Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          5BPote9V9iqFoC4KQsc/tfnCsC2jOAr7bXq6TY3feGY=
Subject key identifier:   10:41:F3:B0:2B:23:A7:4F:4A:AA:4B:DB:7E:E5:68:42:45:4A:DD:0B
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       019E2F964669F0BECCEA4B45A037488F7CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 07:00:37 +0000
Manifest this update:     Sat 16 May 2026 07:00:37 +0000
Manifest next update:     Sun 17 May 2026 07:00:37 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: /SwjPiJFTXK5O+g5vw+qVybwKUvtCzmGfMTM+G5lE1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:46:69:f0:be:cc:ea:4b:45:a0:37:48:8f:7c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: May 16 07:00:37 2026 GMT
            Not After : May 17 07:00:37 2026 GMT
        Subject: CN=1041f3b02b23a74f4aaa4bdb7ee56842454add0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:a6:31:e6:53:e7:e0:1f:e3:9b:f0:c1:bd:
                    c2:90:28:08:82:28:80:81:e0:98:99:88:d0:c2:de:
                    f1:3f:fb:98:f0:26:ef:ad:6a:21:8a:d4:db:9b:51:
                    02:c6:7c:7b:63:76:13:88:29:21:a5:53:3a:77:01:
                    81:ec:4b:e3:72:d1:87:5f:86:08:fa:7c:90:7d:57:
                    87:24:b6:b1:f8:c4:db:13:d0:eb:bd:36:f3:26:00:
                    37:f9:e1:ee:64:49:88:2f:84:1c:e7:08:67:71:78:
                    52:c4:33:bc:9d:ad:df:b9:f8:d8:29:eb:fb:78:2d:
                    4b:61:a6:a4:91:15:40:11:c3:30:d1:62:c6:44:d6:
                    29:bd:16:47:78:86:11:9c:1d:ec:7b:c0:5a:68:cc:
                    5c:e0:1d:ae:35:12:c6:a5:d7:85:9d:0c:75:b1:82:
                    9e:80:98:fd:0e:ba:ec:f9:09:fe:65:52:af:84:6c:
                    fc:65:67:38:c9:40:56:a7:e2:9f:0c:0f:52:c0:29:
                    0b:07:7d:a1:55:e7:60:ec:0e:31:aa:15:35:2d:0b:
                    a0:e2:97:2d:14:96:c9:6c:72:f4:0f:62:fd:e1:f5:
                    56:9c:30:0e:f7:19:f7:4b:50:7c:24:8b:f5:fc:11:
                    06:c4:76:1e:df:95:02:17:f5:13:fe:fd:cc:a1:db:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:F3:B0:2B:23:A7:4F:4A:AA:4B:DB:7E:E5:68:42:45:4A:DD:0B
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:54:30:91:8c:be:40:d7:69:65:57:e0:1b:20:49:51:ce:
         5a:8f:4c:cb:77:fd:a6:39:f4:30:4f:60:5c:e6:e3:92:b4:7b:
         c2:38:be:08:9d:3b:de:f9:53:c0:c0:69:de:4f:ca:9b:b2:28:
         81:f2:16:58:d5:3e:99:a3:aa:6f:97:75:71:4c:eb:92:9a:56:
         33:27:71:68:68:de:6e:49:63:a0:86:5f:73:fc:e8:08:62:35:
         93:fb:e4:68:fd:f7:30:3a:e3:41:73:1e:4e:f4:dd:7d:0e:80:
         44:e0:38:2c:e6:e1:f0:c7:0d:a2:24:6a:dc:80:ef:90:18:17:
         b8:25:f9:7d:e8:0a:b9:53:59:7b:4a:04:1e:78:d9:d9:01:79:
         e7:29:d9:5c:14:26:bb:aa:86:df:35:34:ee:d0:c5:f8:b8:8f:
         d7:73:3a:5f:ff:ab:4e:65:a1:5d:7e:8c:2f:2d:d9:43:23:c7:
         a7:a2:fa:6d:4b:8e:07:54:84:6a:d8:b4:94:42:76:c1:0f:4b:
         a1:16:11:14:ec:c6:f7:c7:b6:43:7c:37:6c:c7:e4:1c:64:82:
         28:66:6f:e4:cd:a7:65:7e:50:8b:92:1f:3b:4f:99:0e:e6:a2:
         d3:e7:1e:fe:48:8d:66:f8:e6:10:80:79:3f:fd:02:ac:b7:43:
         86:e0:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:58 2026 by rpki-client