Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
File:                     B6_c1el6wcECR5yVTV-SKxJsvBQ.mft (raw, json)
Hash identifier:          bJQoX9UMZqMUj9yB/j2p6u3TdKqmjnSuGDbT3+0qKgA=
Subject key identifier:   8C:AC:E0:31:95:72:9D:36:DA:B1:98:6D:A3:7D:97:E2:29:C9:8C:3E
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       019E2091F091ED96E0342CB61CF73A099DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
Manifest number:          0526
Signing time:             Wed 13 May 2026 09:01:35 +0000
Manifest this update:     Wed 13 May 2026 09:01:35 +0000
Manifest next update:     Thu 14 May 2026 09:01:35 +0000
Files and hashes:         1: 3OuolTqmnVs6LtXiOd0QS9vfCo8.roa (hash: GAosGByG2yWB3lnHWPHloQDBkOxUHG7WW4iZIv6/8iA=)
                          2: B6_c1el6wcECR5yVTV-SKxJsvBQ.crl (hash: WfMKuhJ2NrO+u5vMlGo/DlrL78XzXapQ1OF6QV9EuAs=)
                          3: JGFsu11gMw9F7k2pf3aoCr2qqgc.roa (hash: /VEyQYusggRI1neKRiaRdt+JnQjrF2mEYj/mhbapZW4=)
                          4: MGFMl29uIul04Dkcmid5PDEF1ZY.roa (hash: ++vse/hC6lI4DMbABO7vSgWLBZfrwdYx2oCRckLJX9M=)
                          5: aBvBIhagv1Eh6Jv4p0LVBwaqyvc.roa (hash: dc4tXzkN5KUEUJGZTtTk5sZozulR7ysWSoCkggZPqwU=)
                          6: j3LHCzy_F6bYYmeWSo0ZiTKih8U.roa (hash: d6PIjAHsMGIzhvIIwNAHH5wwnWUITwMg8K91/kfRdWQ=)
                          7: oR5Wj0GKTXMBG21ienfrWq8vGSM.roa (hash: WRzwTNKdQL5QAbJ2ozPhC4DWD0wEitc9Oj75KHVMQ+4=)
                          8: tyNPCkeOnMPE8ffpgSI6cQ46rco.roa (hash: 1bhYy/zNueI3junFzpZGGhw3wm4zlmN3upkt7WLic/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:f0:91:ed:96:e0:34:2c:b6:1c:f7:3a:09:9d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: May 13 09:01:35 2026 GMT
            Not After : May 14 09:01:35 2026 GMT
        Subject: CN=8cace03195729d36dab1986da37d97e229c98c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d5:6d:e4:2c:67:7a:6a:18:fd:5e:5c:67:d7:
                    62:63:ca:3a:e9:63:82:c9:db:c3:d8:df:e0:19:47:
                    ca:11:1f:63:e9:47:e8:67:cb:12:72:6e:98:02:8e:
                    84:6d:c1:36:53:5d:9c:e0:59:15:7e:4d:85:f7:37:
                    11:57:58:1f:67:7a:c8:9e:ea:f1:88:14:b1:56:ff:
                    fa:68:02:b6:f7:fe:e4:95:2c:1d:ab:23:96:78:cf:
                    7c:da:2c:4d:49:a4:2a:9d:c1:50:b4:69:0a:eb:e8:
                    9e:d0:50:af:55:6c:61:db:43:55:91:0f:58:07:a0:
                    6e:07:93:f5:40:8d:6e:23:a8:89:bc:bc:02:c7:ce:
                    a0:95:4f:8b:90:68:2e:a6:8f:2b:e5:97:d3:5e:a1:
                    f8:8c:b9:d5:0f:93:f9:d1:22:14:dd:05:7e:3c:7c:
                    00:ab:7e:08:4f:f3:5c:55:ed:14:81:86:51:7d:92:
                    d3:9e:70:72:f9:67:3c:5a:88:45:ad:8b:e5:01:4f:
                    ab:a6:75:0b:5b:06:5d:cc:13:3d:a9:c1:3d:81:47:
                    d4:8b:d9:43:4e:c2:e3:1c:2a:db:4b:c0:bf:99:8d:
                    32:b2:eb:70:e4:f6:a3:56:51:3e:c2:f8:00:50:03:
                    76:40:91:e6:34:3c:e9:0f:14:ba:26:90:98:7a:0c:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AC:E0:31:95:72:9D:36:DA:B1:98:6D:A3:7D:97:E2:29:C9:8C:3E
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:b8:6f:08:a1:0d:0f:80:d7:f9:e4:bb:0d:e9:be:b5:17:
         88:01:4a:cc:77:72:97:ba:b2:b0:d7:a5:e9:72:ed:be:fc:45:
         a3:78:38:58:50:23:62:2a:bb:29:95:95:50:b2:0f:15:8d:60:
         9d:17:a0:75:a8:b1:eb:37:12:d9:98:e1:dd:4c:08:d0:f1:9f:
         00:c0:65:86:20:fc:4d:be:e7:d4:95:29:88:e5:7c:e0:61:87:
         d9:cd:5a:32:65:86:e3:de:9f:47:a7:dc:25:fa:58:a6:82:cc:
         d6:04:bd:cc:47:f4:79:12:c9:82:ef:dc:47:d6:7b:71:f1:ae:
         ab:64:01:0a:64:79:cc:bb:ea:36:6f:53:f1:24:4a:9b:4a:34:
         16:50:a6:3a:28:93:e8:d8:9c:52:47:39:73:02:1e:ce:21:c5:
         12:4c:54:55:48:cd:fa:0f:2c:51:c8:c9:90:b3:6e:fd:06:e2:
         f4:5b:ac:45:e6:82:76:ad:f0:ba:f8:32:51:ac:0a:b7:ae:7d:
         d8:dd:8f:f8:ac:12:0f:ff:2b:6c:a2:4c:f4:5a:92:2d:8d:dc:
         4b:ec:e9:f8:8b:84:da:fe:b1:44:7a:e2:de:63:a3:c8:20:b9:
         c3:d4:b1:67:46:48:65:5e:5f:ec:a4:bf:aa:78:e8:9f:54:e6:
         32:b2:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:02:34 2026 by rpki-client