Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          tA1xBobTo6I2wHwYbKsCF1tuhrg7/ceoJhvkyV5XP04=
Subject key identifier:   67:E1:79:B4:DC:14:5A:10:CA:A6:13:B0:29:5D:F0:52:00:F8:BE:2F
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       019F92ED125DF3EC0B033FED34A8019A7293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          0573
Signing time:             Fri 24 Jul 2026 07:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:37 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: SVrUxk6pgRW/b8Na07j7gfrPnkMex0fssIknLpxr0Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:12:5d:f3:ec:0b:03:3f:ed:34:a8:01:9a:72:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: Jul 24 07:00:37 2026 GMT
            Not After : Jul 25 07:00:37 2026 GMT
        Subject: CN=67e179b4dc145a10caa613b0295df05200f8be2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:52:31:0f:aa:5d:be:a7:88:fc:32:a7:88:
                    9a:00:00:0f:db:31:9a:df:54:a1:14:c4:4a:5c:d4:
                    bc:7c:d1:06:69:97:d6:6b:a6:05:3f:6f:ae:33:bb:
                    37:1c:59:ac:fb:c1:ec:b3:6a:ee:3e:ad:20:f9:48:
                    fd:8a:9a:1d:28:e8:6d:d6:30:91:94:d3:ea:9b:8f:
                    bd:22:14:aa:14:59:03:3c:c5:4e:f1:7c:be:30:00:
                    b5:e6:03:26:10:58:e0:79:b8:8f:77:3a:e5:17:ac:
                    b6:9b:fc:7d:f9:de:ee:74:b0:4d:32:fd:57:9f:73:
                    06:07:c3:ee:fe:71:05:df:33:52:6b:14:68:89:f7:
                    59:d2:63:0a:27:d6:1e:b6:6e:f0:a4:82:7f:74:a5:
                    27:f8:59:10:6f:55:5b:e6:fe:fe:39:31:4a:b3:3c:
                    04:3e:a7:64:9a:f1:79:2c:25:60:81:e0:d8:c2:79:
                    94:8a:e7:f9:75:65:7d:28:f4:16:5b:2f:90:eb:14:
                    f3:9b:4e:7d:e1:d3:e3:4f:77:36:12:5a:46:d8:56:
                    38:ca:8c:f9:b0:e1:f3:11:f7:50:27:32:72:49:f4:
                    b5:35:49:cf:61:77:cb:52:7e:17:12:17:f9:37:92:
                    99:1b:c1:d6:5e:24:4a:9e:fe:f2:5a:65:24:20:76:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E1:79:B4:DC:14:5A:10:CA:A6:13:B0:29:5D:F0:52:00:F8:BE:2F
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:cf:33:c3:2e:d8:8e:af:53:af:00:38:f3:5e:13:55:dd:
         9c:3b:b5:29:fe:82:e4:cf:5e:1e:8b:d3:a5:8c:15:4f:89:47:
         f7:38:43:4b:1c:fd:ad:fb:e6:1b:49:ce:1e:c8:ba:54:8f:f6:
         e6:79:13:b7:2e:92:0a:91:f3:6e:ee:34:c6:39:5d:e1:a4:28:
         0a:bb:6c:ea:6c:8f:66:25:ea:34:34:27:35:b1:2c:18:a7:43:
         5b:ca:73:af:1b:9e:73:ea:44:df:a3:7c:d4:f5:8d:0f:07:56:
         52:50:4a:c6:58:c2:67:0c:75:db:fd:0c:22:4a:06:b1:e6:32:
         d4:48:29:40:21:16:78:6e:26:34:15:3a:37:1d:e9:1d:51:d8:
         22:f6:0c:18:bf:55:98:c6:b4:d3:a2:ea:b4:04:ff:7f:d0:63:
         e3:67:e3:4a:49:16:ef:51:af:fd:af:17:76:38:42:9e:30:dc:
         dc:c5:85:d7:c2:cc:bb:28:a3:67:e3:84:7f:05:b6:e0:cf:4e:
         28:55:1a:30:ad:e5:22:a3:a3:86:2d:9c:a4:cc:2c:02:e3:fe:
         87:11:f8:2c:3a:83:04:38:ce:cb:b5:68:03:88:20:1c:ec:b5:
         4f:60:f4:3d:62:cf:83:07:2c:02:98:4d:dd:99:a9:f6:c4:01:
         07:7f:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:13 2026 by rpki-client