Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          IIL6qqvCfZF7UTj2xtlIl4QAtlzzAZZfLG24kcts9rY=
Subject key identifier:   2D:69:81:84:60:0E:E3:9F:04:D5:94:CC:8B:50:A2:C7:4B:D8:AE:6B
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       019E1C46E89FDBA6D09E6A875FA9D46CED52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          04B1
Signing time:             Tue 12 May 2026 13:01:09 +0000
Manifest this update:     Tue 12 May 2026 13:01:09 +0000
Manifest next update:     Wed 13 May 2026 13:01:09 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: 33u3CCMji7uHxcknbtnZZgnZD2e9g2Rz0QwKNWi62Kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:e8:9f:db:a6:d0:9e:6a:87:5f:a9:d4:6c:ed:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: May 12 13:01:09 2026 GMT
            Not After : May 13 13:01:09 2026 GMT
        Subject: CN=2d698184600ee39f04d594cc8b50a2c74bd8ae6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:1e:86:d4:1f:b1:51:40:7b:74:7a:b3:7b:
                    7d:cd:46:f3:33:8f:22:ea:75:cf:28:c5:f6:90:7e:
                    eb:1a:bc:69:fc:17:8a:d7:07:85:89:a2:0b:ce:95:
                    b6:fe:78:87:f4:da:e7:bf:ce:de:a6:28:4e:a1:14:
                    9a:3a:0e:d2:97:d8:87:82:7c:2a:43:6b:24:65:3e:
                    96:7b:09:9f:70:ed:60:92:b3:6a:79:48:bb:70:1a:
                    87:95:cd:60:9e:56:5c:3f:1c:c6:97:59:7e:f6:86:
                    10:74:eb:39:6e:12:6b:e0:68:65:99:82:43:27:5e:
                    8e:b2:2f:42:6c:c7:a5:ae:51:14:9b:74:b8:cb:ed:
                    49:ed:d0:93:df:84:1f:31:4d:d6:27:5a:36:6e:a4:
                    fd:9a:eb:b4:ce:dd:88:44:a1:ca:a4:1e:20:8f:54:
                    d9:bd:89:25:ee:63:90:8e:6b:d5:df:e7:a6:27:76:
                    20:8a:95:4c:40:b8:56:e8:05:fa:15:0e:af:5b:c2:
                    6a:49:3f:af:93:7d:a2:fd:7f:a1:4b:97:56:c4:9d:
                    75:9a:ed:a9:c6:0a:93:01:8b:fc:39:e6:00:2d:48:
                    24:02:a9:98:12:4e:d8:89:87:43:7d:c7:9d:e8:e7:
                    54:60:b0:79:28:15:b9:dc:25:3f:2c:7b:f4:80:7a:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:69:81:84:60:0E:E3:9F:04:D5:94:CC:8B:50:A2:C7:4B:D8:AE:6B
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9a:fb:72:07:f9:ce:ba:64:59:d1:67:c4:38:6f:14:2b:89:
         88:c5:99:b8:c7:3b:f0:59:3e:1a:cd:20:9e:04:3e:57:47:7e:
         d2:f1:fe:71:8d:c8:48:4c:dc:2a:a4:82:6f:0b:86:0d:dd:ed:
         0b:a1:d6:77:a4:41:af:a1:a2:0b:dd:02:85:71:46:02:06:68:
         f6:3f:74:e5:c2:af:b3:7b:8a:30:57:a2:e9:3b:1b:d0:03:a9:
         f5:69:f5:b9:0b:2c:5b:a2:ce:a9:e8:22:22:19:cf:46:f5:07:
         dd:d1:99:67:eb:2a:de:1b:bb:4d:9f:6c:fc:bd:11:b2:31:8e:
         67:b3:d6:f5:13:27:0a:c5:a2:ca:21:7e:88:d1:2f:9d:15:ab:
         0a:f0:91:62:e8:f9:8f:2b:a2:d8:66:32:99:2b:6d:74:b7:1e:
         e2:ac:22:3e:cb:34:44:a6:ca:c1:1c:1e:2d:9a:65:f0:1e:08:
         aa:c8:f2:ef:1c:78:69:00:b0:1e:fa:a3:17:f4:ae:74:c1:d1:
         6e:fd:e7:4c:58:2c:01:c0:55:97:9e:43:34:9b:32:fc:df:12:
         b2:f0:8d:fb:dc:1b:18:a9:ad:aa:60:8a:da:07:2d:87:66:f5:
         77:70:d3:3b:f7:ed:8e:2a:58:58:28:05:c1:57:10:bf:3a:3f:
         c2:4e:af:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:07:40 2026 by rpki-client