Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          7/6dSDokiz/4IVp4j6K9JOwJ8eOVgaVuYhW4ZjMXn0o=
Subject key identifier:   0C:FF:12:70:A8:2A:F4:B8:3B:1B:D1:9A:93:6D:CF:BB:7E:AF:9E:3C
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       019DCFAC5F1A9FBFFEFD888162D46AFE21F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          186C
Signing time:             Mon 27 Apr 2026 16:01:13 +0000
Manifest this update:     Mon 27 Apr 2026 16:01:13 +0000
Manifest next update:     Tue 28 Apr 2026 16:01:13 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: PMbnxwjbHiS2K2RMzfIqxf1c/WyRnpNpJcXyOFKoqYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:ac:5f:1a:9f:bf:fe:fd:88:81:62:d4:6a:fe:21:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Apr 27 16:01:13 2026 GMT
            Not After : Apr 28 16:01:13 2026 GMT
        Subject: CN=0cff1270a82af4b83b1bd19a936dcfbb7eaf9e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:dc:e8:9d:40:4a:1c:8f:13:e9:1d:8a:a0:
                    6b:96:b8:6f:fc:2f:8c:4a:b1:29:f1:2f:1b:54:5d:
                    e9:96:16:4d:24:1b:21:b9:45:94:1c:a2:d2:d7:88:
                    02:07:68:57:95:fa:95:9b:09:a9:76:53:09:95:da:
                    77:14:d0:40:3d:04:66:1f:7d:40:e7:b7:63:9c:11:
                    33:ac:19:60:d2:c5:57:b6:6a:e8:1e:83:05:29:fa:
                    bf:01:da:1f:75:c0:52:50:a9:79:fc:9d:6d:61:71:
                    4e:2e:34:29:f2:50:e6:c6:09:fb:a8:27:65:87:77:
                    44:1d:69:6c:06:d3:26:6e:fa:2e:10:f6:19:00:4e:
                    37:de:58:9a:59:af:e9:5a:36:7b:63:a9:e8:b1:fc:
                    30:6b:24:2c:6f:67:85:76:5e:8c:7d:87:e1:58:51:
                    19:e1:5a:4f:90:17:43:32:9d:8d:c5:3a:e6:a9:72:
                    3e:48:50:8d:f4:ac:80:93:2b:39:f5:bb:6c:a2:3f:
                    26:d3:9c:d2:1e:b5:76:fb:54:49:50:ab:05:1a:71:
                    fd:4c:4a:d8:de:0e:25:44:97:60:96:4e:8d:05:6d:
                    ac:ce:b1:e2:a3:34:01:eb:69:f5:dd:09:4a:3a:e5:
                    1d:b9:6a:88:69:cb:87:22:9b:79:a4:bb:48:82:b3:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:12:70:A8:2A:F4:B8:3B:1B:D1:9A:93:6D:CF:BB:7E:AF:9E:3C
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:91:57:6f:ef:bb:a9:a6:d3:f6:dd:05:30:be:69:d6:bd:6c:
         bb:50:6f:2c:05:fa:11:6f:2b:3e:b1:c3:f3:9e:6e:0c:90:86:
         f6:5e:06:02:13:53:22:31:ca:95:04:6f:bb:5e:cf:5e:0a:ba:
         e9:59:ae:12:88:fe:ed:da:4e:66:d2:0e:85:c5:29:a0:a1:0b:
         ae:58:81:fb:f8:f5:df:53:ed:66:b9:84:ad:d8:8c:7b:79:9e:
         9d:b3:96:0a:b9:9a:c3:e8:d0:5d:e4:c2:f3:9e:a4:e4:cc:4e:
         94:c8:00:4b:90:0e:9b:d2:18:1a:4f:82:5e:a0:d5:9d:d1:fa:
         3e:cf:3f:47:e6:e8:42:4b:b3:cd:d7:c2:8e:49:b1:b3:77:e4:
         1a:0d:1d:d9:0d:cb:57:de:0c:12:3d:0a:5d:38:81:1f:c0:6b:
         fe:34:45:20:9c:87:56:59:04:ae:78:04:70:32:be:d6:f3:8e:
         0d:fb:51:2d:35:bd:e2:f2:49:74:62:1d:f3:3b:06:8f:46:2d:
         05:da:14:27:b8:f8:48:d5:ab:38:0d:4b:f9:f7:8d:9e:94:70:
         48:64:a9:90:e0:55:23:fe:c1:ee:b1:ad:0a:08:3c:b0:73:2d:
         5f:ec:43:ce:da:55:99:ba:82:36:16:81:2f:e8:47:22:c4:91:
         22:50:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----