Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File:                     7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier:          wd6GV9XaqsVBSYwIdIddzz82NgeQ966eCETysVQfWr4=
Subject key identifier:   3F:A2:F2:E3:06:9C:06:48:5C:6C:4B:94:C3:43:2D:21:43:BE:39:D6
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer:       /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial:       019E3184B82C96B68805C600A9018242C91B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number:          0C6E
Signing time:             Sat 16 May 2026 16:00:41 +0000
Manifest this update:     Sat 16 May 2026 16:00:41 +0000
Manifest next update:     Sun 17 May 2026 16:00:41 +0000
Files and hashes:         1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: T//nwWsI4Ry7CMR3NOZNdqEOxOF9DsWWepY45cXPlS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:b8:2c:96:b6:88:05:c6:00:a9:01:82:42:c9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
        Validity
            Not Before: May 16 16:00:41 2026 GMT
            Not After : May 17 16:00:41 2026 GMT
        Subject: CN=3fa2f2e3069c06485c6c4b94c3432d2143be39d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:b1:c6:b1:db:d7:b9:83:fd:9b:cf:56:5c:
                    21:73:89:f0:13:3c:7f:d3:17:b7:9e:78:51:f8:66:
                    ef:49:c4:d2:24:74:52:83:44:a8:bf:d5:9c:f3:69:
                    e9:56:3c:b9:cb:fb:c0:ed:fa:95:75:c1:af:eb:ab:
                    51:51:c0:7c:53:40:75:04:8a:8d:27:9f:ec:72:00:
                    1c:d3:0e:c8:5d:37:85:07:07:65:4d:be:ac:a2:09:
                    56:82:a8:c4:26:40:7b:d9:02:64:8f:53:5f:9d:1d:
                    78:1a:87:f5:f8:a9:fb:46:27:60:e6:b2:ab:22:06:
                    27:95:70:7d:11:ee:67:9e:96:b3:9f:b7:b0:a5:7a:
                    8f:a8:f8:f4:bc:7e:6d:d8:f6:b7:c2:b5:b4:f7:86:
                    48:ea:98:06:c6:14:9f:d7:18:48:00:3b:28:59:e4:
                    f2:cb:37:19:54:45:2a:86:0a:d9:fb:b5:9c:81:87:
                    67:0d:1f:64:17:88:b5:44:d0:1b:2a:4f:c4:3d:30:
                    89:19:9f:ea:25:cc:93:94:35:15:bf:7d:df:94:83:
                    24:b5:12:77:23:98:9b:1d:b2:88:ca:9f:e5:29:5c:
                    2c:eb:f1:68:58:81:4d:6b:b2:ce:2d:71:58:c9:c6:
                    28:a0:64:c4:89:7c:7b:26:3b:fb:7a:55:61:88:1a:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:F2:E3:06:9C:06:48:5C:6C:4B:94:C3:43:2D:21:43:BE:39:D6
            X509v3 Authority Key Identifier:
                keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:59:14:fb:fc:79:e7:50:67:8e:57:4f:ec:b2:06:b0:1b:5b:
         5c:bd:a6:28:d4:7c:01:ce:de:e5:90:2c:37:42:82:9e:de:3e:
         d4:dd:45:b4:74:3c:82:88:4e:31:f3:01:4b:3d:6d:04:e7:5e:
         44:d5:88:8a:67:d6:85:10:97:e0:c3:76:40:2a:a3:ef:30:85:
         f1:f6:5f:8f:dd:69:a1:bb:01:92:f3:c0:9f:0d:90:4b:0e:f7:
         a4:57:18:b0:6c:a8:ce:50:86:fb:9a:29:17:8e:c2:c1:52:2b:
         ef:06:9b:47:e1:cc:33:12:88:5b:36:40:14:84:d4:ac:1f:1f:
         d6:c1:16:c5:1e:78:0b:88:41:8d:9c:03:12:19:c6:89:91:bf:
         30:d0:49:0f:7d:29:54:52:01:e2:30:44:cb:20:3b:b3:6a:66:
         a3:a9:f4:bd:b5:3e:26:1f:7b:b2:e6:76:88:08:ee:2e:3c:7e:
         a3:59:6b:9c:d7:3e:f4:75:75:e1:2d:be:bf:34:28:59:c1:c0:
         b4:60:d3:a9:6e:21:86:63:d3:73:2e:f8:a8:58:04:1b:12:69:
         57:26:5c:e9:cb:59:77:4b:5e:80:84:c4:3d:52:fc:d5:ba:ea:
         72:85:b0:c4:e8:03:cd:26:25:65:19:f2:68:e6:0f:f3:14:66:
         ec:13:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:00 2026 by rpki-client