Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File:                     atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier:          /YMrEAfkBXUH+CmEQTa700aLr3+tzczbrR8szCh8JqM=
Subject key identifier:   A6:90:7B:95:B2:E7:1D:64:29:3B:76:4D:1B:55:23:3E:E2:A6:0F:98
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer:       /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial:       019DFB0407C42F394E12726DBDE06EC5D8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number:          08F2
Signing time:             Wed 06 May 2026 02:00:38 +0000
Manifest this update:     Wed 06 May 2026 02:00:38 +0000
Manifest next update:     Thu 07 May 2026 02:00:38 +0000
Files and hashes:         1: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: 7fxZNn2E/wYuPlfNVCd4sd4P/PijoBjx5FWvvyyR0/A=)
                          2: yfIVfxN62mXPNIQcBAIr1HDWsQ0.roa (hash: IDg/3WOtqztOAgh+Loowhsk9bIJzHnk5Pz6kWQuqSiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fb:04:07:c4:2f:39:4e:12:72:6d:bd:e0:6e:c5:d8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
        Validity
            Not Before: May  6 02:00:38 2026 GMT
            Not After : May  7 02:00:38 2026 GMT
        Subject: CN=a6907b95b2e71d64293b764d1b55233ee2a60f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:a4:3a:0b:23:61:12:8f:c1:44:8e:7e:06:
                    b8:21:58:84:96:78:7a:e0:c7:33:28:a3:a2:3b:0b:
                    ba:3b:93:d4:66:20:08:08:e0:61:62:5e:76:c9:c8:
                    5d:36:1d:1a:9c:79:73:6d:d3:7e:6f:18:fd:c1:02:
                    c6:d8:32:cd:d4:3a:ef:0e:9d:c3:e5:c1:8f:c2:26:
                    76:21:23:80:d9:73:4e:fc:9d:33:aa:a8:f2:57:6f:
                    bc:bd:1d:6b:b2:cc:4a:e5:6a:c3:53:e0:00:92:97:
                    92:c2:61:fb:62:08:dd:1d:d7:d9:52:5c:88:1e:33:
                    84:bd:ac:19:62:b6:8b:f5:67:70:f2:dd:da:63:23:
                    23:8e:6b:2d:a7:b0:86:c1:68:b9:39:c7:f0:48:6a:
                    67:e3:21:d9:9b:d7:66:c4:46:7f:d9:b5:20:86:26:
                    a6:00:9c:76:79:a1:b6:9f:55:9b:8e:3c:81:a7:5e:
                    7b:8a:d5:f9:dc:15:13:c3:a4:57:51:ea:08:ba:ef:
                    f6:c0:c7:d0:67:2e:05:01:0b:5e:d2:25:af:76:d8:
                    d5:29:c9:8f:7c:f5:15:a3:8b:3d:83:b8:e2:22:68:
                    bf:8c:4a:3a:4f:38:7f:be:73:28:c5:c3:c2:be:0a:
                    66:c6:6c:ad:d2:ac:40:3a:2e:e7:f7:29:9e:f9:2e:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:7B:95:B2:E7:1D:64:29:3B:76:4D:1B:55:23:3E:E2:A6:0F:98
            X509v3 Authority Key Identifier:
                keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:72:88:52:aa:00:50:33:5e:0b:32:92:e8:b6:33:34:a5:
         01:9f:80:4e:c5:ae:54:54:c4:4b:bf:4f:52:02:18:4f:cd:4b:
         f9:e1:b8:65:20:a5:d4:2f:d6:c3:cf:ef:3f:b1:4d:59:8e:e1:
         dd:99:84:29:12:f9:6c:38:ed:f3:c8:da:f2:70:fa:99:87:f3:
         6b:af:81:8c:6d:76:39:18:60:55:2b:ff:1c:69:65:3f:6a:04:
         57:93:82:56:ed:94:b9:7e:95:6f:7f:a8:c3:f9:ea:16:ea:c4:
         23:fc:4d:8b:4f:c3:ce:94:ce:8b:24:46:8e:86:bc:a2:71:d2:
         ff:2b:33:be:9d:4c:b7:47:42:bf:a5:1c:f8:df:84:02:93:09:
         6e:55:88:d2:45:99:be:54:a5:2c:53:40:13:e1:d1:05:8a:6d:
         e4:39:41:89:bb:d9:c8:a6:a8:4d:96:66:ed:33:d7:c3:8e:37:
         7d:85:24:9b:10:3f:22:b0:d9:41:73:ff:17:6e:ea:f4:97:86:
         60:f0:6e:79:5d:ea:d3:68:68:be:a9:c0:a0:2c:02:c1:a9:c3:
         ff:8e:00:84:95:8d:6f:92:94:94:9a:ab:40:0f:3f:8a:ea:aa:
         8f:d4:cb:cb:9c:79:a7:b6:40:d5:75:91:c2:5c:9f:88:2e:6b:
         7d:fb:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:14:36 2026 by rpki-client