Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File:                     6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier:          e+FoeyKCBZXtIgz6VtSrOK26LGkSv5WfaBCJuwAEcGU=
Subject key identifier:   C0:03:44:F7:49:64:2B:E5:A2:C7:B8:B6:DD:3A:C8:4A:5E:95:AC:76
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer:       /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial:       01A0CFA3DE59128715EC1EFC56485B83C194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number:          113C
Signing time:             Wed 23 Sep 2026 19:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:17 +0000
Files and hashes:         1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: GsFeQkIvS1e+gd0wV8TDUB7705harJ6C5ZaqyDgeZaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a3:de:59:12:87:15:ec:1e:fc:56:48:5b:83:c1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
        Validity
            Not Before: Sep 23 19:00:17 2026 GMT
            Not After : Sep 24 19:00:17 2026 GMT
        Subject: CN=c00344f749642be5a2c7b8b6dd3ac84a5e95ac76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:a6:34:91:bd:32:f8:27:ad:44:d7:81:1d:
                    c3:eb:77:34:96:89:8d:08:80:4c:86:04:07:3d:25:
                    7a:50:79:40:f7:5b:c4:90:1a:d9:86:38:29:39:eb:
                    b4:1e:c6:56:de:98:45:58:47:98:ed:c0:50:9c:95:
                    f7:7f:24:d4:ad:3b:ec:d2:10:b3:8a:92:11:e0:e7:
                    3e:85:fb:77:6f:b0:fb:09:b7:42:6d:11:20:9e:46:
                    3b:5c:9d:66:34:bb:9a:16:b0:ca:29:00:71:57:9e:
                    4c:7c:74:d5:a4:e7:24:1e:32:f2:db:9d:cd:33:96:
                    93:64:d6:f1:0d:7f:26:9a:78:3a:dd:79:d8:9b:6b:
                    59:b0:02:1a:77:c7:0b:83:7c:0b:a4:93:e4:80:7b:
                    8c:cc:10:e6:55:52:1e:75:16:ef:14:db:41:61:1d:
                    6f:b3:24:0c:10:4c:fe:e3:10:a1:38:fa:f9:56:05:
                    3f:32:5b:52:3d:59:64:db:3d:34:21:69:dd:63:97:
                    05:f7:b3:4c:22:16:f4:04:7c:4b:b1:e5:25:42:b1:
                    c0:86:9a:1c:5c:c8:47:9b:ab:9e:6f:b7:a5:27:4d:
                    71:6f:79:e7:9e:a3:d2:de:ec:47:0f:77:b2:dc:dd:
                    39:8c:c6:64:48:d8:fc:4f:e5:7c:76:65:c7:cb:f0:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:03:44:F7:49:64:2B:E5:A2:C7:B8:B6:DD:3A:C8:4A:5E:95:AC:76
            X509v3 Authority Key Identifier:
                keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:7e:ac:5a:d9:20:db:63:7a:21:6f:4e:4a:de:a8:05:da:
         07:c2:ac:d6:b0:4f:68:8f:7b:96:f3:1f:17:e5:d4:57:e2:f5:
         a7:ac:8e:91:0a:46:a9:c1:97:20:db:19:e0:39:49:60:9c:e9:
         2f:9d:8f:20:3d:7c:95:51:8a:92:56:62:e7:d5:f0:69:44:e4:
         f7:2d:db:e3:90:37:66:40:97:5d:68:f1:80:cf:83:d2:33:01:
         4e:5a:b4:42:b6:20:1f:da:d4:78:c0:c2:87:eb:b3:1b:53:14:
         9e:2d:88:ca:a1:8e:c5:6f:da:69:df:b6:dc:5a:a6:6f:bd:43:
         95:97:bc:ff:66:e2:f3:5b:50:2d:c1:7d:1d:b1:d0:78:9b:00:
         43:f0:cf:a2:f3:c6:14:68:20:38:dd:56:36:28:d9:a8:54:c3:
         7a:d9:fc:0e:ec:9d:97:64:e5:a3:b4:f6:ed:74:9d:3b:5b:ed:
         b9:ba:ed:94:87:ee:a5:37:00:23:f0:67:ca:ed:37:50:1b:12:
         90:02:0a:ed:58:eb:12:4c:95:f3:a6:63:3b:02:f9:67:1f:e5:
         49:30:39:16:cc:44:b1:01:91:53:a3:b3:99:4d:c1:6e:9f:d3:
         1b:7e:7b:55:ed:fb:3d:82:fc:66:76:8c:2b:e2:e8:91:eb:ca:
         71:28:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:40 2026 by rpki-client