Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File:                     6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier:          YO8D5AyyAGnuyVij3bv1VfKHwt8om/IxCRMI0fFi+rw=
Subject key identifier:   62:CA:99:F9:D5:A0:33:AE:4C:D0:96:B6:AD:3B:7F:DD:81:45:B6:2F
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer:       /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial:       019FA8D073B96BD17D90B298FCB0EC2E49F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number:          1885
Signing time:             Tue 28 Jul 2026 13:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:01 +0000
Files and hashes:         1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: +dVM5UjF1YKDzQ0GRX+M4HrvOeXfeCJqLZSJp/wySJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:73:b9:6b:d1:7d:90:b2:98:fc:b0:ec:2e:49:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
        Validity
            Not Before: Jul 28 13:01:01 2026 GMT
            Not After : Jul 29 13:01:01 2026 GMT
        Subject: CN=62ca99f9d5a033ae4cd096b6ad3b7fdd8145b62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:cf:d3:c4:f6:5f:d3:ae:84:ed:e1:64:83:
                    5d:bb:5f:d7:08:dc:fb:89:a5:f5:37:58:c7:48:63:
                    3c:de:73:19:c6:bb:3d:8c:0d:64:48:3c:c3:83:2b:
                    c9:10:e9:b2:bb:78:ce:1a:99:17:7d:cd:69:9b:09:
                    a2:73:10:4d:fe:bb:87:52:1a:5b:ab:92:f0:42:81:
                    a3:61:86:d1:db:0a:d4:78:d6:76:1f:99:2c:12:d9:
                    84:b5:d0:40:78:e4:3c:dc:69:a1:43:2d:de:f8:d1:
                    b9:81:93:e8:59:bd:01:8f:d1:8f:6b:b1:0f:48:bb:
                    78:3c:39:bc:c3:45:5e:43:fe:fb:01:b9:1d:55:8d:
                    45:72:8c:d2:24:9e:57:20:d3:4e:18:2c:27:d4:b6:
                    4d:d4:10:68:02:e6:d7:4e:4f:77:72:12:64:f4:6b:
                    53:8c:a8:35:26:6c:a6:ee:8d:7f:a6:88:cf:df:42:
                    59:0d:95:17:eb:0a:fe:14:2c:e8:fe:56:af:84:b3:
                    0d:1b:72:59:34:b2:f1:b2:a4:fa:bc:64:98:89:d1:
                    bf:ae:24:95:5b:75:6e:d0:c9:e4:e4:33:56:9e:f1:
                    b9:df:08:38:3b:32:e7:9d:75:2a:f0:55:24:60:6d:
                    e0:fc:fa:6f:70:03:41:f2:a9:3d:42:0a:6a:1d:0e:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:99:F9:D5:A0:33:AE:4C:D0:96:B6:AD:3B:7F:DD:81:45:B6:2F
            X509v3 Authority Key Identifier:
                keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:48:e8:1e:98:3b:6b:1c:ad:fb:dc:24:28:8d:28:d9:fe:09:
         ba:b2:63:78:e2:7b:ef:7c:48:ec:19:bd:69:da:17:d9:6e:44:
         6f:49:7a:9a:b4:68:69:c1:d4:38:41:e7:24:de:53:0f:3b:e6:
         83:25:31:af:75:80:8f:25:26:ce:80:ae:2d:8c:ea:7e:2b:5d:
         c9:08:04:ae:0a:c3:f0:e9:a9:ec:41:44:2a:b1:a7:f5:04:19:
         5d:69:7b:1d:4a:90:59:1b:55:a7:b1:cf:70:84:9d:b9:aa:88:
         e7:0f:5c:fa:b7:25:d0:32:f5:d0:fe:6b:ea:b2:3a:d2:37:93:
         1f:69:11:a7:30:c7:2b:bd:c2:ce:19:f4:c7:66:ee:ef:15:cc:
         e9:e8:c3:e3:ac:23:60:a4:40:20:86:6e:af:61:45:16:a2:18:
         0f:e1:4d:68:a7:8f:9b:d4:4b:52:81:1f:66:f5:c7:39:13:1f:
         7e:a4:0e:08:29:4f:79:10:78:b3:25:a3:fc:7c:9e:83:08:42:
         53:fa:c0:7e:2f:7d:35:74:f2:02:0d:4f:46:8d:17:06:fc:03:
         be:c7:8a:c0:01:09:77:ab:e6:5c:c2:9a:40:f7:53:e3:d1:f0:
         13:4f:71:e7:b7:78:95:59:53:60:44:9a:8f:96:8b:0e:75:94:
         f8:0a:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:07 2026 by rpki-client