Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File:                     6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier:          IX1OhKaaelKP3nHhCb51m9ZBSa7DpiIwDo/xYCL6eQY=
Subject key identifier:   E5:27:57:18:F4:FB:88:27:3A:A8:44:18:6B:A5:91:BC:58:06:59:36
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer:       /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial:       019CAB6AD6FF02531D3984CF7FFE7D628063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number:          086D
Signing time:             Sun 01 Mar 2026 22:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:31 +0000
Files and hashes:         1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: HH+9/yaV2R77QNu0dj8B2lN6yDF1gHePt1/iSaNiX7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:d6:ff:02:53:1d:39:84:cf:7f:fe:7d:62:80:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
        Validity
            Not Before: Mar  1 22:00:31 2026 GMT
            Not After : Mar  2 22:00:31 2026 GMT
        Subject: CN=e5275718f4fb88273aa844186ba591bc58065936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:95:ed:1e:c4:5b:7e:50:4d:0b:00:c6:31:
                    c3:d1:08:7d:cc:b7:d4:14:51:b6:f3:8e:1a:c9:b7:
                    94:ee:1c:cb:40:3d:f3:39:f7:e6:e8:90:c4:37:2d:
                    97:a1:6d:c9:f4:ac:79:48:44:f6:73:5e:7c:4a:2d:
                    ef:c1:1c:20:df:13:dd:09:16:94:6a:5a:e7:cf:b4:
                    9f:5d:16:6e:01:06:8a:28:c3:fb:46:3d:59:95:ae:
                    83:6e:ed:ea:57:37:14:50:23:80:a4:9f:3b:83:18:
                    81:6b:1d:f8:f8:f7:1d:57:65:07:f0:44:c9:52:ba:
                    3a:50:40:bc:8f:4f:74:fa:75:de:04:a4:95:49:bd:
                    ec:0b:08:51:03:ff:20:5f:ad:9f:34:9b:74:a6:6b:
                    5d:45:e6:44:6b:0f:8f:c7:f5:3c:b6:a7:cb:d8:9b:
                    b8:ee:7a:d5:b5:9c:42:af:59:c4:eb:1a:02:e9:61:
                    22:fa:f0:ca:93:51:5e:25:bd:e1:a2:b9:3f:34:26:
                    27:1e:4f:8f:e6:cf:b8:1a:12:d7:db:76:0b:dd:1a:
                    b2:b9:ac:86:b7:96:28:57:3a:89:00:26:7a:86:b9:
                    8c:88:e8:32:ec:84:69:b3:eb:fb:26:f3:81:14:78:
                    f0:ee:f2:5b:61:f1:9f:e2:c8:77:72:24:c8:be:79:
                    95:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:27:57:18:F4:FB:88:27:3A:A8:44:18:6B:A5:91:BC:58:06:59:36
            X509v3 Authority Key Identifier:
                keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:01:de:b4:13:98:a8:fa:99:2b:e8:69:72:00:51:c6:92:21:
         4f:60:e8:93:31:ed:dd:0d:53:e3:de:cc:5a:05:32:2f:73:2b:
         08:d4:03:61:f4:be:8e:25:3b:b3:80:57:7c:27:53:75:a4:b5:
         18:f9:b0:db:65:ae:b0:5e:cd:29:23:fb:91:35:90:09:2e:ff:
         92:b0:a9:65:50:08:bb:58:33:a5:99:68:03:de:83:fd:24:9f:
         5c:d9:92:ab:d2:8e:cb:04:f4:3f:e9:ed:8b:ec:43:56:7e:84:
         44:04:6d:23:ad:3d:37:21:7d:23:5c:ff:3d:f6:80:43:97:d3:
         79:cf:e1:6c:8e:87:c1:bb:33:68:3c:bc:a5:98:ad:e3:13:e0:
         6e:dd:a9:06:e6:1f:42:cb:f8:78:03:73:5d:81:39:95:82:a0:
         17:55:1f:34:02:90:16:ca:11:96:c3:12:18:88:db:f9:f9:5c:
         ab:f9:c1:7f:ea:39:11:4e:8d:5d:04:77:1f:0d:fe:1c:c8:5d:
         66:b0:a5:7c:53:05:6d:fe:1d:b2:0d:bc:23:42:8c:d8:ca:78:
         ed:e0:fd:59:f7:00:d3:01:69:48:35:88:6f:e7:73:da:24:43:
         a4:c6:e6:72:76:11:fc:fb:0a:44:ee:c7:c3:76:f9:56:72:07:
         f1:79:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:06 2026 by rpki-client