Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          AVT61+Sf7j5A2sRS9bOPEXDL9eUk9+o203EKzWOVowc=
Subject key identifier:   69:A2:6E:D9:9D:88:2B:BA:14:75:B9:A1:A0:64:AE:C4:AB:08:83:B6
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       01A0CE241182138226D73618CACCFB606A9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          13E6
Signing time:             Wed 23 Sep 2026 12:01:05 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:05 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:05 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: eSJI8m4jfkIem2JcPY4jIospzKI9xxWYnDuJ9C3QUBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:11:82:13:82:26:d7:36:18:ca:cc:fb:60:6a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Sep 23 12:01:05 2026 GMT
            Not After : Sep 24 12:01:05 2026 GMT
        Subject: CN=69a26ed99d882bba1475b9a1a064aec4ab0883b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:f0:56:05:92:4d:5e:79:98:68:fe:11:ab:
                    01:b6:03:1c:2b:a6:b6:99:7f:45:03:83:f1:4f:dc:
                    1b:d5:58:e0:a1:3d:63:cc:c0:95:c3:bd:de:4f:59:
                    7e:75:81:18:79:01:7a:51:bd:38:fa:d3:72:cb:17:
                    d8:c6:ea:6c:fb:e0:29:24:1b:cf:02:b3:74:19:f9:
                    47:2f:03:4b:7b:73:05:d6:cd:e6:f3:54:40:2f:32:
                    55:03:fe:4b:84:c4:2d:7c:a8:fc:4e:2b:c6:2f:12:
                    de:cd:0b:8e:ee:44:65:2a:ab:21:c9:92:ee:3d:13:
                    34:57:db:74:78:cf:3d:f8:25:50:ad:ee:e1:6a:6a:
                    4e:35:d9:e5:64:0d:1f:35:1f:38:53:15:26:c6:ec:
                    b8:65:09:8d:cf:cc:8b:ed:6c:e9:b3:b2:8a:29:17:
                    fb:9b:bc:b0:a4:0e:ca:a8:6e:10:d2:da:b1:18:28:
                    69:17:0d:09:51:45:d7:75:27:87:9a:28:f5:08:09:
                    8b:4b:93:93:17:a6:f9:ed:87:cf:3d:7e:98:13:37:
                    c1:a9:c9:8f:6c:23:97:68:40:cf:6a:4c:ff:c5:13:
                    a1:ad:b8:be:9a:a0:eb:e6:f7:f6:29:ae:d8:17:c0:
                    cd:b2:c2:0c:14:29:b3:0a:a2:ff:0c:73:71:46:eb:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:6E:D9:9D:88:2B:BA:14:75:B9:A1:A0:64:AE:C4:AB:08:83:B6
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:df:24:46:42:ff:e1:e9:3d:10:d5:7e:fc:79:13:63:5c:36:
         05:dc:56:b1:97:14:b8:ef:89:19:ed:34:2f:6f:45:e0:5b:82:
         88:06:e9:29:7d:26:15:7c:9a:af:f7:84:f1:02:af:14:ec:eb:
         c1:08:df:5a:81:95:8c:c7:b2:db:19:92:10:a7:7e:18:b7:c7:
         9b:f0:65:cb:d2:84:26:49:a7:be:99:5d:fb:f5:7e:75:dc:04:
         f7:2c:00:5c:f4:80:9a:8f:b9:1a:09:c0:eb:4c:72:14:3e:d2:
         2f:b7:0e:a4:e4:b0:7b:1a:6f:f3:78:42:e3:3d:c1:66:b0:84:
         2e:76:17:d9:c1:89:b8:77:5f:bf:e4:3e:8f:9d:ec:00:d9:26:
         72:f7:55:a0:bc:e7:1b:a0:e8:33:e4:ba:0b:79:4c:86:3f:01:
         67:c4:dc:39:ed:74:e4:98:44:41:b4:d2:36:21:49:78:5e:5d:
         f6:09:b2:19:82:27:fa:7d:e8:1b:19:da:a4:b9:7f:bb:f3:ca:
         c4:25:9d:09:a3:a4:47:2a:ec:e8:28:f9:80:43:1c:50:01:62:
         d5:8b:dd:a0:7a:b6:d0:d0:b6:a9:67:99:4d:22:61:ad:bc:4f:
         32:95:65:b3:d7:2d:0b:30:e6:0b:fd:c4:fd:27:e1:f5:52:5b:
         0a:e1:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:00:49 2026 by rpki-client