Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File:                     1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier:          oXt+rrbedEk+HSpQ1QQBeNRc153oX/mSOyktOrUk0uM=
Subject key identifier:   6D:95:C0:F2:49:60:36:A0:3E:E1:2E:79:4D:90:68:B6:06:6E:BA:B7
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer:       /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial:       019E2FCD4C24A2538341E14173CF47E0AD5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number:          0753
Signing time:             Sat 16 May 2026 08:00:43 +0000
Manifest this update:     Sat 16 May 2026 08:00:43 +0000
Manifest next update:     Sun 17 May 2026 08:00:43 +0000
Files and hashes:         1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: NwTAdrNS8/v78SYKDPRqZQQft8ITzCpn4No86d17GW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:4c:24:a2:53:83:41:e1:41:73:cf:47:e0:ad:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
        Validity
            Not Before: May 16 08:00:43 2026 GMT
            Not After : May 17 08:00:43 2026 GMT
        Subject: CN=6d95c0f2496036a03ee12e794d9068b6066ebab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:32:d9:e1:17:4f:c0:74:88:bd:b6:11:d7:
                    3f:a7:7b:4b:44:33:8f:1d:27:c8:d2:c7:ee:43:0d:
                    5e:5f:c5:19:2f:36:58:93:45:0e:e8:12:e5:16:d8:
                    bf:ac:6b:79:11:14:ac:9a:5e:52:e3:20:d0:79:0b:
                    30:4c:aa:dc:8a:88:44:0a:cf:cf:4d:9e:aa:1c:ff:
                    8c:f6:24:cc:7d:b6:19:ff:7f:81:59:25:c5:52:6b:
                    65:ae:6a:ec:5a:1d:d9:4e:22:e6:f5:d5:11:6c:e1:
                    5c:c9:4a:8d:d0:94:4b:ad:08:41:0b:31:d9:2e:9e:
                    9c:7b:67:8f:57:96:29:b0:c1:d4:35:4d:7d:27:93:
                    dc:c4:c2:63:b7:90:f0:f0:d4:dd:8a:a8:9a:44:8e:
                    14:16:58:74:c2:11:9f:c2:3a:a9:c4:c0:ec:9c:1e:
                    2f:f8:05:13:d5:b2:13:3f:b1:07:ac:19:aa:44:e8:
                    d0:14:76:e8:19:a4:5a:61:9b:60:fa:e3:25:aa:92:
                    b7:c0:d7:a5:0f:ad:fb:d7:ba:18:93:6a:c8:ab:2b:
                    94:d9:43:1f:12:d7:5b:4b:21:45:3f:06:44:7b:aa:
                    f7:74:27:45:0f:a1:d0:1e:cc:fd:10:06:db:1d:94:
                    e4:dc:16:95:8b:21:3b:52:30:b9:51:03:7c:bf:00:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:C0:F2:49:60:36:A0:3E:E1:2E:79:4D:90:68:B6:06:6E:BA:B7
            X509v3 Authority Key Identifier:
                keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:26:d1:ec:38:6f:94:c9:62:cc:0d:5a:46:93:a8:5a:86:9c:
         1c:b7:f3:d2:c4:ef:6f:ea:34:4d:10:0c:ad:5f:1a:b5:77:c9:
         a8:47:69:c9:90:8c:59:7a:00:f5:51:2a:ab:a0:a3:d1:03:0e:
         ad:e5:5d:0e:4e:a4:77:f0:48:f6:76:94:77:88:d9:36:51:c8:
         ea:90:a0:c5:5f:cf:76:92:74:53:61:ec:b7:27:7b:f7:3b:7a:
         41:4c:82:54:6a:a9:8b:eb:17:d5:af:6b:de:d5:02:1d:18:16:
         9f:4a:fe:31:90:45:4e:c4:6b:41:5b:94:8f:eb:f0:de:12:39:
         e3:cf:f8:5b:fb:f1:bc:fc:7d:a4:9b:21:c1:0c:71:82:49:c5:
         fe:8b:71:f5:84:87:b3:7f:02:e3:38:76:e8:9f:06:a9:b8:14:
         9c:11:3c:cd:ee:a5:ab:2a:08:b8:57:a5:ce:7a:79:a7:6b:28:
         8a:56:2f:01:43:79:83:0c:df:47:b6:7e:8f:fe:e3:dc:5b:cb:
         c0:83:27:7b:c1:94:ea:fc:1a:28:fa:0c:11:c5:11:04:d1:b3:
         9d:1d:72:b5:15:9e:e0:28:c1:ae:cc:4a:a7:b5:22:75:a1:6a:
         1c:1f:a4:cb:a5:85:33:6e:4f:a5:0c:e7:20:3c:22:3b:60:48:
         43:e4:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:44 2026 by rpki-client