Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File:                     6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier:          61DIwX/payySisX2f2QPXiV4Ri5yM6aXG2EbF2fAZ4c=
Subject key identifier:   47:1B:75:14:CC:BD:EF:28:BC:66:43:D1:B1:AE:C3:94:10:2E:05:D0
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer:       /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial:       019E295E1CBA74CEA7BF0A17C210744A3A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number:          019D
Signing time:             Fri 15 May 2026 02:01:34 +0000
Manifest this update:     Fri 15 May 2026 02:01:34 +0000
Manifest next update:     Sat 16 May 2026 02:01:34 +0000
Files and hashes:         1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: XS6JGzkAoscByZdwXkChUIvYU11TPNUsFRPQoJRgWYk=)
                          2: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (hash: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:1c:ba:74:ce:a7:bf:0a:17:c2:10:74:4a:3a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
        Validity
            Not Before: May 15 02:01:34 2026 GMT
            Not After : May 16 02:01:34 2026 GMT
        Subject: CN=471b7514ccbdef28bc6643d1b1aec394102e05d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:80:cb:28:b0:29:5b:09:d3:be:a3:18:a5:
                    fc:61:e6:37:6b:4f:cc:75:8e:bf:6f:53:b6:dc:6d:
                    7f:dd:f1:c1:0c:08:55:e9:f5:81:c2:21:88:1c:b7:
                    81:97:5e:e5:f3:41:9a:55:a8:b2:86:27:7d:66:d6:
                    ca:33:8b:6b:c5:1b:b5:0f:0f:f0:e4:4e:80:73:71:
                    4f:6a:00:c9:9b:26:a4:93:44:d9:8f:65:b6:16:b3:
                    d6:40:08:ba:c5:fb:33:7a:7f:60:8f:48:70:28:b8:
                    78:8f:27:94:b5:d3:c3:5f:83:fe:43:1e:48:aa:af:
                    0e:07:d9:fb:f5:83:cd:27:c1:1e:16:3a:a1:e5:cc:
                    28:16:a2:66:7f:9f:da:34:00:a3:f2:ad:65:64:2b:
                    6e:0e:39:03:96:9f:cd:52:43:21:94:4a:1c:9a:e5:
                    13:30:38:95:69:50:e3:25:62:68:5a:06:21:aa:66:
                    e6:b7:e9:e0:59:dc:c6:2c:e6:a0:86:41:a3:5f:71:
                    a6:42:3d:0b:85:2f:2e:39:b6:97:1d:5a:54:82:d1:
                    55:c9:1d:09:8f:ed:24:b6:eb:74:4e:0e:6f:29:7e:
                    e3:32:4c:35:4a:eb:2a:ba:ab:37:9f:8d:3d:f3:58:
                    34:93:cb:7d:d4:71:88:68:57:3e:46:00:77:a5:80:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:75:14:CC:BD:EF:28:BC:66:43:D1:B1:AE:C3:94:10:2E:05:D0
            X509v3 Authority Key Identifier:
                keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:60:ac:78:98:08:55:7b:7c:26:20:fa:6d:7d:03:90:4b:
         cd:3b:51:01:4a:bf:fe:fe:da:96:d5:e1:fb:c4:50:3e:ab:f3:
         3d:12:f5:f9:c9:b9:da:58:0a:4b:48:c5:aa:f1:fa:aa:e4:cf:
         ad:dc:fc:39:e4:6e:b8:4d:6f:ce:80:84:01:1b:59:c6:aa:45:
         41:49:b8:89:d3:ae:94:a8:e6:8b:ee:40:7b:6f:c7:28:1b:c1:
         78:cb:d6:6b:6a:97:6c:5b:d8:d3:46:5e:0e:89:b5:f4:f5:23:
         fd:60:7a:49:a1:e8:d8:45:7d:44:d1:2e:17:73:34:0d:96:32:
         a0:65:9f:25:e4:ca:b1:2c:f9:2c:54:78:62:d2:fa:22:c0:4d:
         61:cb:46:20:8c:d8:42:9f:1f:55:ed:34:17:68:12:a0:f1:62:
         68:64:a2:fe:0a:5a:c7:d7:2b:4c:d0:09:5d:fb:93:3f:58:9f:
         47:fc:6f:79:fd:7c:07:b2:da:e6:44:6b:00:65:f3:1a:f0:39:
         a8:50:80:d5:4b:1a:5f:1f:5f:5a:19:e3:c0:6f:16:86:d7:59:
         b8:b2:6f:5c:50:a4:eb:6f:4a:98:e2:aa:7a:fc:3c:dc:82:c0:
         85:78:1c:d6:8c:7c:bf:df:e2:d8:07:95:fe:0f:f9:c8:bd:c1:
         a8:11:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:16 2026 by rpki-client