Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File:                     leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier:          RB2ZX5Rjw32nOKSe4pPKdUfN/8/WW0M7uVy9MHgnr90=
Subject key identifier:   9A:21:B6:3B:44:0C:B9:59:97:71:4D:BD:62:1A:AC:91:39:E8:35:73
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer:       /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial:       019FA00440A6E2A9F740E9EAF1BBEF6C2685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number:          0825
Signing time:             Sun 26 Jul 2026 20:01:00 +0000
Manifest this update:     Sun 26 Jul 2026 20:01:00 +0000
Manifest next update:     Mon 27 Jul 2026 20:01:00 +0000
Files and hashes:         1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: waNAey4hYYDHhHb1aruEPyAJPahhXsuMsgqnwhR4za0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:04:40:a6:e2:a9:f7:40:e9:ea:f1:bb:ef:6c:26:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
        Validity
            Not Before: Jul 26 20:01:00 2026 GMT
            Not After : Jul 27 20:01:00 2026 GMT
        Subject: CN=9a21b63b440cb95997714dbd621aac9139e83573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:87:67:dc:00:e6:ed:b9:a6:50:e0:fc:bf:
                    80:94:54:78:4d:b7:93:af:00:9f:b6:c9:9b:53:05:
                    fb:4d:00:28:5c:df:10:4c:ee:aa:cc:c7:3c:55:52:
                    54:9d:ad:36:6c:01:f7:d7:9a:c6:1c:e6:9d:2c:b8:
                    83:d0:0c:50:42:b6:d6:f5:df:59:9c:2b:4b:6f:03:
                    49:e1:24:1a:b7:f5:36:0b:a3:9e:de:31:06:ac:8b:
                    cc:50:ea:c6:6f:0d:bc:b3:26:6d:2d:b5:43:ee:55:
                    2a:e3:30:5e:a2:c0:50:cc:81:c5:74:66:1e:74:4b:
                    1e:88:a9:88:9f:b1:c9:ba:b4:9a:3a:0d:55:42:54:
                    a6:65:f6:f3:0c:cb:22:09:5b:2b:b2:68:30:ec:fd:
                    fc:e7:29:01:1b:66:bf:d0:ba:d4:3d:1e:06:56:dd:
                    8c:30:da:b6:8d:18:d5:3f:67:da:71:0c:a6:8d:dd:
                    d7:0c:97:89:de:65:9d:bf:85:33:36:d3:c1:e5:82:
                    5f:99:1e:4e:24:29:ca:01:60:eb:d0:15:74:29:ed:
                    50:16:00:02:e2:02:7f:73:2d:9e:b3:97:55:00:d4:
                    27:7a:55:6b:78:86:de:74:db:1c:10:ca:b1:c9:16:
                    09:4e:88:1d:a5:90:ef:27:14:0a:8e:36:4d:82:3c:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:21:B6:3B:44:0C:B9:59:97:71:4D:BD:62:1A:AC:91:39:E8:35:73
            X509v3 Authority Key Identifier:
                keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:07:1c:fb:8d:65:14:00:ab:e1:dc:0b:d8:ec:c2:b6:76:
         bc:d9:06:f0:d9:17:c9:db:5b:ad:08:37:5c:c6:7d:bd:42:e1:
         99:d3:19:5c:40:89:51:e9:9b:53:a7:b6:bf:f7:60:66:d1:ee:
         d8:c8:bf:c5:1e:2d:eb:ad:02:18:38:93:6a:6e:42:53:09:f7:
         1f:f5:f4:d4:33:9f:b4:0a:9e:0b:1e:ce:10:e8:89:26:97:18:
         3f:2b:10:57:16:b6:5d:19:8c:f5:d1:f8:2b:d8:dd:12:7c:6b:
         ce:c8:7e:8b:58:51:a9:a3:3b:ba:7b:9e:d8:20:44:ff:bd:42:
         22:80:04:1f:c4:49:cb:74:c2:08:2c:c5:ea:4b:5a:2b:78:e8:
         f7:84:6c:3c:d1:80:76:49:81:c2:e1:a3:91:68:c5:67:57:38:
         90:77:c2:9b:46:7a:3e:56:b8:63:22:8d:d3:0a:70:09:80:68:
         47:99:c7:96:35:b9:26:0b:be:53:20:da:9c:8e:0b:0f:62:bc:
         db:88:bf:11:4b:86:3d:f1:ac:9f:ae:35:f7:ca:95:4d:6b:31:
         66:f7:77:bb:a8:70:66:67:dd:5f:eb:fb:4c:5c:32:c3:c2:4e:
         14:58:e9:d8:60:19:2f:ef:b5:ec:04:1f:f6:52:4d:43:11:00:
         9f:38:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:30 2026 by rpki-client