Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          TXXKZkl3TmnBCmZfiZ6XYnHNuKIEtUHgRcEDz02V7mc=
Subject key identifier:   F7:80:14:69:33:3B:00:D6:25:A0:68:98:E0:1F:ED:9E:13:82:5F:1B
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       019D3A539EED6127A20328E47FD29F908A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          043C
Signing time:             Sun 29 Mar 2026 16:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 16:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 16:00:51 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: MCyornl/uSDJH97uNOJJ71DCpAs/9OrgC1m3Hz0aUtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:9e:ed:61:27:a2:03:28:e4:7f:d2:9f:90:8a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: Mar 29 16:00:51 2026 GMT
            Not After : Mar 30 16:00:51 2026 GMT
        Subject: CN=f7801469333b00d625a06898e01fed9e13825f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:ee:b2:ec:75:f6:e9:93:09:1b:96:40:41:
                    89:ab:a3:f5:f5:65:c1:8c:1d:9e:73:79:ce:e3:1d:
                    62:da:fb:9a:f2:d3:8f:c9:6b:c4:d4:a2:33:44:d8:
                    7c:0e:52:fe:3c:30:97:e4:9d:a3:75:44:ab:cd:5b:
                    ee:c1:d3:c2:98:9f:16:c5:48:42:43:23:91:ae:86:
                    d1:78:93:e8:d2:a7:0f:0e:09:01:23:7b:e9:3b:55:
                    a8:d9:57:03:01:d9:fe:0c:3a:22:d0:7b:94:e7:2e:
                    53:8f:85:32:bc:cf:43:f3:ea:21:24:2f:1c:99:e3:
                    0d:40:10:88:86:ce:2b:ba:66:c6:e0:e3:ca:28:4b:
                    44:f4:62:8b:2f:b6:a2:29:3f:fa:7e:4e:d7:1b:5c:
                    5f:9b:79:c6:47:07:06:7e:29:da:11:13:a4:57:9b:
                    ba:78:dc:8c:1d:db:ef:bf:23:69:66:4f:ae:ed:b8:
                    b8:ac:e1:4a:f0:46:cf:2b:32:29:f1:e3:c3:94:9d:
                    7d:70:8b:32:5e:ac:ee:d4:dc:e2:d1:48:8b:07:27:
                    aa:d9:1f:12:d6:f2:52:3c:55:34:c8:97:f3:a4:85:
                    92:e0:8d:e3:7c:51:02:7c:a1:46:3e:43:ea:b4:9d:
                    72:b3:8d:da:df:36:ed:4f:fd:2b:8c:62:01:0a:75:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:14:69:33:3B:00:D6:25:A0:68:98:E0:1F:ED:9E:13:82:5F:1B
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:aa:e4:51:a6:87:f3:6c:75:4f:4a:79:ee:37:9b:fa:8e:
         11:b9:2f:0b:3a:01:20:6c:8f:ab:50:cd:ff:fb:f3:fe:d5:12:
         f4:a9:a5:1d:37:51:34:5b:6c:85:31:6d:10:f1:fa:bd:81:e7:
         1a:52:92:e3:67:73:07:b8:be:bd:e2:3f:ce:a2:2b:ec:1b:be:
         9b:bd:8a:eb:24:fc:c8:57:44:5d:7f:a9:a4:11:1f:96:0d:a8:
         5e:f2:30:02:81:41:7c:76:7b:cd:b2:ff:03:b7:16:01:34:ea:
         d1:27:7e:f9:e6:08:2b:8f:e1:cd:7a:96:c0:c0:0a:67:b1:6c:
         a1:b0:cf:2e:7a:43:0a:d6:12:f7:d1:de:af:d3:f7:a4:48:bc:
         c4:93:78:7a:6c:c4:a7:15:95:22:c7:b3:4b:2c:d6:bd:fe:e2:
         30:8b:9e:b1:4b:ee:4a:17:50:f5:c8:01:4e:f4:7d:d7:cc:09:
         9d:b9:26:f6:8e:db:88:4a:9e:e7:85:19:8d:bb:83:eb:e7:a7:
         3b:28:89:f5:8d:62:1d:52:ca:f3:a4:ac:d3:69:2a:8c:0d:b8:
         b2:de:ed:bd:0e:3c:dd:54:9c:19:12:50:da:d6:78:07:5d:fe:
         f0:74:44:7b:29:e8:32:83:d1:c2:c7:b4:67:e4:1c:f4:43:da:
         7a:fb:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:53 2026 by rpki-client