Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
File:                     U6d_390Uwt8Vjr_C5s_ConmmSME.mft (raw, json)
Hash identifier:          9o9BRh514dbilaZfDFoz02VxSrSYtvfI3gEljM50GBw=
Subject key identifier:   8D:ED:0E:C6:B7:20:30:08:B1:94:F0:A0:F4:7A:12:58:A6:06:47:7C
Authority key identifier: 53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1
Certificate issuer:       /CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
Certificate serial:       019CA945F7D545C0A1D992C888CC79AD817A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
Manifest number:          1251
Signing time:             Sun 01 Mar 2026 12:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:00 +0000
Files and hashes:         1: U6d_390Uwt8Vjr_C5s_ConmmSME.crl (hash: 9ec4+6+s+Ty8qyILbiyUFEErEvpLSs8tU6J0QxK1aM4=)
                          2: n5fGK8uQ1IXVs4gItqnXi96bOCA.roa (hash: 9Xe7j5MzjEYIo3j8TehBH8vYadVuml9WRHAXRG8x2oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:f7:d5:45:c0:a1:d9:92:c8:88:cc:79:ad:81:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
        Validity
            Not Before: Mar  1 12:01:00 2026 GMT
            Not After : Mar  2 12:01:00 2026 GMT
        Subject: CN=8ded0ec6b7203008b194f0a0f47a1258a606477c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c0:28:6a:33:a4:54:f8:0b:87:be:8c:0e:72:
                    46:7c:62:c6:66:a1:7d:a1:66:5f:ee:54:4a:0c:a8:
                    10:54:62:c5:b6:09:76:3a:c9:4c:d4:87:3d:d1:11:
                    8d:e7:aa:2a:f6:95:2b:40:85:6b:07:d5:5f:b8:ed:
                    a5:d3:9f:b3:fe:c1:fd:28:7f:49:aa:a3:7e:21:eb:
                    8b:9e:20:65:44:ab:6e:28:8f:16:b8:08:e4:fa:eb:
                    00:69:e6:01:76:c8:fb:bc:21:ec:c1:7f:0c:19:9c:
                    cd:63:b5:16:a4:b6:e3:0c:ef:b7:69:45:28:a7:87:
                    27:b4:3f:7a:ae:8c:74:8d:94:2e:7b:a9:92:0d:18:
                    f1:db:c3:f9:e4:46:f5:40:ca:4a:0f:ad:20:8a:17:
                    03:db:2e:45:d1:6a:48:6d:21:93:47:24:01:91:15:
                    6d:cc:66:8c:8f:0c:56:65:87:73:5f:23:19:22:15:
                    e3:b9:81:fd:8d:c5:1a:45:e8:45:9a:10:53:d6:de:
                    df:f0:e0:03:60:14:e8:e6:d7:92:ca:f5:2f:a6:05:
                    39:f0:24:e9:e0:c5:3d:80:e0:7a:be:a8:11:b0:5b:
                    19:21:ef:6b:49:5a:b5:13:0f:04:71:97:51:74:c8:
                    b2:d1:bd:5f:28:ab:d7:43:b5:2d:38:10:b4:21:00:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:ED:0E:C6:B7:20:30:08:B1:94:F0:A0:F4:7A:12:58:A6:06:47:7C
            X509v3 Authority Key Identifier:
                keyid:53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:0b:32:2e:f7:21:4b:66:1d:02:5b:a5:b2:3e:19:80:53:
         7f:8d:03:53:29:60:00:61:c1:d0:02:11:d7:c2:ea:9d:b4:07:
         7a:24:d0:38:f0:77:08:8b:2e:58:e4:45:0f:8a:f6:df:51:b3:
         7f:81:06:5b:e4:bc:23:e9:a7:f8:7d:f9:07:af:02:cb:f2:3f:
         38:6a:15:f7:fa:18:5a:01:54:85:39:61:7b:9b:c7:69:44:40:
         26:3e:32:2c:6b:92:53:60:47:7f:3f:94:60:05:38:63:08:26:
         e2:22:98:b0:02:f1:5e:f5:c6:97:05:d2:e0:d1:49:87:25:03:
         3b:37:9b:50:1b:25:d1:51:1b:28:d1:b4:bd:53:3f:9b:f2:e3:
         96:6c:0f:77:ef:af:6e:a5:41:67:96:7d:4d:de:f3:fa:71:03:
         3b:24:f3:0b:03:44:24:eb:10:a3:24:a3:44:fc:e8:4f:68:4d:
         59:bc:70:de:bd:7e:ff:11:0c:64:9c:ec:34:2e:00:0e:cf:75:
         c3:1e:be:58:03:60:9e:a9:f2:2d:d4:13:24:1c:3b:0d:ec:70:
         71:71:c3:37:8a:c3:8d:1a:86:e2:df:0a:25:3b:f2:3f:75:f2:
         1c:48:4a:9e:9f:35:62:b1:c2:b3:d9:f2:6e:72:92:8f:8e:0a:
         3d:00:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:46 2026 by rpki-client