Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File:                     6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier:          ILaoX7yrepir8ObYkhaYyjLEJ7Cde69YlhKYxRXt1lo=
Subject key identifier:   9F:D1:A9:EF:65:0B:CB:9E:CF:1E:7C:8E:14:96:AF:D9:D2:D7:49:CE
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer:       /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial:       019E2F977E0D6EC8F76AF02EE5F2E1B4CEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 07:01:57 +0000
Manifest this update:     Sat 16 May 2026 07:01:57 +0000
Manifest next update:     Sun 17 May 2026 07:01:57 +0000
Files and hashes:         1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: 5ojiec/gHVQWT5ClMNqNHggca1S7Avj1ZHRC5a4PGPM=)
                          2: zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa (hash: AJBQtpRLkRSZKhdaLX+ia9/jPSSmkNLT+zLAkaVXhn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:7e:0d:6e:c8:f7:6a:f0:2e:e5:f2:e1:b4:ce:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
        Validity
            Not Before: May 16 07:01:57 2026 GMT
            Not After : May 17 07:01:57 2026 GMT
        Subject: CN=9fd1a9ef650bcb9ecf1e7c8e1496afd9d2d749ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:b4:81:bf:a1:9a:06:46:aa:8f:01:a1:2e:
                    b7:37:cd:a6:12:a2:9e:5b:9b:5d:1a:cd:26:53:93:
                    c4:43:10:fa:7a:31:02:ff:51:21:77:c7:42:23:12:
                    09:6f:48:24:35:29:76:01:e5:cd:e7:6e:2d:a2:e3:
                    83:fc:4b:f8:93:db:f7:ca:a8:ca:bf:01:7a:8d:8d:
                    88:9f:d2:53:77:74:71:46:b7:81:0f:62:43:ad:a7:
                    34:21:53:15:45:02:e1:4d:14:4a:2e:a6:28:07:23:
                    d8:e1:f1:21:31:79:64:0d:69:a8:a1:e7:13:66:c9:
                    34:9f:44:96:25:28:81:b0:9d:91:4d:0b:7b:ee:8e:
                    37:05:24:54:00:0a:35:b6:34:07:0b:9c:f1:65:61:
                    d5:c3:9b:a5:21:fa:f5:31:ec:22:b5:c8:ce:21:1d:
                    94:25:fe:ed:1b:52:0c:3f:62:50:61:a3:29:e5:e2:
                    02:e6:8f:6a:51:0e:b7:5f:12:8a:a6:b3:d3:66:0e:
                    2e:80:56:fe:12:09:f7:f7:10:20:f4:9e:f6:45:82:
                    56:33:e2:7b:ff:cf:ea:1b:21:5b:3e:c8:2b:f3:86:
                    c3:f6:cf:65:33:74:c4:2b:4c:cc:44:d2:91:3f:77:
                    2a:a6:a0:ba:b5:96:b1:7b:ef:1a:4b:25:04:48:d5:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D1:A9:EF:65:0B:CB:9E:CF:1E:7C:8E:14:96:AF:D9:D2:D7:49:CE
            X509v3 Authority Key Identifier:
                keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:40:69:e7:ed:18:61:5a:29:eb:b0:23:b8:a3:01:e2:98:b1:
         30:e6:25:f4:e7:0b:9c:5e:96:53:ba:0a:12:d1:5e:3d:44:fc:
         ea:aa:df:50:e0:38:18:f6:e1:d0:b3:c9:44:f2:35:08:e7:fd:
         3f:39:46:72:ba:62:56:ad:3c:c1:8f:76:db:aa:18:03:3f:60:
         47:eb:f0:13:01:69:96:28:87:36:c3:28:37:c8:ab:b7:e1:38:
         a4:2e:7a:9c:00:d6:b1:85:14:a6:aa:e1:d3:dd:d6:f6:d9:03:
         cd:1c:bd:a1:e6:3e:6a:26:14:f6:8d:e0:29:82:d6:77:24:86:
         6c:d5:55:11:be:43:06:38:98:ed:2c:23:98:7b:3e:91:a3:52:
         05:a9:01:99:72:21:f4:6c:a1:2e:8d:93:7a:08:70:35:d1:e8:
         52:74:64:60:84:9b:dc:f1:8a:8a:d2:0b:be:04:01:17:c1:11:
         fa:8a:aa:78:d3:20:f7:12:49:04:a1:db:e7:42:b4:bb:3a:26:
         e9:f6:9c:0f:26:35:0e:5c:50:22:ac:0c:f1:e3:4f:ad:08:57:
         af:0a:a0:2a:dc:89:9c:8f:b8:18:7c:7d:32:5d:7d:4e:68:d7:
         4c:d2:a2:a0:61:9d:56:52:8e:d7:23:31:4b:f3:e8:57:ca:63:
         80:09:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:49 2026 by rpki-client