Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File:                     C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier:          o/k71YSU5gTNmKP/sA8XJ46UarINuwbyNPhH9b5hC18=
Subject key identifier:   E4:65:FA:C0:9E:CD:90:8C:FC:D8:7E:A2:41:2D:39:39:EA:2E:18:F1
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer:       /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial:       019E26CAA531DDD6AAA1AA6C459A51AAD4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number:          0FB3
Signing time:             Thu 14 May 2026 14:01:15 +0000
Manifest this update:     Thu 14 May 2026 14:01:15 +0000
Manifest next update:     Fri 15 May 2026 14:01:15 +0000
Files and hashes:         1: 59tmjDQfU-ncRC8Varmb6pF2lz8.roa (hash: 3aX8v2tZST5i3tJwk6iAtRnox6a+RxiF+ijUKhsx+YE=)
                          2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: DICI3BM9Q/LJ5tEDT4/rLt8WawPU6UeoOtEh2SuKs7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 14:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:26:ca:a5:31:dd:d6:aa:a1:aa:6c:45:9a:51:aa:d4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
        Validity
            Not Before: May 14 14:01:15 2026 GMT
            Not After : May 15 14:01:15 2026 GMT
        Subject: CN=e465fac09ecd908cfcd87ea2412d3939ea2e18f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:8f:7d:8d:6a:58:bd:cd:c7:dc:fa:0f:ae:
                    ee:c0:0a:aa:4b:f0:e0:7e:0e:ab:16:d7:87:cd:6b:
                    83:22:44:30:20:a7:8a:f0:1c:6a:ad:65:42:3c:2e:
                    f3:18:7d:52:20:08:39:e0:f6:5c:c8:2f:54:eb:38:
                    97:17:4b:bd:04:1c:67:16:51:3d:03:66:c7:01:07:
                    43:12:91:38:f1:bc:a6:6b:07:77:53:b2:d5:9b:77:
                    c3:40:d9:5a:93:28:d3:64:e8:cd:e8:d7:fb:3a:a7:
                    4b:f1:7a:70:63:42:f0:15:83:38:fa:5e:cf:91:13:
                    50:08:f1:7d:70:55:4b:16:a2:21:72:d8:07:85:8e:
                    dd:46:01:02:22:67:18:c6:6e:56:b2:6a:cf:27:ed:
                    b4:76:b6:d1:7f:62:1c:96:8e:94:e8:60:5f:44:32:
                    72:a0:26:2d:36:e6:b6:f8:a0:82:2a:22:8d:40:b4:
                    93:16:3d:9d:8d:84:b6:5f:9e:84:b8:4d:3f:61:65:
                    57:da:8c:c1:5e:4d:66:7b:6e:dd:fe:0d:a6:b5:e9:
                    d0:1e:7a:f9:8c:7a:24:b6:91:a4:56:65:58:74:e9:
                    70:b7:cc:be:e6:e4:a5:23:bf:3b:d6:f7:be:72:cb:
                    0c:e9:ae:4c:51:64:79:69:3f:68:c5:42:a8:65:23:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:65:FA:C0:9E:CD:90:8C:FC:D8:7E:A2:41:2D:39:39:EA:2E:18:F1
            X509v3 Authority Key Identifier:
                keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:a1:ac:bb:03:d9:4d:30:2b:7e:98:6d:60:65:98:e7:c3:
         b0:34:7a:bd:4c:ca:33:21:27:5c:68:d1:fd:5a:47:de:ab:65:
         64:59:c6:dd:44:68:db:08:90:4b:55:28:15:49:b6:80:0f:89:
         59:99:2a:35:f0:92:de:e2:fd:5f:45:1e:71:41:1b:d4:e4:4c:
         51:20:da:73:64:71:c5:cf:80:14:23:94:5a:59:06:06:2f:68:
         ac:95:f3:8e:40:93:4e:c2:1e:a0:8e:ef:22:c3:af:b2:5c:b8:
         64:0b:ee:5e:c7:35:99:3e:57:33:5d:89:b1:15:0f:bd:11:3c:
         28:fc:31:bc:50:d9:4a:ee:fa:e0:7a:3e:2a:cf:4b:26:09:c6:
         0a:c0:85:9a:65:b0:22:75:98:21:f5:d8:d9:52:46:a5:5a:5d:
         88:cf:79:d5:8d:06:4f:43:69:ba:a8:a1:ee:f0:42:28:cb:a2:
         c9:52:5b:46:38:ad:f8:15:55:5b:5d:b9:eb:2a:ca:44:a3:d4:
         82:d1:18:93:75:9f:8f:8f:69:7c:d9:41:6f:3b:87:08:c7:7a:
         5e:4e:42:f1:98:07:64:9c:d3:d4:00:c3:85:07:72:0a:43:70:
         a0:4e:c9:07:fa:4d:8c:e1:50:26:30:6f:eb:40:96:c5:10:90:
         13:3b:8d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 23:13:05 2026 by rpki-client