Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft
File:                     6LhaxbiTYSA3SsE_-aPGJZO7su8.mft (raw, json)
Hash identifier:          8AyiQOAQ6r0aEkNiAC6sju40AHe6wHB114N757mHF40=
Subject key identifier:   7B:BD:52:95:26:5F:77:D4:4D:9D:03:A2:BB:31:27:62:F1:17:4D:74
Authority key identifier: E8:B8:5A:C5:B8:93:61:20:37:4A:C1:3F:F9:A3:C6:25:93:BB:B2:EF
Certificate issuer:       /CN=e8b85ac5b8936120374ac13ff9a3c62593bbb2ef
Certificate serial:       01A040BC1F448D3DE95E2B05D29ED20BE2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LhaxbiTYSA3SsE_-aPGJZO7su8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft
Manifest number:          0194
Signing time:             Thu 27 Aug 2026 01:01:05 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:05 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:05 +0000
Files and hashes:         1: 6LhaxbiTYSA3SsE_-aPGJZO7su8.crl (hash: rSmQLpE0OGyjENn7D+Td59+slJNjAT2CjpW/oEash8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LhaxbiTYSA3SsE_-aPGJZO7su8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:1f:44:8d:3d:e9:5e:2b:05:d2:9e:d2:0b:e2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b85ac5b8936120374ac13ff9a3c62593bbb2ef
        Validity
            Not Before: Aug 27 01:01:05 2026 GMT
            Not After : Aug 28 01:01:05 2026 GMT
        Subject: CN=7bbd5295265f77d44d9d03a2bb312762f1174d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:65:e3:48:bb:9d:fe:8e:fc:b8:9a:11:0e:
                    2d:78:36:fe:92:10:37:36:51:b8:de:16:ae:d2:da:
                    5b:89:86:e7:54:be:dd:5c:17:65:76:55:bf:ce:b2:
                    6e:b3:19:a6:fc:d6:79:0f:4c:d1:c0:f2:a9:d2:e4:
                    36:2b:07:86:c2:63:80:cc:f8:f2:ae:e2:e5:e4:bc:
                    39:60:42:4b:01:98:65:60:20:c2:7d:9f:e9:77:6f:
                    a0:f1:5e:37:59:80:22:74:93:8b:d5:8d:1b:e5:cb:
                    c2:ca:1a:3f:40:14:71:79:7a:a0:06:7c:7a:fa:d3:
                    a1:75:2c:a0:2b:87:bd:97:e7:6b:1d:d8:df:d5:dc:
                    64:e1:6f:66:55:04:05:ce:9b:00:4e:24:c9:4a:8f:
                    e9:97:20:0b:65:4c:5a:1c:81:f2:fd:90:07:7a:35:
                    f5:30:da:77:e1:0a:79:76:a3:ca:92:59:2c:64:9b:
                    6c:a9:3c:d6:4f:05:b6:43:07:48:c2:12:f1:9a:c1:
                    d8:82:ab:e0:1a:06:47:b1:57:12:89:6c:a7:68:de:
                    cd:a7:aa:9a:81:d8:92:1f:88:6b:bf:5a:38:6b:42:
                    e9:3e:6a:12:6e:75:8a:f3:d7:9a:80:50:ed:2f:68:
                    9e:9b:3b:c5:c1:ea:ab:ca:c4:22:88:f1:a9:ec:26:
                    16:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:52:95:26:5F:77:D4:4D:9D:03:A2:BB:31:27:62:F1:17:4D:74
            X509v3 Authority Key Identifier:
                keyid:E8:B8:5A:C5:B8:93:61:20:37:4A:C1:3F:F9:A3:C6:25:93:BB:B2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LhaxbiTYSA3SsE_-aPGJZO7su8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:92:d7:00:86:25:ea:c6:da:1b:c0:59:8a:9c:ee:fc:67:
         48:4f:2a:c5:f1:65:21:e4:2f:75:3c:56:7b:03:9c:01:b9:18:
         c8:05:4f:43:d5:a3:10:90:92:19:cc:4b:b4:56:c9:72:e1:8b:
         5f:71:e4:37:d3:1d:85:3d:6a:c4:44:e1:36:50:88:23:f9:fb:
         1c:0e:4c:b5:39:7c:6d:25:82:2f:ce:05:df:d5:45:22:cc:e2:
         9b:2d:4a:fa:44:22:6a:92:76:25:91:c3:da:cb:38:09:a2:6d:
         f4:db:00:a9:d6:8c:71:bd:db:8b:f2:0a:f3:f0:d5:f6:45:33:
         d4:08:c7:ac:1c:b6:b7:0e:82:1f:0a:b8:98:01:61:b9:5e:0a:
         13:1e:40:d2:d0:ab:1e:3e:6c:74:30:b2:98:d2:cd:01:cf:0f:
         72:53:c7:1d:8c:e2:1e:03:51:4b:c6:39:dd:17:ac:51:13:1e:
         2e:ae:85:82:3b:fa:24:c4:97:15:0d:90:85:6c:a8:f1:1b:68:
         5a:8d:be:f0:29:a2:02:a0:44:5b:7a:8b:64:82:f4:4c:93:ca:
         39:6e:3c:9d:96:63:c1:6d:d0:23:e5:0a:0e:85:c9:94:a4:80:
         91:7a:90:6c:64:d0:76:fe:d4:d6:c4:39:57:9f:38:b6:dc:f2:
         8a:a5:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:16 2026 by rpki-client