Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          kOQW/I+BPROQNj9EM5aMvNxSDWI0P1gXy6t4YlS8L8Y=
Subject key identifier:   45:83:C4:EB:2A:06:EB:D1:B2:B2:2E:98:5D:FB:2A:D6:A1:60:EC:CD
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       019D28F2CE90B2C76D13E7745AE64776043A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          0433
Signing time:             Thu 26 Mar 2026 07:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:34 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: 3ohkfnt4jwItj+HGLxxCVqShBc0tvvaqUI0pj6VbwHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:ce:90:b2:c7:6d:13:e7:74:5a:e6:47:76:04:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: Mar 26 07:01:34 2026 GMT
            Not After : Mar 27 07:01:34 2026 GMT
        Subject: CN=4583c4eb2a06ebd1b2b22e985dfb2ad6a160eccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:5f:9c:36:f8:e4:2b:79:ff:64:6f:ff:bf:
                    98:0a:b0:af:2f:48:ac:6f:93:2d:6b:c2:75:63:9c:
                    3b:8b:44:e2:e6:d8:7a:23:3f:36:a1:98:de:21:44:
                    1d:48:03:59:ce:4d:52:56:c7:e8:69:38:09:34:80:
                    39:2e:7e:a6:b1:61:0e:5f:f4:95:fe:ae:dc:a6:2c:
                    f1:45:11:bf:ff:22:21:35:1b:f8:b7:35:c2:1b:d4:
                    d8:d2:1c:04:81:99:b2:bd:77:36:6e:81:10:b4:98:
                    cc:4b:2e:4a:eb:bf:94:57:f1:ed:e7:39:00:ee:c7:
                    17:fa:24:54:de:f8:e6:75:9c:54:b4:a9:0d:bd:a8:
                    f5:fd:3b:ad:22:78:45:96:21:cd:6e:90:91:bb:9a:
                    b6:72:fc:03:c0:30:da:34:7b:ff:38:4e:34:b9:c4:
                    22:49:ad:71:20:e0:d9:b4:f1:42:a7:84:87:c3:00:
                    ea:3a:52:e9:3f:9f:97:f5:d3:08:6f:af:2d:a0:58:
                    c2:e7:92:5f:79:25:26:93:a8:89:37:aa:34:ab:27:
                    ff:49:0a:d6:1d:6b:e5:94:54:45:75:47:14:9e:29:
                    80:62:58:68:75:75:6c:33:59:82:4b:55:e8:d8:2b:
                    48:f4:30:12:27:fe:79:0b:f5:07:cc:69:a3:e9:9f:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:C4:EB:2A:06:EB:D1:B2:B2:2E:98:5D:FB:2A:D6:A1:60:EC:CD
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:86:9b:62:e9:4e:cf:4e:6f:8f:f5:23:33:34:80:47:5d:
         73:f0:36:05:1f:fb:df:90:20:24:c7:67:47:6c:97:ac:6b:8f:
         7b:51:95:04:9a:56:ec:a1:30:85:ce:43:05:7c:67:13:22:31:
         40:e3:d8:f2:33:16:09:4b:61:99:4b:4e:2c:7d:84:57:91:45:
         44:74:ac:50:47:48:8b:b5:eb:d7:84:8c:f5:b3:93:c2:b2:fc:
         fd:36:b4:35:1b:6e:d9:48:89:cd:da:43:15:ee:eb:2e:96:06:
         42:74:fc:06:70:9b:3b:f2:d6:45:3c:3f:4e:a3:a4:09:0a:d7:
         be:e8:f6:c7:22:08:e8:28:e0:a4:d6:50:5a:66:0a:1d:36:09:
         12:b3:05:73:3e:0e:a9:36:46:c2:8c:2c:4f:37:66:c1:01:70:
         ed:f6:b8:a1:da:aa:ca:dc:be:7a:5f:ad:bb:1e:24:5b:87:9d:
         b6:d7:5a:3c:e8:25:61:18:c0:63:9f:82:c5:28:b1:89:c4:db:
         af:9c:06:c0:86:e3:13:fe:eb:86:2d:b2:13:70:d8:f5:46:08:
         f7:cc:24:ed:21:df:59:06:d8:b0:ff:f8:90:9d:06:20:56:b8:
         0b:85:dd:34:ea:b1:b5:aa:17:20:79:10:68:bf:0a:9c:f2:6e:
         9b:d0:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:12 2026 by rpki-client