Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File:                     6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier:          Lan5MkWqoTRUpFi3KpNdw13wppy8pYMojYJ7+32RV54=
Subject key identifier:   87:B4:C6:EE:39:DD:C6:6A:44:E0:03:EE:70:7A:60:A1:9F:DB:69:44
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer:       /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial:       019E30E0A79D24F05AB0E6FC0B0115C0D49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number:          10AE
Signing time:             Sat 16 May 2026 13:01:29 +0000
Manifest this update:     Sat 16 May 2026 13:01:29 +0000
Manifest next update:     Sun 17 May 2026 13:01:29 +0000
Files and hashes:         1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: INpLdSe1RnrOsRsfro6xLuTpEsbgtixJ5KGM/sMrFBQ=)
                          2: vGQ0FlfBg9HurxXzBHSCF8IWFRQ.roa (hash: vG2KyLa3eKD4ni6LSYbmZcxZgH0oTjxPgZTSDvuGGJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:a7:9d:24:f0:5a:b0:e6:fc:0b:01:15:c0:d4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
        Validity
            Not Before: May 16 13:01:29 2026 GMT
            Not After : May 17 13:01:29 2026 GMT
        Subject: CN=87b4c6ee39ddc66a44e003ee707a60a19fdb6944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:f3:48:11:e7:4e:3d:e6:83:99:be:d0:d2:
                    bc:3f:05:c0:56:3c:69:7f:cc:4c:50:e9:86:c5:67:
                    e4:c5:e1:92:1d:e2:42:4d:2d:3e:4b:a5:be:e6:a7:
                    4e:f2:40:5d:e9:84:18:56:ba:88:19:5f:24:66:ce:
                    7e:e6:59:3a:dd:4d:a0:47:47:47:fb:cd:ae:b3:92:
                    b0:ec:71:83:ef:24:04:70:e4:9d:cd:25:c2:b1:25:
                    5d:e1:e7:6d:94:e8:13:1f:4d:be:4d:c8:f8:52:8d:
                    37:df:a5:5c:2e:83:46:64:8a:d6:3e:bd:c8:fa:36:
                    33:01:2e:93:70:ed:32:43:d8:46:4b:52:b2:e6:0f:
                    37:ab:bc:d8:52:4b:de:d5:80:7c:17:12:a0:94:21:
                    e4:c1:80:32:a9:0f:63:28:b5:1f:bc:76:75:5f:c2:
                    21:f0:24:41:07:96:32:35:27:80:07:24:9f:5e:4f:
                    e9:6b:bf:7a:53:f4:7d:3a:0e:88:35:48:03:bd:0a:
                    98:c5:fe:a9:e9:cb:12:3b:e3:d6:86:6d:ef:cf:a3:
                    05:1d:3b:f3:88:41:9b:73:32:d2:b8:81:d5:bb:75:
                    72:19:91:a7:9c:97:c7:fc:90:46:a7:c3:6c:d3:a8:
                    8e:48:f4:bc:78:a0:94:06:54:8c:a0:e3:12:29:95:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B4:C6:EE:39:DD:C6:6A:44:E0:03:EE:70:7A:60:A1:9F:DB:69:44
            X509v3 Authority Key Identifier:
                keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:24:04:97:8e:65:54:ae:9a:a6:ec:96:8c:85:d1:5d:ed:
         6f:8f:06:3d:eb:1d:90:c1:b3:e4:31:83:78:bc:b2:9b:83:d9:
         e1:13:ab:f7:83:f7:f5:56:21:ad:c3:b3:1b:ec:19:da:7f:cf:
         f4:ba:14:3f:48:07:91:c7:13:8d:3a:a2:3e:e4:ad:fb:db:9c:
         0b:6b:b0:63:b7:d3:bf:5f:f2:5d:56:0b:d9:3f:a3:c5:e3:d2:
         ac:29:c5:6b:5e:dd:a9:98:0f:3e:ba:09:99:f6:ab:8c:80:0a:
         8b:8c:04:a2:8a:90:cc:7b:e3:5a:79:f8:e1:a4:b0:92:b8:8c:
         97:31:53:d4:35:7a:1c:a1:00:1e:10:e2:54:4f:f2:63:04:a3:
         99:a6:45:a5:d0:b8:7b:ea:33:09:d6:53:58:27:34:9b:1c:e6:
         22:7f:05:ef:8d:cc:99:99:27:14:09:45:fd:5a:30:7d:bf:40:
         2d:a3:9d:73:85:98:41:d2:21:69:c9:fa:7b:a4:6b:54:a2:b9:
         71:82:1b:7e:9e:b9:95:17:e4:b2:68:90:56:99:f0:1e:bd:06:
         38:04:3a:c5:1c:d3:c5:96:6b:f9:10:20:63:fc:22:ce:ba:0c:
         a7:ef:a5:4f:88:ca:1f:0f:b4:bf:2c:c7:6c:24:fe:c6:5b:3c:
         3c:e9:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:03 2026 by rpki-client