Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          KoRkW/TVlISt2tdYk0B5qPFK8thS/oqjs3iwzk+vuqo=
Subject key identifier:   06:DA:F3:1F:8A:79:D5:BB:CA:31:48:C5:6B:1C:44:97:01:1D:0B:08
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       019E4FC679A86051F894A17FAD4B08D1DCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          05CD
Signing time:             Fri 22 May 2026 13:01:07 +0000
Manifest this update:     Fri 22 May 2026 13:01:07 +0000
Manifest next update:     Sat 23 May 2026 13:01:07 +0000
Files and hashes:         1: CJURcqwB7YHkxFpJ_fIfOAj4rb4.roa (hash: tQFv2xzZePQDySWn8V6OIcXlKLekKjdaEAGUmEMYLQo=)
                          2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: Lmvm8LfRJgmDkK4+7+tbfdR2H54Q8aZKNmIvuj5FM1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:c6:79:a8:60:51:f8:94:a1:7f:ad:4b:08:d1:dc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: May 22 13:01:07 2026 GMT
            Not After : May 23 13:01:07 2026 GMT
        Subject: CN=06daf31f8a79d5bbca3148c56b1c4497011d0b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:c4:2f:63:de:45:86:ef:9e:44:7a:86:c6:
                    83:98:9f:60:ec:f6:81:eb:ee:e6:f0:6a:e3:7c:8b:
                    2c:12:97:d4:2d:99:b6:e7:2c:a4:d3:48:69:18:98:
                    36:8d:ee:f5:6f:0e:ff:40:ab:d1:01:ae:c7:ab:07:
                    85:b1:f8:2b:90:5e:3a:fc:e2:28:3d:77:fb:d8:18:
                    4a:09:02:bf:c4:d1:9c:69:e8:e7:29:78:20:ca:4c:
                    07:93:ec:9d:f8:e0:81:22:c0:33:74:d8:39:8e:6a:
                    0b:a8:b9:61:b6:f9:06:c0:a0:eb:4f:09:9c:90:13:
                    d5:68:b0:d1:fa:68:91:ba:ca:9f:11:81:13:d1:a7:
                    91:39:bf:11:c8:89:5a:87:04:e7:70:15:4c:9f:55:
                    5d:d1:02:c8:bb:7a:8a:59:6f:07:d7:64:68:8b:6e:
                    ab:bf:df:e6:55:2a:36:7f:7a:b6:79:54:69:00:af:
                    9a:3c:46:42:f7:d3:6e:f9:ac:d1:c3:28:91:85:17:
                    5a:27:77:90:04:35:78:2a:7f:94:39:f6:c7:07:89:
                    8d:ed:c5:29:f3:e8:d6:94:17:48:ad:ec:b0:d8:c4:
                    27:48:b5:41:ee:ee:32:d3:27:c5:ad:ef:72:06:7f:
                    68:b7:85:d7:75:d1:a3:9e:bb:60:3e:db:d7:e9:56:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DA:F3:1F:8A:79:D5:BB:CA:31:48:C5:6B:1C:44:97:01:1D:0B:08
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d8:d7:f6:aa:fb:86:7e:e9:88:6e:a1:9a:ea:1f:55:c9:07:
         6c:45:ab:03:b7:3a:ca:0e:10:8e:fd:f8:97:b0:47:0f:a5:44:
         a4:63:93:f9:3c:d3:c3:8e:ea:12:1b:18:85:13:db:51:90:2f:
         a7:61:5b:cd:ed:48:bf:f0:1b:c0:2e:b3:bf:61:8b:40:a2:c1:
         d7:e0:07:84:1b:90:6a:e3:aa:dd:8d:e4:7a:9c:1a:cb:27:7b:
         42:e5:97:95:41:4d:80:34:69:c5:26:ae:60:9d:a2:41:32:d4:
         6d:55:07:9c:06:e5:1e:31:ca:17:fa:b1:fe:c8:38:04:f2:bb:
         6c:2d:06:64:47:48:01:00:75:b0:cc:24:c4:52:c6:c5:78:78:
         47:83:16:61:31:d4:2e:42:55:0c:a7:89:70:46:30:9e:95:3d:
         64:9c:2c:52:a3:11:7f:8d:9c:c5:40:c2:20:4c:7b:4c:81:a8:
         49:d1:48:6b:95:7d:c4:6a:75:f9:15:41:28:48:d4:f1:d1:e7:
         3b:24:2e:95:73:6e:76:17:6f:17:aa:01:b5:62:ab:97:33:1c:
         8e:49:f0:66:53:25:bc:97:81:ae:82:81:7d:ad:2e:e7:32:ee:
         79:0d:a5:e6:cc:8d:90:52:9c:b6:f2:a7:23:7a:b1:79:8d:3f:
         78:17:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:28:42 2026 by rpki-client