Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
File:                     189nO-jwMimh57bmFhbzl0ziL_4.mft (raw, json)
Hash identifier:          jSaE7sGzyjpbzl4IvCwSAEzIbXhSar5S9SlzihHajss=
Subject key identifier:   98:64:2A:60:9D:BF:16:EC:43:D6:48:1D:BB:E9:01:C8:BB:92:3B:41
Authority key identifier: D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
Certificate issuer:       /CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Certificate serial:       01A0404E7411E746FCCB77C60E8A283D68A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
Manifest number:          01C6
Signing time:             Wed 26 Aug 2026 23:01:18 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:18 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:18 +0000
Files and hashes:         1: 189nO-jwMimh57bmFhbzl0ziL_4.crl (hash: 3770GbMt1/NwQUpqu1Db4Uzp+CY8l9KkTbW7YEUwFQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:74:11:e7:46:fc:cb:77:c6:0e:8a:28:3d:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
        Validity
            Not Before: Aug 26 23:01:18 2026 GMT
            Not After : Aug 27 23:01:18 2026 GMT
        Subject: CN=98642a609dbf16ec43d6481dbbe901c8bb923b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:1b:0d:9f:1a:60:e4:b2:c8:cc:18:5f:51:
                    13:24:45:ba:29:71:75:09:af:20:c8:b2:3a:04:17:
                    10:fd:a3:aa:de:8a:31:16:cb:95:bc:26:49:5d:e3:
                    0a:42:c3:bb:12:7a:32:6a:5d:67:92:e5:ae:db:9f:
                    96:78:66:7c:3c:5b:97:b1:5f:e9:60:be:ae:54:b0:
                    1b:14:3b:91:93:a5:d3:5c:6a:e5:81:aa:a4:5f:68:
                    bf:08:7e:6a:a5:57:82:66:8d:84:93:f7:82:71:77:
                    8b:02:11:25:43:30:7b:f7:0f:2b:e2:3a:a2:8c:b0:
                    81:74:6d:32:bc:b2:3f:3b:c4:63:8c:b5:ee:0f:d4:
                    fe:46:c9:d5:74:a8:70:7f:e5:e0:20:db:98:6d:5a:
                    a6:64:53:7d:26:ae:a3:9a:af:09:13:ef:05:17:df:
                    e4:6f:57:ff:62:6e:ec:a1:f0:6e:f4:53:1d:7e:c2:
                    23:55:a4:e0:9e:35:08:87:ec:27:f6:f2:27:88:fe:
                    74:52:b5:71:21:0e:e9:d6:d8:db:4d:e3:f1:ed:6c:
                    ac:75:e9:91:8f:d6:95:98:87:a4:a7:6c:ba:19:6f:
                    93:d5:3d:e1:68:1b:f9:25:5e:ee:5f:a8:5e:69:68:
                    89:f8:a0:e2:4a:20:bb:d1:7c:26:a5:e6:19:7d:b2:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:64:2A:60:9D:BF:16:EC:43:D6:48:1D:BB:E9:01:C8:BB:92:3B:41
            X509v3 Authority Key Identifier:
                keyid:D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1f:79:e6:ad:be:6f:1d:65:c8:6c:cc:06:6e:75:25:0e:8c:
         a8:35:4e:54:c9:fd:d3:1e:ea:01:6d:06:46:63:9d:29:25:94:
         8e:0f:9d:da:e0:0f:8e:38:d8:a9:b5:da:81:f7:77:59:09:d0:
         11:f8:7b:76:b4:6a:9c:80:60:64:0e:7e:e5:14:e0:6b:bc:2b:
         fa:41:cc:ad:78:a9:0a:bc:b4:72:2c:76:d3:de:ae:eb:08:75:
         b5:c6:bf:d9:98:18:c8:12:ff:a5:33:72:59:19:9c:b6:c0:bc:
         e7:78:2a:d9:01:39:8b:ef:d9:35:ef:ae:c3:76:b5:13:62:21:
         be:36:0c:a0:b1:b6:9b:f1:78:fb:4b:7f:5c:9e:b8:fc:f4:86:
         85:fb:25:ad:9d:86:5d:d6:c5:23:18:4e:59:c6:fd:42:10:58:
         6a:76:cb:b3:cb:4c:cb:c1:50:24:da:69:45:87:64:47:50:ef:
         06:4e:64:09:62:37:a4:19:b2:09:32:e2:66:7a:8a:4a:d8:65:
         25:c2:d6:e1:ee:67:6f:cf:5f:de:05:f1:d1:8d:a3:65:40:2f:
         9c:1a:65:38:a4:99:9f:8c:a3:0e:7c:1b:fe:b5:f3:7c:b2:d7:
         e2:7a:ed:ed:84:89:1a:2c:35:be:08:35:29:7a:1a:7f:e5:e0:
         b0:74:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:26:00 2026 by rpki-client