Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File:                     xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier:          ycSwq0qLddTGSYJQd7KKrlB5p25fL8oZYmv2+iB+l8Y=
Subject key identifier:   C6:09:9D:3D:13:E6:30:AF:FB:C5:EA:7E:65:01:98:04:1F:38:22:23
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer:       /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial:       019E5F39291C5A2F3D2F1B6868E527743BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number:          04B6
Signing time:             Mon 25 May 2026 13:00:41 +0000
Manifest this update:     Mon 25 May 2026 13:00:41 +0000
Manifest next update:     Tue 26 May 2026 13:00:41 +0000
Files and hashes:         1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
                          2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: zyNegrG6UzJb4TL1jBesZLMkwnjynbYNCGBq9abr8E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:5f:39:29:1c:5a:2f:3d:2f:1b:68:68:e5:27:74:3b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
        Validity
            Not Before: May 25 13:00:41 2026 GMT
            Not After : May 26 13:00:41 2026 GMT
        Subject: CN=c6099d3d13e630affbc5ea7e650198041f382223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:fc:04:e8:44:98:5a:e0:e3:84:98:90:0c:
                    23:bf:f7:36:c7:5d:bd:10:bd:3b:29:7c:2f:dd:b9:
                    78:41:7a:94:4d:4e:ea:a0:06:89:b0:04:0a:02:54:
                    7f:a5:ee:fe:92:07:bc:95:fa:a1:e8:d2:24:2d:b5:
                    15:d5:10:6e:a7:b3:9f:e8:34:5a:d8:67:36:70:15:
                    f7:34:78:f9:73:4f:b0:0b:71:06:24:71:59:69:60:
                    36:3a:48:e2:27:c5:6d:02:30:c3:04:2d:22:b7:10:
                    63:c9:0b:6f:23:0a:fd:5f:ef:ac:ca:b1:c1:f0:ed:
                    10:82:04:54:69:75:43:2a:31:ef:8b:3a:5d:be:6e:
                    9f:06:ad:cc:14:1e:3a:a3:b0:e8:69:e6:32:df:ab:
                    98:49:b2:9b:ba:e6:e8:48:16:c6:62:fc:ca:57:86:
                    36:21:f2:dc:6c:d1:0a:af:5d:37:b8:00:81:7d:ec:
                    31:84:ea:c0:54:73:e9:48:84:ca:f1:04:54:5f:70:
                    eb:87:97:61:3a:19:bb:5e:af:6c:41:96:b1:04:f4:
                    51:d8:cd:53:a1:d5:6a:66:41:2c:11:77:32:12:ad:
                    24:18:bf:66:9f:cf:88:c8:81:77:ab:dc:05:16:5f:
                    33:5d:1e:52:af:8a:cb:74:5d:01:9d:e8:59:97:6c:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:09:9D:3D:13:E6:30:AF:FB:C5:EA:7E:65:01:98:04:1F:38:22:23
            X509v3 Authority Key Identifier:
                keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:0e:54:9a:bf:09:2f:f0:50:e0:52:fe:a7:a9:4d:92:58:
         9c:43:3f:97:fc:94:6d:a8:40:fa:03:34:d8:69:87:2d:38:f5:
         c7:f9:42:ee:96:57:9c:08:70:cf:13:d4:bc:9c:e7:16:fb:e5:
         b8:52:8c:c9:d4:37:a6:28:71:e7:65:49:7f:46:5a:e0:98:8b:
         3a:31:1d:89:79:57:16:72:2f:60:4d:3c:c7:20:25:ea:37:a3:
         ef:10:32:6c:d7:42:f5:7d:65:87:35:06:96:0a:24:8f:2f:79:
         00:ca:62:36:4c:51:0d:d8:0d:7a:54:06:e9:a7:31:05:b0:7e:
         86:08:d5:47:57:70:19:a0:73:32:d6:a8:45:86:46:d5:4b:ce:
         5f:96:d2:62:1f:e2:ef:7a:b2:6f:5a:88:38:72:6e:c2:50:e0:
         01:d7:b7:6b:15:58:08:74:4f:29:bc:ab:3e:9f:88:79:af:16:
         e6:a1:1f:d6:e8:61:98:15:7d:53:50:9b:d8:b4:17:79:56:3c:
         42:53:55:c7:bc:5d:11:4d:3f:9a:b2:8b:36:1a:fd:8f:34:30:
         25:5c:9f:42:d9:42:c5:78:f6:16:be:27:e4:05:61:00:4c:40:
         af:9f:03:17:a6:7d:74:88:8d:55:32:46:2d:f2:63:b3:f4:7a:
         4d:dd:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 17:09:57 2026 by rpki-client