Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File:                     leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier:          zOm+2lBSgT9CbMZU/k5WlTu6p+3FYH8OAr+lj6Y/TeY=
Subject key identifier:   3D:1F:6E:FE:76:22:A1:74:8B:5D:E3:F9:89:BB:44:80:46:F5:20:2B
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer:       /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial:       019D2884B133C9C26B2C2A4F14E368141723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number:          06DE
Signing time:             Thu 26 Mar 2026 05:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:17 +0000
Files and hashes:         1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: EoHRSvZmZbCUk7nWZyZuhdYvnZUgYbye2MLQJ/6tuYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:b1:33:c9:c2:6b:2c:2a:4f:14:e3:68:14:17:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
        Validity
            Not Before: Mar 26 05:01:17 2026 GMT
            Not After : Mar 27 05:01:17 2026 GMT
        Subject: CN=3d1f6efe7622a1748b5de3f989bb448046f5202b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:e9:41:f2:e5:46:2a:9e:ed:19:3b:2a:61:
                    9d:7c:66:42:d5:3c:d5:0e:99:45:a8:00:77:cb:b0:
                    29:19:58:d1:87:4a:ac:14:ff:7f:e2:50:e8:c8:34:
                    2d:7d:5c:72:d8:ae:02:d0:d9:b4:fe:83:2a:dd:e8:
                    9d:73:d7:f4:35:9d:ce:a2:66:3f:b8:35:b6:e6:d3:
                    6b:8f:33:a4:c3:d5:ca:26:9e:b1:27:7f:c8:53:c7:
                    0d:a8:be:a3:09:35:48:ac:ae:01:42:34:00:c2:d3:
                    71:3b:17:4f:67:c8:40:51:a5:54:56:57:75:26:f8:
                    fd:94:86:85:f1:5f:fe:5b:e9:b5:96:90:54:f4:05:
                    57:d6:1a:8f:d9:82:3c:95:c5:b9:70:bc:20:46:69:
                    31:27:0e:3d:26:c2:67:69:9f:7d:09:16:03:93:95:
                    13:0e:17:ec:29:18:60:1e:ed:eb:0b:e5:e2:46:e5:
                    c1:dc:f7:74:83:01:b0:10:19:1f:08:9b:7b:6b:37:
                    18:5d:e6:55:6e:37:65:84:bc:93:ff:41:7e:bc:64:
                    4c:18:10:c8:28:aa:39:62:27:d1:1c:ed:b8:ff:d2:
                    2d:22:e0:0c:a4:62:2d:53:42:18:80:3d:b4:21:45:
                    86:5a:bb:b4:6b:08:f3:f3:4b:67:ef:61:a1:1f:b2:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:6E:FE:76:22:A1:74:8B:5D:E3:F9:89:BB:44:80:46:F5:20:2B
            X509v3 Authority Key Identifier:
                keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:fe:57:11:5a:49:c2:64:1c:63:33:82:b4:a1:af:bb:21:
         a1:98:6c:98:b9:58:99:d9:32:b5:71:ef:7e:bc:57:c8:c0:95:
         57:62:05:da:b5:5c:a3:1a:74:59:86:fe:67:53:c9:53:0b:d8:
         b0:fc:1c:4a:f5:aa:28:b5:45:6f:63:2d:a7:85:3d:be:44:25:
         7a:74:e4:49:93:6a:b7:4c:6f:1d:dd:34:28:fd:a7:4b:85:8f:
         2f:af:74:46:d8:b6:ef:62:8f:d0:1a:e9:00:cb:fc:1b:fc:80:
         25:e4:47:9d:6a:66:c7:4c:86:32:3f:88:af:55:71:ef:57:54:
         a1:92:af:12:5f:e6:bb:14:c3:c1:d1:94:4d:f3:c8:c2:b0:5c:
         a6:6f:05:c6:34:82:2e:3f:03:4f:19:29:96:2d:07:53:fb:f2:
         c6:2a:8b:83:7a:32:a3:36:24:ff:1c:d5:7b:19:35:ea:1a:f7:
         99:09:c4:ce:49:61:f7:e4:3f:6d:45:95:66:7b:6b:11:b2:7a:
         af:90:4c:c9:f8:f9:4a:9c:8e:39:24:b5:0f:03:63:42:dd:c6:
         8d:01:66:40:8c:b1:a1:f1:29:90:a8:d7:c5:43:a1:72:d1:00:
         47:a1:c8:e8:9f:0d:f2:79:10:0c:a0:96:fb:d4:7d:e8:0f:c1:
         dd:72:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:39 2026 by rpki-client