Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File:                     6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier:          2FYvXpW3pkQ8OzsQNGy8CHoidDt1w9TjnirK7v+nk+Q=
Subject key identifier:   F7:60:D5:BC:40:54:DA:11:22:39:95:65:D7:07:57:AC:19:38:AA:FA
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer:       /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial:       019E254A78F616F27EF2DD3F2D3C96A9B2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number:          120D
Signing time:             Thu 14 May 2026 07:01:37 +0000
Manifest this update:     Thu 14 May 2026 07:01:37 +0000
Manifest next update:     Fri 15 May 2026 07:01:37 +0000
Files and hashes:         1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: PiKkrf6+vtvDy5cDixTNZSMFswQcyNG779nhfGfLPsw=)
                          2: SEhILHygTvrckViFuTbzVqD8wFo.roa (hash: YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=)
                          3: mb-aWZ5_d3ag789UTUZQ7IaflbA.roa (hash: hsap3kqEKhxhExKW9nXN0i5BJCJKmqUW77rfHPyUXL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 07:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:25:4a:78:f6:16:f2:7e:f2:dd:3f:2d:3c:96:a9:b2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
        Validity
            Not Before: May 14 07:01:37 2026 GMT
            Not After : May 15 07:01:37 2026 GMT
        Subject: CN=f760d5bc4054da1122399565d70757ac1938aafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:f8:15:72:c9:fd:51:d9:f5:39:a2:6a:5a:
                    b1:67:84:4b:51:cc:0c:e0:87:32:de:24:d0:f4:f0:
                    2b:09:c4:68:b1:01:8d:96:b7:20:81:68:b9:b1:59:
                    36:8a:92:a5:39:73:f8:c6:25:ef:3e:de:55:21:d4:
                    7b:f1:ef:80:47:12:1d:3c:ac:79:68:2c:79:51:cc:
                    ca:65:0f:bc:d7:59:5b:7b:68:48:bf:c3:ed:8e:82:
                    be:fd:ed:03:42:30:c5:a3:d9:75:7d:12:92:00:fd:
                    19:f4:d5:be:de:d4:c6:ac:fa:3f:f6:44:0a:4f:df:
                    20:f2:b0:7f:cc:45:75:b5:0e:30:45:ec:c0:8b:b5:
                    b8:1f:6b:cb:4a:5b:89:03:0f:2f:f4:6c:fa:c0:01:
                    b7:51:ae:f7:d3:a5:44:1a:27:db:66:e1:66:cc:f9:
                    4c:19:63:33:46:c2:0a:64:24:4f:e7:9f:2b:47:4f:
                    1b:5a:c9:83:5c:96:74:a6:87:9b:8c:ac:98:74:b1:
                    38:da:1a:bf:74:19:cd:39:a9:4c:80:32:bc:ce:a1:
                    fb:87:4e:32:81:7f:e2:a4:d4:e3:ba:38:37:e8:82:
                    8d:1e:09:db:72:78:1a:55:44:2c:95:cd:a4:00:9d:
                    10:d3:7c:56:1a:08:ab:9a:33:10:32:ba:0a:cc:d9:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:D5:BC:40:54:DA:11:22:39:95:65:D7:07:57:AC:19:38:AA:FA
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:c9:9e:bc:0b:2c:de:25:55:b9:47:14:5d:6f:f3:fb:af:
         64:99:e2:f2:ab:3d:e3:9c:98:6d:ce:a2:ee:80:70:9f:e6:98:
         fa:b4:a7:2e:89:13:e5:a1:15:4c:ca:3c:d8:70:28:1d:c2:5a:
         84:73:b2:63:7d:5e:a8:fa:49:4f:99:67:63:52:85:7c:88:71:
         08:f2:7a:0b:73:47:8f:f3:46:0e:f9:05:2b:64:6d:c5:a8:d0:
         24:ad:90:3a:5f:bd:00:b0:ec:da:0f:86:83:eb:28:9e:f8:00:
         de:d1:e2:dc:e0:91:04:09:da:83:14:08:81:ee:c7:c3:24:14:
         ad:45:e9:db:1b:28:34:dc:ef:11:8c:df:03:5c:9e:dc:42:53:
         b9:14:9d:a9:b4:1d:41:f3:cd:aa:fb:1c:89:b9:e9:d8:99:1f:
         9f:8a:05:49:76:dd:b2:b6:db:43:aa:0a:58:c5:1a:64:a9:b3:
         b6:df:03:82:79:ce:34:12:70:9c:eb:6e:d6:b8:1e:42:29:bc:
         ad:2a:61:ec:bf:9d:15:6a:82:17:4a:48:07:49:df:00:0a:fa:
         2f:9f:03:77:be:f2:3a:38:74:9e:e9:d7:df:01:34:88:75:95:
         88:fc:a6:8e:70:74:56:27:89:da:96:0f:4f:a7:ee:25:1f:28:
         b9:54:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 13:58:01 2026 by rpki-client