Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File:                     6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier:          jNuno0/XziPssaQL1wgaXSp3xA3JVeCjS/7dULcgQDA=
Subject key identifier:   B0:68:0C:49:C2:1B:C6:94:4E:4B:92:C3:FF:63:ED:89:EE:C8:83:2A
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer:       /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial:       019F17F9B875AB9CEB4B9ADB7991B174C561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number:          183A
Signing time:             Tue 30 Jun 2026 10:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:09 +0000
Files and hashes:         1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: neKqfi+p/qH+ACikzkkN4BmmzdUcm223wkJ30rfrLbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:b8:75:ab:9c:eb:4b:9a:db:79:91:b1:74:c5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
        Validity
            Not Before: Jun 30 10:01:09 2026 GMT
            Not After : Jul  1 10:01:09 2026 GMT
        Subject: CN=b0680c49c21bc6944e4b92c3ff63ed89eec8832a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:66:62:ea:2f:36:43:ee:85:a3:98:b0:f5:
                    d7:38:a9:63:ff:70:2b:d4:05:07:a3:e1:1c:8a:2a:
                    63:f7:c5:15:51:7a:43:94:bb:f8:7a:d9:5c:7a:40:
                    d0:93:a6:15:82:48:2b:a5:2e:6c:33:13:bc:d0:91:
                    d1:41:ac:65:99:8b:c2:f5:da:7d:69:46:54:87:e0:
                    f4:bf:50:d3:0e:7d:3b:4e:56:92:d4:d1:dc:51:c9:
                    8b:8b:a1:89:88:0d:9a:b0:35:07:26:0b:82:54:6b:
                    94:75:5e:1d:fb:da:3a:f2:25:05:f2:87:52:c3:3a:
                    3e:6d:9a:1a:85:99:cf:65:2a:ce:bf:c6:c5:d7:d4:
                    8e:0f:81:48:fe:48:bf:91:57:9e:aa:bf:e1:f5:93:
                    06:6d:04:7d:7e:a8:ff:e4:a3:b5:5c:8c:b8:85:c3:
                    a5:fa:89:1d:80:5c:84:8f:fa:3d:45:d8:bf:0b:fa:
                    3c:4b:fb:fc:4a:fc:ba:93:5d:fb:41:e9:6b:9a:b5:
                    f6:eb:a8:7e:3d:c7:31:dd:12:f0:3d:ab:8b:e4:00:
                    18:02:23:ce:74:e2:57:68:02:2d:bd:8c:3e:5d:4d:
                    08:b6:ea:84:37:b2:3b:8a:ec:62:a0:9d:93:11:37:
                    32:0b:78:14:f5:7d:6a:59:c8:5a:0f:d9:5a:4a:51:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:68:0C:49:C2:1B:C6:94:4E:4B:92:C3:FF:63:ED:89:EE:C8:83:2A
            X509v3 Authority Key Identifier:
                keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:04:4d:5b:0b:2c:37:c7:9b:3c:67:e9:bc:b4:be:52:ec:80:
         17:5d:de:14:32:cb:b7:fe:de:b1:8a:b7:4e:72:09:69:43:bd:
         be:04:3c:1c:eb:ed:59:d7:1d:f5:bf:78:5b:a6:19:93:dc:ef:
         55:dd:1c:c3:83:db:d3:7f:ea:00:52:a3:9f:13:41:9b:cf:09:
         ef:8d:bd:27:c7:d9:6f:39:45:89:57:56:c5:c1:83:70:59:d5:
         ae:52:a2:ae:11:7f:67:d2:76:a0:fa:cd:20:63:18:8f:22:f9:
         ad:5c:27:f3:56:96:1b:a2:62:08:ee:94:3f:9e:4b:f7:58:0c:
         00:1f:bb:d9:c2:b3:87:f2:fd:f7:33:e3:dd:3e:d5:b4:6c:1c:
         7a:a6:3a:10:e3:77:d3:a4:a5:79:6b:7f:28:c1:37:70:0b:36:
         a9:80:ac:b9:ac:25:a2:2d:2b:d0:3c:24:91:1d:a7:99:e9:ad:
         db:7d:a3:26:3f:42:de:e0:e8:c2:7a:e5:8c:41:47:a8:b1:ee:
         27:7a:70:68:30:f1:68:a8:93:f6:2e:7a:6c:a7:5b:d2:72:cc:
         e3:87:f4:37:24:d7:39:28:1d:6a:b3:9e:8a:41:23:3c:f5:aa:
         84:fc:b5:30:31:cf:71:71:9e:d5:c5:a7:36:a6:16:08:ac:7d:
         2e:3c:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:38 2026 by rpki-client