Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          LGe4/3A1ImNhOvJv1MJoaPrmCaYo5lt4cgZ6zLg4hu4=
Subject key identifier:   B7:28:90:0C:E2:83:68:55:F9:CC:D3:E6:1A:82:86:19:DB:51:EE:38
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       019E303B72A55706620FC58479AC552F3E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          0870
Signing time:             Sat 16 May 2026 10:01:02 +0000
Manifest this update:     Sat 16 May 2026 10:01:02 +0000
Manifest next update:     Sun 17 May 2026 10:01:02 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: 6mpA7TH/FC5wAJqUrx90p+CJjLmAZoC8vH36515rdTs=)
                          2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:72:a5:57:06:62:0f:c5:84:79:ac:55:2f:3e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: May 16 10:01:02 2026 GMT
            Not After : May 17 10:01:02 2026 GMT
        Subject: CN=b728900ce2836855f9ccd3e61a828619db51ee38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:5f:16:a5:d1:e0:51:9f:9f:e9:92:f1:e1:
                    18:91:7f:0a:d5:d6:dd:b9:c4:e6:d8:77:ac:fd:c7:
                    52:ea:45:e8:9f:50:ed:9f:72:11:a2:59:50:93:7c:
                    25:df:80:49:d4:56:d2:12:dc:ab:c9:3a:71:02:b0:
                    f9:4c:4b:79:93:5d:ae:bc:a5:f1:97:86:00:0d:9a:
                    e3:d7:49:9e:f1:2a:26:1d:a6:af:16:02:56:09:fb:
                    93:7e:21:28:8d:c7:c4:34:7e:4f:b2:68:5e:b3:bf:
                    e8:0e:bf:12:40:88:f8:cf:73:d8:16:b3:14:75:70:
                    a7:54:c7:2f:92:51:bb:62:5f:97:cf:c6:bc:d5:79:
                    4c:f3:ed:e4:9a:c2:d8:15:84:97:9a:be:9d:c5:14:
                    60:27:46:b2:75:65:3f:69:83:ba:64:92:ba:8c:20:
                    49:b1:1c:af:fc:83:09:36:c2:81:a3:e9:25:bd:2a:
                    4f:27:c4:e1:84:65:e8:93:e8:ce:3e:ac:50:45:10:
                    b1:48:5f:55:3c:52:45:ad:81:ee:13:57:24:84:9e:
                    22:1e:e0:84:22:d6:92:66:a7:3f:b9:67:ee:00:a7:
                    f1:da:26:28:ba:71:73:54:15:00:93:8d:40:f9:41:
                    87:47:3f:1a:78:85:19:cf:78:a9:cc:29:89:71:ee:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:90:0C:E2:83:68:55:F9:CC:D3:E6:1A:82:86:19:DB:51:EE:38
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:a3:a5:f0:d6:b6:ec:cd:0d:a7:dd:ce:aa:16:49:91:16:
         60:71:df:1c:bb:a7:3b:66:36:68:c7:d7:b7:44:14:c0:4b:01:
         f3:7d:df:ae:d1:11:6c:11:05:bc:c7:70:e2:c0:dc:ff:42:de:
         88:2d:56:b9:72:fd:46:12:db:2d:79:fa:bf:c4:a4:0d:eb:48:
         b4:5f:72:9a:38:b4:df:8a:ad:2f:29:65:df:e5:55:8f:af:32:
         8c:b8:1b:6a:bb:d1:a6:a0:5c:9b:ff:3a:59:1a:40:15:14:50:
         a4:ae:7b:d3:55:c6:4e:6c:32:01:88:1c:f9:ad:11:f2:dc:cb:
         64:a0:08:3a:26:df:0d:42:7e:90:ee:9b:f3:35:cb:10:3b:62:
         89:45:db:01:db:8f:5c:89:bf:b4:f7:e0:e4:18:20:a2:74:07:
         aa:32:22:7f:e7:30:40:35:5b:f2:aa:f9:ab:1a:ab:15:25:64:
         fe:09:85:82:e6:c5:ce:79:14:e0:d6:aa:8e:75:ed:48:65:c0:
         1c:99:fc:e1:4d:4d:cb:29:57:e2:ba:94:ba:b4:91:0f:58:40:
         73:be:57:84:20:04:07:a4:4f:84:d4:1a:3d:0d:1a:4a:20:ad:
         0e:d1:ef:b6:a4:cd:10:04:f1:f8:e2:b2:35:37:7a:fd:3f:72:
         c6:a8:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:07 2026 by rpki-client