Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
File:                     6kHoOY_3zvtSIWNusighJuv-O3g.mft (raw, json)
Hash identifier:          HlQvsJEhLPZOYWVMF1eJ2okAVQ90bjNso0SpRMKEIMc=
Subject key identifier:   5B:34:28:4F:34:7C:95:E8:5B:EF:B3:62:BA:F0:02:8E:65:17:A0:1E
Authority key identifier: EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
Certificate issuer:       /CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Certificate serial:       01A001016415A90C9B94998884ED6B635224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
Manifest number:          064F
Signing time:             Fri 14 Aug 2026 16:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:03 +0000
Files and hashes:         1: 6kHoOY_3zvtSIWNusighJuv-O3g.crl (hash: KZLBJZhkRTVhHGpf0GBJO7Yv85piGgYGqITJ5z6E14M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:64:15:a9:0c:9b:94:99:88:84:ed:6b:63:52:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
        Validity
            Not Before: Aug 14 16:01:03 2026 GMT
            Not After : Aug 15 16:01:03 2026 GMT
        Subject: CN=5b34284f347c95e85befb362baf0028e6517a01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:77:ae:7e:18:dc:98:f6:8e:df:a3:92:ba:
                    c6:d0:2d:51:f6:b5:6c:74:23:42:97:67:92:71:8b:
                    e7:c4:5a:34:ad:26:7e:98:48:2f:7a:48:0c:15:7b:
                    cf:33:4f:cd:d4:34:16:b6:99:e8:9d:f0:ca:f1:71:
                    fa:8a:31:80:77:8e:04:54:98:44:e4:99:55:e6:69:
                    a9:95:7c:85:c5:19:02:07:50:09:49:37:d1:0e:52:
                    35:89:43:43:29:6d:55:a8:41:ac:c8:8b:86:05:f3:
                    21:e4:a7:b3:70:b3:55:91:cd:43:d3:44:08:dc:84:
                    df:33:18:67:10:47:37:49:70:60:97:f0:19:17:38:
                    86:a0:2f:6f:88:54:42:d4:07:f3:96:6e:8b:fa:bf:
                    be:04:96:96:78:5b:0a:1c:3c:6f:db:11:51:a9:a0:
                    02:30:82:55:94:4c:f7:68:49:52:05:11:a7:94:ad:
                    b1:7f:12:c1:62:42:ae:e8:61:cf:90:ac:71:6c:39:
                    ed:87:43:41:84:c8:72:fb:0c:bd:83:6f:40:11:12:
                    cd:b2:99:56:27:45:c8:e7:7e:57:4b:52:0f:27:53:
                    3e:a1:ef:a4:ee:62:7f:f6:d1:d0:76:08:8a:eb:cc:
                    f5:22:e6:33:19:9c:9f:82:b6:2c:9a:e2:1f:6c:11:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:34:28:4F:34:7C:95:E8:5B:EF:B3:62:BA:F0:02:8E:65:17:A0:1E
            X509v3 Authority Key Identifier:
                keyid:EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0c:3b:1c:4e:c4:dc:66:9e:70:c6:8c:96:cc:43:bb:51:02:
         9e:5e:57:f9:b7:07:60:53:39:4a:c1:50:05:f8:10:87:e4:1e:
         21:6d:27:44:19:d4:51:93:98:27:a1:6e:b1:fc:9d:a1:e1:32:
         20:66:97:8d:7a:67:70:01:1e:26:e8:d9:bb:4c:6e:7a:2f:87:
         8d:48:f0:3b:22:6b:e9:9f:dd:5f:73:52:fa:3c:28:45:8a:d7:
         a0:fe:42:8f:79:80:34:05:20:54:b4:3a:07:9e:3a:02:07:3d:
         f0:23:4a:7e:15:27:5c:f2:09:b2:f5:ac:51:de:18:21:01:6b:
         56:f0:ec:c0:41:4a:f8:c6:63:40:cd:41:ab:7b:71:0d:da:cf:
         60:81:59:12:c0:d8:cc:d3:85:50:04:59:0c:87:5e:ec:2b:c7:
         f8:0c:dc:38:7d:33:11:d5:b3:1c:b8:ac:7a:03:64:89:cc:02:
         f6:33:29:3d:9a:78:ed:82:ae:6c:e5:7a:db:44:96:91:a4:f2:
         15:5d:68:bf:cb:4d:cc:a9:fa:39:89:16:d2:5a:88:3f:ba:44:
         66:46:1f:b2:12:ec:16:22:b4:51:51:7d:5f:6f:0d:1b:b7:8e:
         58:fc:8f:f7:80:a9:97:48:06:69:fa:ea:8f:74:a5:72:fa:92:
         89:e8:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:58 2026 by rpki-client