Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          h5RCJvxf2P0Q+NON4d+gBtm+Dzy9W2eWobz4s72WMxQ=
Subject key identifier:   59:5C:FD:32:3B:08:D3:A5:8D:EF:F7:F8:B7:01:29:91:84:F2:A7:B7
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       019E307330A1D92D910795683164E802EBC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0FA2
Signing time:             Sat 16 May 2026 11:01:55 +0000
Manifest this update:     Sat 16 May 2026 11:01:55 +0000
Manifest next update:     Sun 17 May 2026 11:01:55 +0000
Files and hashes:         1: B6alie6EioBSI4GRuYA153USJyU.crl (hash: ppoO6ji9fAyzyVD0gRg6pp7LgVWR2RBGlwPFPdcuzxI=)
                          2: HIyYSxMiOeqLWtB6otDo7COyd3M.roa (hash: lz8nKPQ0DtFSSg4Ro3jB7a6GZ1y4p3dFay/tFLeMGEM=)
                          3: t9vvWYRPeToATeVWr4VSq8ee-Bg.roa (hash: ykKWvPxw03+JwAzaQkW4enMVJbdZNrE/vLvG44Vy5as=)
                          4: uxuYZ_f6aWaxaC82KUMAv_QaxnA.roa (hash: AHIAZkO88MIw/Jonn2+RvT3gl4wyE+yeli6wGOjt5vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:30:a1:d9:2d:91:07:95:68:31:64:e8:02:eb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: May 16 11:01:55 2026 GMT
            Not After : May 17 11:01:55 2026 GMT
        Subject: CN=595cfd323b08d3a58deff7f8b701299184f2a7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:ee:02:19:15:11:ef:d0:1e:f3:79:19:e2:
                    db:46:15:0f:1f:ff:aa:f0:91:d1:2e:4b:06:1f:7f:
                    25:88:4d:50:dd:73:04:05:38:35:32:09:dd:08:fa:
                    c3:eb:39:07:71:88:74:6c:64:2e:ea:99:9f:ca:e0:
                    3a:22:0c:b4:62:bb:25:c6:eb:ff:52:b8:36:a0:cd:
                    9d:61:d9:9e:25:67:e8:5f:4c:27:e9:ad:d9:8a:c8:
                    0a:28:9c:ac:cd:41:6a:53:06:5c:43:4e:e3:29:4b:
                    9d:5d:be:b3:31:92:74:25:03:e1:ac:a1:c9:f4:ad:
                    af:3f:a3:fb:3c:02:04:a6:b5:1b:e4:d2:f9:d6:08:
                    f1:b4:d5:14:0d:23:a3:c9:7f:89:ac:aa:0c:77:2e:
                    07:62:1e:0e:fe:58:4a:1e:27:25:85:24:b9:76:c3:
                    7c:2e:9d:4c:27:7a:51:79:99:e7:25:2a:4a:3a:4e:
                    f2:ba:8c:df:11:33:69:af:cb:5e:ee:2c:30:ae:6c:
                    1e:bd:0a:df:eb:ff:da:44:b8:5d:71:f9:71:ef:43:
                    3e:40:91:86:63:9d:b6:89:ec:ae:ac:19:9b:11:e4:
                    c0:0b:87:1e:fd:61:7b:6f:38:ae:eb:36:79:33:31:
                    75:3d:41:e1:24:45:6f:8e:13:8e:24:62:d2:91:2f:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:FD:32:3B:08:D3:A5:8D:EF:F7:F8:B7:01:29:91:84:F2:A7:B7
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:15:c2:36:e2:31:3a:ba:b8:f2:16:fb:7b:14:3b:a2:c6:9f:
         26:86:33:c1:b9:0b:fd:75:f9:3e:c8:69:c3:82:53:02:a8:28:
         9b:e2:7d:e3:6e:0c:1b:8b:2c:79:7f:22:2a:7f:64:b5:97:ff:
         1e:a4:a0:5b:28:18:99:cb:e3:a9:de:b0:51:cb:0c:c4:7e:dc:
         05:f3:e8:1c:c2:d1:8b:74:a0:ac:6b:32:0c:16:d0:a3:35:bf:
         06:85:20:b0:6f:f1:b3:c3:4f:89:8c:c2:7e:0c:5b:65:60:30:
         e1:4d:4f:a9:e4:45:98:b3:e0:df:96:12:63:98:3d:eb:2b:d3:
         48:d0:8b:d8:0b:4f:45:37:e7:35:61:cb:bb:6c:69:7e:5e:b9:
         bf:3e:4a:e0:77:d7:95:62:e4:c2:8c:fe:cb:a3:dc:13:ed:7d:
         93:ed:b5:dc:c2:03:b9:03:96:69:88:bc:be:93:ec:95:49:0a:
         15:3d:50:c0:92:43:38:27:07:4c:53:39:e9:f5:e7:4b:50:37:
         4c:26:fd:4d:93:6b:44:05:d7:6b:96:fc:8f:ef:83:8e:96:ea:
         92:7a:ac:7b:fe:ac:a8:cd:69:12:98:a3:ed:8b:ee:d5:6a:1a:
         2f:65:04:c6:19:e5:a1:be:96:6b:d4:57:1f:93:10:11:85:bd:
         62:2b:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:59 2026 by rpki-client