Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File:                     6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier:          S926j52poS/lAw4xe2zWeqN+V35HvaLlMq4Ahbya1uI=
Subject key identifier:   04:D6:92:5D:46:AA:5E:13:FD:30:96:33:EA:C8:AE:3B:A5:A6:68:87
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer:       /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial:       01A1DE02E3CA31DE380EB0EE8E0AEA0A162D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number:          11C8
Signing time:             Sun 15 Nov 2026 07:01:33 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:33 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:33 +0000
Files and hashes:         1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: 27GNH/D0nzOavaYfXT02hSUaDFe8ahwts+cBzccGHHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:e3:ca:31:de:38:0e:b0:ee:8e:0a:ea:0a:16:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
        Validity
            Not Before: Nov 15 07:01:33 2026 GMT
            Not After : Nov 16 07:01:33 2026 GMT
        Subject: CN=04d6925d46aa5e13fd309633eac8ae3ba5a66887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:3a:eb:16:d9:45:bf:b5:55:ba:1f:38:d1:
                    39:b4:26:57:cf:57:a3:04:10:16:8d:4e:e3:1f:67:
                    cc:7d:aa:32:2a:d7:2c:80:0d:d4:8a:c7:29:6a:64:
                    47:60:fb:cc:34:50:87:76:29:79:48:95:05:67:88:
                    fd:f9:41:1f:0d:6a:33:80:b7:c3:63:c8:3f:06:48:
                    52:09:a5:81:05:d4:fb:ec:85:8c:52:cd:67:53:d0:
                    29:d5:a4:c8:19:8b:4b:41:d5:9d:03:1f:1e:a4:f1:
                    42:02:12:4e:46:cb:4b:79:c0:fc:e3:b6:74:d1:ac:
                    95:0c:2f:95:38:1f:e2:c2:a2:e4:15:47:e8:04:fb:
                    dd:a5:8a:4c:fc:c9:13:45:35:07:17:2e:03:8d:a0:
                    17:84:34:ba:c2:27:29:2d:e8:93:ce:b0:64:46:e7:
                    b7:0a:45:48:f5:dd:d3:bc:d0:00:1d:b8:56:b5:4e:
                    c0:04:bb:d0:cf:ec:ca:3b:f9:15:08:f3:16:5d:89:
                    d5:e1:e0:86:1a:ed:dd:00:31:e9:89:b5:1f:23:18:
                    65:ab:1e:8f:f2:11:26:61:42:fe:eb:b8:16:ab:fb:
                    6b:97:46:b3:f0:e2:aa:31:6b:2a:c6:d4:84:da:cf:
                    6c:88:c4:7b:69:38:e6:7e:17:ad:c8:df:38:fb:45:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D6:92:5D:46:AA:5E:13:FD:30:96:33:EA:C8:AE:3B:A5:A6:68:87
            X509v3 Authority Key Identifier:
                keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:72:5d:94:4e:cc:1a:0f:3a:8a:fb:85:1c:c5:67:22:8d:65:
         e1:cf:b1:e7:84:b4:34:ac:5c:13:c8:15:17:89:56:a7:67:72:
         86:f3:51:b6:47:d5:af:44:81:0b:d1:ad:5b:0c:a3:ac:f5:d0:
         82:8b:e0:34:23:1f:97:db:72:dc:34:f8:1c:89:47:c4:69:3e:
         cd:fa:97:55:af:d3:cb:04:2d:99:44:d8:59:c0:b3:88:48:96:
         3a:a3:ce:4c:d6:74:b8:26:f9:62:f1:95:bb:06:50:2a:ae:21:
         ec:89:44:94:2a:0c:b7:25:27:5f:d3:38:bc:ca:6a:77:89:59:
         c8:d7:ea:bc:8a:39:2a:78:b0:d9:14:1f:38:ba:e4:74:d4:85:
         f3:08:ff:37:0b:90:9f:17:57:ac:d4:d3:3f:75:3a:fb:bd:c0:
         3c:12:79:48:93:50:6d:0a:bf:98:b7:06:94:c5:2c:4a:ab:2a:
         67:d4:71:f5:39:e3:9e:4c:11:ee:e8:01:b0:b7:4d:e7:e9:04:
         ba:c7:8e:7e:22:5f:8e:8a:9f:2d:4d:7a:a3:31:a1:15:c5:6b:
         31:57:7b:91:77:2b:f4:96:a1:7f:8b:e3:01:b0:4c:e2:3f:5e:
         d1:a5:37:ab:3a:2e:5b:0e:9a:e3:c0:7a:b8:6e:fe:be:0c:32:
         83:da:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:06:06 2026 by rpki-client