Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File:                     6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier:          C36QUsTmgiS0nKavLJ4I1fROYgO4mZYi79ymjpBaHZ4=
Subject key identifier:   FE:32:D8:EE:1D:7B:5E:0B:38:14:36:ED:C9:A2:BA:D5:F4:65:9F:AF
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer:       /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial:       019F8F1108D7C84CDD65CAB9AC17C0005E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number:          1096
Signing time:             Thu 23 Jul 2026 13:01:25 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:25 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:25 +0000
Files and hashes:         1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: 9OQyu5XqiI04Rd7G/wOdHSp5bJDU0DJtKJD0XJDC3H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:11:08:d7:c8:4c:dd:65:ca:b9:ac:17:c0:00:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
        Validity
            Not Before: Jul 23 13:01:25 2026 GMT
            Not After : Jul 24 13:01:25 2026 GMT
        Subject: CN=fe32d8ee1d7b5e0b381436edc9a2bad5f4659faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:3c:bb:a3:82:cf:b5:57:5b:3e:58:17:44:
                    20:6f:42:79:c8:56:5e:93:2f:fd:3f:b3:0e:1b:61:
                    29:90:b6:63:f3:7c:d1:b9:e2:6c:a6:ed:57:c8:53:
                    e1:68:ef:c6:5e:34:2c:82:2b:b0:f0:c1:9b:04:63:
                    7f:b5:f2:17:de:4e:1f:b5:4f:ee:da:13:76:3d:33:
                    80:71:8c:e6:95:cd:39:08:b7:cd:57:7f:4e:08:5f:
                    40:70:ca:19:b2:53:a3:e8:4a:4f:bb:db:2a:86:fa:
                    91:2a:0a:49:4a:d7:de:fd:f0:99:59:82:13:b1:ac:
                    bc:cb:7c:e4:99:d2:c1:33:dd:47:ed:8a:7b:03:1b:
                    86:b1:47:70:13:c8:3d:8d:99:fe:2c:d8:1d:c9:38:
                    b3:ea:82:92:e7:3b:78:3a:46:e1:5c:d6:8b:bf:c4:
                    da:5a:7f:33:0a:5f:a1:e8:bc:2f:c8:d5:10:d0:f7:
                    f4:04:8a:ca:3d:ba:db:08:99:46:f5:d7:23:7b:cf:
                    f5:45:a0:a8:e3:41:4e:5a:c4:a3:30:e9:aa:c2:fc:
                    ee:f0:de:c9:32:ac:00:32:b4:b9:75:39:19:12:5e:
                    37:f8:e4:92:82:90:71:28:59:8a:7f:1c:60:71:f9:
                    c4:d2:35:9a:2e:75:94:d5:0f:fe:86:f4:ad:e1:27:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:32:D8:EE:1D:7B:5E:0B:38:14:36:ED:C9:A2:BA:D5:F4:65:9F:AF
            X509v3 Authority Key Identifier:
                keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fb:08:9b:b8:c5:db:cb:92:fe:65:2c:f9:76:4a:01:8f:92:
         e4:99:dd:d0:50:62:10:4d:29:5a:c1:0f:ee:41:43:9c:10:34:
         b3:14:4d:08:1a:5e:5d:04:fe:33:b0:96:a3:65:17:10:4b:19:
         81:fe:03:81:b7:d7:05:c8:85:a0:b9:eb:57:ae:9f:6f:68:0a:
         00:4c:2b:64:47:cc:ff:50:9b:77:ae:4c:a4:31:a2:9e:f7:46:
         9b:c1:7e:89:f8:8d:b3:cb:90:1b:f5:d8:19:a1:e0:a0:ec:df:
         37:f9:44:f0:d5:f1:91:27:c8:1e:8c:42:70:12:19:c9:3f:6a:
         42:4a:c7:c8:ed:e4:a4:19:1f:bd:5f:ce:2a:3b:3f:87:3f:1f:
         39:3a:0b:aa:1e:a2:f1:ae:43:db:e5:5c:aa:e2:70:26:c8:61:
         b3:8c:34:f9:2a:50:12:de:f4:10:cd:26:80:0e:57:3c:97:c5:
         fc:85:51:1a:d3:56:74:f4:2a:30:6c:34:d3:f9:b0:b5:cd:29:
         4b:d9:1c:b3:d2:30:7f:e4:d5:3b:d0:e2:8d:73:ed:23:b5:f9:
         50:6e:c7:be:80:47:19:ef:2e:1b:77:83:2a:19:82:34:01:c3:
         2f:53:ab:09:d9:d6:0d:92:08:51:43:10:cf:50:0b:53:1e:64:
         16:ff:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:15 2026 by rpki-client