Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          d1sjsLXbAmUBEDuqDf5F7XwwvXByMEy0Y8EBWTs5oi0=
Subject key identifier:   68:3F:80:AB:7F:C9:93:9C:6D:D0:CA:E3:0C:4F:C1:E2:5D:27:59:1B
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       019FA1167C9608B7F56DC3BC32D5D84F4671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          195D
Signing time:             Mon 27 Jul 2026 01:00:33 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:33 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:33 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: V+PdbYmECpb82TLVM5zhTpNXCC/ckLVIPH0ddnSD71o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:7c:96:08:b7:f5:6d:c3:bc:32:d5:d8:4f:46:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Jul 27 01:00:33 2026 GMT
            Not After : Jul 28 01:00:33 2026 GMT
        Subject: CN=683f80ab7fc9939c6dd0cae30c4fc1e25d27591b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:79:6e:fa:6c:7c:19:ae:34:19:ec:30:a7:
                    69:72:3e:0e:bd:90:ec:10:94:4c:75:4b:a9:d9:24:
                    a2:8c:40:dc:82:f3:f8:15:0c:c0:89:24:4b:99:5b:
                    2c:b2:3d:f1:92:b4:52:60:69:1e:32:40:5c:0e:8e:
                    70:6c:2e:ab:24:35:e7:30:98:3c:b1:72:a7:3b:06:
                    ee:fb:5d:e6:7c:8d:e8:ee:13:b8:39:ef:c5:be:d5:
                    78:de:1e:e7:01:5f:41:5d:b0:5b:a6:a9:05:ae:44:
                    ef:92:6c:3d:4c:0c:ac:fa:d7:e3:2b:2d:ec:f3:57:
                    f1:ed:92:e4:de:17:96:96:fb:b9:c6:b1:07:ee:57:
                    84:9a:c3:0f:83:16:c7:57:e1:a0:59:7c:e7:85:d1:
                    2d:50:5d:1b:e6:ef:35:13:09:d1:98:96:2a:0f:e9:
                    6f:0c:7a:44:4b:1c:c6:f0:4f:33:32:e7:d3:27:a9:
                    60:51:49:08:f3:23:0e:79:d9:78:30:27:6b:e2:db:
                    d1:9f:1a:9b:98:32:0a:04:66:85:e2:e5:45:df:86:
                    43:71:51:c1:ff:3e:f5:30:34:6b:23:18:cc:d9:b5:
                    5e:ec:17:91:76:ac:87:02:32:86:86:b9:76:af:43:
                    87:54:02:8e:f6:b0:a4:13:5c:f1:e8:d9:3f:20:00:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:80:AB:7F:C9:93:9C:6D:D0:CA:E3:0C:4F:C1:E2:5D:27:59:1B
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:0a:ef:f1:ca:15:83:fd:9f:6d:c2:75:54:f4:a9:30:3a:
         74:b2:bf:bf:90:08:e4:a2:c8:89:f5:3b:67:88:2f:41:8c:bb:
         e9:b6:7f:64:f5:46:36:29:28:d4:30:05:01:51:f9:d0:a7:57:
         d9:31:81:3e:8f:6a:3e:6a:7f:b0:fb:2c:46:92:83:32:13:ba:
         70:a2:68:15:45:6f:1a:79:ae:1b:8c:b5:03:1b:e3:e4:16:09:
         65:d0:8f:4c:6b:52:aa:99:84:8a:1a:e9:20:76:27:69:31:3f:
         e7:85:d5:d7:14:5c:29:9f:db:95:d2:4e:63:71:7c:5c:49:91:
         aa:2a:fe:f0:79:d6:76:1a:01:7f:32:28:f7:9a:1f:64:17:f2:
         63:85:f9:db:b8:5e:5d:a2:33:2f:40:1b:8b:02:d4:69:c8:08:
         fe:fe:89:8a:f7:1e:b9:6b:c9:6f:1d:08:10:11:1d:f0:24:83:
         14:ae:7d:40:f2:b2:d8:da:b3:2d:23:74:72:10:ba:c2:2f:08:
         b0:d7:43:32:bb:c1:ff:70:ea:07:1a:81:ff:95:2b:64:a7:f5:
         3d:75:1a:bc:4b:eb:49:50:42:b5:12:f3:83:57:e5:d8:55:ef:
         fa:4e:23:9e:46:c0:8c:6a:a7:ea:98:01:63:23:09:df:b0:89:
         0b:64:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:53 2026 by rpki-client