Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File:                     6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier:          dWxOPYLkpD8T7hrx96BtvigV5AVm+A/gmDpUvohf1pU=
Subject key identifier:   21:9C:7B:AF:06:75:86:1B:58:5C:7B:D0:1B:EE:94:86:7B:F9:09:5D
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer:       /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial:       019E2F29345097F939E599393472A3BBC9B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number:          0CF7
Signing time:             Sat 16 May 2026 05:01:29 +0000
Manifest this update:     Sat 16 May 2026 05:01:29 +0000
Manifest next update:     Sun 17 May 2026 05:01:29 +0000
Files and hashes:         1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: p/ME8uZJ/gpmyYj1HcLmqeSYRHqVvCMUrHmeXYHu03w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:29:34:50:97:f9:39:e5:99:39:34:72:a3:bb:c9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
        Validity
            Not Before: May 16 05:01:29 2026 GMT
            Not After : May 17 05:01:29 2026 GMT
        Subject: CN=219c7baf0675861b585c7bd01bee94867bf9095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:a1:03:8f:c8:16:b1:e6:34:8b:22:98:1f:
                    85:59:e1:ba:96:c0:7b:19:d1:cd:41:5a:0f:19:dc:
                    1d:13:01:6e:eb:3a:e9:01:fe:e0:aa:29:d5:11:89:
                    14:07:37:6d:40:fe:97:e8:30:da:6b:ef:74:48:74:
                    e0:3a:a9:48:97:bc:96:f2:89:3f:4b:da:8e:82:a4:
                    d3:c3:0c:b5:4e:ff:8c:5f:b4:1f:ea:fb:60:c2:f5:
                    01:c9:47:d0:68:ae:e2:bb:62:f5:b9:8e:df:ec:7b:
                    93:eb:c0:43:59:91:e0:1e:69:89:66:93:b7:1a:4b:
                    3c:e5:11:11:f2:32:e0:60:54:34:c5:ad:3c:3d:79:
                    0d:c6:48:d3:14:0f:2a:f7:6f:12:24:d2:57:f6:e0:
                    ef:ea:c8:1d:4e:f3:07:7c:01:ff:1e:66:1b:8a:ac:
                    2b:ae:78:7b:a6:16:28:ac:65:6d:d7:e2:d9:1c:e4:
                    d7:27:68:9d:21:75:47:92:06:5a:48:f2:fc:2a:6b:
                    f7:fa:df:f5:03:3f:db:d1:ad:d4:b5:6a:7a:e3:21:
                    83:d0:7d:1f:80:37:b7:dd:b3:49:8e:18:8a:31:e2:
                    a5:09:80:80:fa:2d:0b:fb:64:dc:3b:55:49:67:83:
                    72:6a:96:ff:4a:d6:1e:5d:95:5a:7b:9a:23:98:c1:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9C:7B:AF:06:75:86:1B:58:5C:7B:D0:1B:EE:94:86:7B:F9:09:5D
            X509v3 Authority Key Identifier:
                keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:bb:11:40:86:f9:a5:16:e7:73:97:ee:43:da:35:b0:14:
         c1:5c:c0:75:4b:31:98:53:90:64:c0:94:6a:60:8d:1a:52:eb:
         1b:a6:51:97:61:fb:b1:02:8e:4c:0c:e7:b7:74:69:5c:dc:2a:
         d4:89:e9:ee:ab:09:c2:78:02:96:08:9a:03:b9:b9:10:7a:b5:
         8b:6d:be:6f:05:2e:0b:0f:5b:11:af:f9:24:ac:45:0e:f4:2c:
         1a:72:c7:00:cc:c6:88:ec:28:cd:fa:cb:52:2f:7c:0e:7d:2d:
         06:a7:cd:a3:a4:32:25:13:72:97:d7:0f:d8:92:09:11:c1:4d:
         bd:86:19:09:a9:5f:f2:f1:de:44:d3:af:46:7a:27:c5:33:bd:
         a2:8e:e8:03:45:7e:1e:e7:8c:55:51:fe:23:b1:9a:71:68:ad:
         73:f6:b5:b4:56:85:b8:63:6f:f6:06:46:5e:c5:34:4e:b9:f7:
         c9:2c:f6:b4:c0:6f:cd:d4:9c:a4:59:05:20:8c:32:5c:1e:a0:
         fd:06:b8:72:f4:0e:0e:42:bc:35:3a:05:46:ac:87:7b:47:56:
         e4:da:3d:1c:41:79:67:f5:17:5e:68:5e:b7:56:7d:aa:b0:9d:
         1c:69:a1:f9:63:72:b1:f6:5c:e1:17:10:5f:03:71:b8:61:c1:
         44:7f:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:34 2026 by rpki-client