:42:33:8c:c3:e8:e8:0a:2c:85:33:98:e3:e1:0f:c1:0e:c9:
         40:8f:df:f1:f5:b0:23:72:86:b4:7b:cd:62:27:ea:0a:05:e7:
         3f:5f:64:6b:9d:f3:51:b3:00:53:0c:7d:78:c3:e2:eb:92:64:
         0f:e6:2e:2f:5a:8b:fe:66:13:6a:0d:83:18:87:c0:5a:42:52:
         79:fa:26:36:8a:74:88:31:56:5f:4f:8c:6f:73:14:a5:eb:f4:
         57:16:5b:7d:38:44:af:55:66:e0:f4:4b:b5:72:ea:1e:96:3e:
         b9:49:f8:a0:11:f8:ef:95:82:99:0e:ca:0a:d6:9b:bd:af:34:
         df:5c:33:30:81:95:33:a6:67:7c:8f:5c:01:be:54:19:e9:3d:
         8e:8d:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:49 2026 by rpki-client