Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File:                     CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier:          c1ms5vgvA/rHdS9tgOkKdx8w9jb9nGyHXSAcyxMcPC0=
Subject key identifier:   FE:1E:37:9C:E3:82:EB:67:C0:A0:A1:03:87:16:72:3D:C6:D6:EC:33
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer:       /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial:       019E307255C71115B8AEFCAC6EA35626E363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number:          078E
Signing time:             Sat 16 May 2026 11:00:59 +0000
Manifest this update:     Sat 16 May 2026 11:00:59 +0000
Manifest next update:     Sun 17 May 2026 11:00:59 +0000
Files and hashes:         1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: wFnDFfcvj7FUK32Dflslkjtca/HAg8RDkhMKZM2x0p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:55:c7:11:15:b8:ae:fc:ac:6e:a3:56:26:e3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
        Validity
            Not Before: May 16 11:00:59 2026 GMT
            Not After : May 17 11:00:59 2026 GMT
        Subject: CN=fe1e379ce382eb67c0a0a1038716723dc6d6ec33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:11:4e:fc:f3:0b:2b:60:6d:b0:a3:e9:d0:
                    a5:88:5b:e2:5d:ec:dc:d7:0b:6e:1c:90:1c:76:69:
                    1c:41:96:a0:39:42:ca:9f:8e:a4:d7:77:29:ad:a4:
                    53:91:49:88:42:dc:26:22:aa:ae:cf:da:72:00:6d:
                    77:6b:90:2a:f0:05:ea:0e:aa:07:c3:15:30:a9:c8:
                    77:46:f8:e2:7b:bb:f6:07:e6:8b:6f:fc:09:6d:4e:
                    ee:84:d8:53:49:70:ac:6a:22:b4:f0:4c:b3:4a:5e:
                    03:e9:8f:5e:05:20:7d:8a:e6:fc:6b:65:83:c8:2f:
                    87:e8:44:13:79:13:19:72:15:78:b5:ad:d1:bc:68:
                    de:37:9c:8f:ef:2c:c5:7a:b9:75:1e:6e:61:af:f4:
                    e0:71:18:d0:1f:76:47:4c:90:6f:0a:cc:aa:8f:dd:
                    8a:11:dc:5e:6f:05:4a:33:49:ae:41:21:71:8b:26:
                    45:53:b1:e1:15:e5:30:97:23:ce:d6:3a:11:f8:eb:
                    b5:68:f5:5e:4d:6c:d9:f6:51:c1:af:c1:78:a3:6c:
                    cd:ad:0f:ac:2b:d2:89:6b:ea:ce:5d:45:42:82:97:
                    01:35:79:e8:07:2c:aa:5b:7d:64:43:b0:c0:dc:60:
                    f3:51:7e:91:f2:d9:98:43:42:2e:78:80:11:64:f4:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1E:37:9C:E3:82:EB:67:C0:A0:A1:03:87:16:72:3D:C6:D6:EC:33
            X509v3 Authority Key Identifier:
                keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:af:64:e9:1a:0d:ab:83:a7:2c:be:9d:57:82:f0:15:27:
         df:56:25:2d:22:71:c4:4d:1f:a1:22:d3:e9:40:33:54:45:c2:
         a9:38:36:fc:61:b6:5d:49:c9:18:fe:ee:dc:c2:73:04:ed:36:
         c8:34:29:ae:2b:f2:48:d1:6f:0a:38:c3:1a:6b:62:98:7a:99:
         7d:60:fd:ac:a3:30:f4:87:77:33:13:10:02:ea:4a:b6:3f:57:
         45:b3:50:81:da:7e:23:f6:f4:20:c1:dc:b9:bd:4c:e1:26:e0:
         7b:d2:b7:e3:8f:1b:9f:98:0c:10:5a:55:d2:f7:5b:dc:28:26:
         39:01:c6:f5:56:3e:55:92:e3:95:01:22:ca:e2:23:25:f1:9d:
         9f:7f:2d:8c:d6:60:c7:b5:fd:cd:45:68:8f:39:73:0f:5e:98:
         16:0c:47:a3:f9:bf:56:81:6d:9c:d9:c7:9d:e2:ea:e4:79:b5:
         58:4d:32:76:26:8b:c4:4e:d8:78:26:d4:50:a9:00:03:4f:83:
         8e:d3:53:4f:74:59:fc:7d:76:c1:4a:56:af:44:aa:b9:fb:43:
         71:68:40:1f:29:5e:3b:01:c7:58:69:2b:b3:14:c3:2f:73:da:
         cd:e4:9d:c8:2c:71:1f:19:e6:fc:97:49:4f:10:0a:5f:b3:73:
         80:c1:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:57 2026 by rpki-client