Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File:                     6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier:          ras6Ityqa93lbZ4CtFmAcRgFNgEp+SIzEDSg1fV5NBY=
Subject key identifier:   24:F4:62:4C:61:7A:23:2B:DA:A9:CA:0D:32:0A:BD:BD:C5:A7:BE:5D
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer:       /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial:       019E28825250533DF8E0627573B613BE20E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number:          07E3
Signing time:             Thu 14 May 2026 22:01:29 +0000
Manifest this update:     Thu 14 May 2026 22:01:29 +0000
Manifest next update:     Fri 15 May 2026 22:01:29 +0000
Files and hashes:         1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: Os3JEtSPZM9sFMupVIlhlunwB02a0R8F9HAByZHbtds=)
                          2: Bo61RTRTOhfwB50Bqs5zl4FzjGE.asa (hash: fR/GqKb8wiw/0kJKnHBnbPsaaq7HXPxVfPXam3jXJ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:82:52:50:53:3d:f8:e0:62:75:73:b6:13:be:20:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
        Validity
            Not Before: May 14 22:01:29 2026 GMT
            Not After : May 15 22:01:29 2026 GMT
        Subject: CN=24f4624c617a232bdaa9ca0d320abdbdc5a7be5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:9c:dc:fc:9c:87:fc:f0:a1:ff:ad:e5:5d:
                    6e:a0:4a:55:14:0f:b1:3d:a5:58:83:79:b9:09:eb:
                    5c:81:90:eb:92:c9:c7:a2:9c:10:06:4f:d2:f8:50:
                    46:d7:59:b0:f1:a3:01:7f:11:dc:55:4b:2f:cd:32:
                    f1:6f:91:42:4a:42:1f:c8:52:70:ba:16:87:e8:f9:
                    92:9c:e6:ce:37:13:b5:73:79:f5:17:43:8e:cb:98:
                    fa:23:72:34:a7:dc:49:6b:d4:fc:5e:62:8d:e8:fe:
                    93:78:ca:19:9d:61:ef:f9:e4:69:8b:67:40:a1:79:
                    6a:09:d7:57:44:b0:be:2d:b4:fd:ff:e9:93:36:ce:
                    36:ca:d4:34:7e:1a:ad:e4:0e:9b:22:51:48:1b:99:
                    19:bd:7a:bd:e2:2d:f8:4d:b1:a8:c0:e9:f2:9d:8d:
                    9e:97:f2:3e:0f:97:32:d2:c6:54:0c:67:67:64:07:
                    5d:89:c3:03:9b:c0:e3:f2:c9:ea:8a:a3:3e:1e:98:
                    70:30:91:f3:9d:ba:99:ee:76:e5:d5:c7:aa:7c:4c:
                    f9:b7:60:1a:76:6f:82:83:46:2f:32:14:48:62:18:
                    70:09:2b:e0:cb:cb:19:50:3d:f1:27:02:14:f5:0a:
                    79:0a:33:08:77:7e:89:8b:cc:66:a4:49:d6:a5:7f:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F4:62:4C:61:7A:23:2B:DA:A9:CA:0D:32:0A:BD:BD:C5:A7:BE:5D
            X509v3 Authority Key Identifier:
                keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:2c:0e:f7:ed:0a:03:0d:30:7e:b7:1f:aa:b2:2f:bd:6e:
         52:0e:2b:8e:45:0d:4e:f2:61:23:69:6c:6b:aa:96:6b:0a:8a:
         1c:84:84:f2:95:dd:92:14:db:fb:ef:f3:45:d0:1f:e7:20:10:
         3b:00:0c:46:e2:a4:67:95:a2:41:30:97:e9:5b:84:f1:92:12:
         e0:25:48:13:ea:ba:5f:3f:35:13:6f:ad:79:ce:8e:f2:84:cf:
         f1:d7:27:f7:a1:7c:14:58:1e:76:ea:39:d4:c8:54:a1:ae:00:
         29:41:fb:89:c9:a2:e0:79:64:92:b8:a9:3c:8f:91:e5:b6:df:
         c7:1a:b4:7b:03:94:22:6d:3c:c0:34:e4:10:d4:09:f3:f3:49:
         4d:eb:be:53:f4:f6:73:d0:e2:bf:05:e2:23:8d:9f:e4:6f:a7:
         89:2e:18:6f:92:46:e9:e0:b6:ec:2c:38:a8:63:2d:30:1f:0b:
         2f:6b:4a:a9:06:1a:0f:73:0c:3f:90:7a:1d:24:07:fd:c2:51:
         77:a9:6b:d2:7c:06:55:04:9d:01:7a:dc:59:ae:77:ef:66:4f:
         d8:77:30:83:70:fb:c8:87:bf:b2:92:d0:d0:54:fd:5d:b2:59:
         2a:43:32:c7:be:68:2a:4d:f6:f6:29:29:b8:d9:28:c6:63:51:
         d7:fa:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:18 2026 by rpki-client