Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File:                     B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier:          SQTu+gwy3IUlEgH5CcFDQJI3Cb3flLUOeFxPy9o8gCc=
Subject key identifier:   22:B6:0E:14:81:36:16:08:8E:B0:91:78:08:B2:2A:CA:68:F5:8F:70
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer:       /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial:       01A0D193193408AC7F1D3641F28D3040D32F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number:          1A69
Signing time:             Thu 24 Sep 2026 04:01:13 +0000
Manifest this update:     Thu 24 Sep 2026 04:01:13 +0000
Manifest next update:     Fri 25 Sep 2026 04:01:13 +0000
Files and hashes:         1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: ij+VKV6+hy81WF/uzdv1IIyrizFa+9RPQ2+gIMxyJU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:93:19:34:08:ac:7f:1d:36:41:f2:8d:30:40:d3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
        Validity
            Not Before: Sep 24 04:01:13 2026 GMT
            Not After : Sep 25 04:01:13 2026 GMT
        Subject: CN=22b60e14813616088eb0917808b22aca68f58f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:cf:f5:2c:00:ec:a0:ec:d7:ee:ca:56:1f:
                    2c:3b:4b:1a:c9:fc:0a:23:f2:91:ea:b0:71:b1:63:
                    e6:38:db:ae:e1:dd:47:a4:99:cc:32:cd:3f:df:d7:
                    c2:60:b3:c5:32:0e:55:9d:6f:46:59:85:1f:1e:27:
                    19:34:1e:23:14:57:02:9a:b4:bd:01:ea:a1:f6:55:
                    2e:92:6f:0b:de:c9:4d:5e:45:88:12:33:04:ac:5c:
                    9b:de:c2:8e:28:ef:a4:65:86:d3:b2:9a:02:cd:09:
                    6b:8b:a6:33:f6:70:a1:1f:07:78:16:87:c0:0a:a1:
                    9e:d2:42:08:fe:ee:31:05:62:59:5a:06:6d:a8:0e:
                    9a:84:c7:a5:d4:46:40:f0:cd:56:bd:7d:18:5d:a5:
                    dc:72:35:5e:f1:5e:07:6c:b4:27:da:91:6b:1c:11:
                    95:f1:07:e2:f8:52:f2:a3:39:1e:33:b0:15:b4:e8:
                    12:24:4a:e5:b4:8d:23:87:f9:2f:56:39:f1:9d:1c:
                    66:f9:df:20:90:0a:fe:76:40:00:2f:d4:71:dc:66:
                    f8:d8:10:7d:05:4c:59:ae:3c:01:52:62:f5:11:10:
                    ee:94:a7:bf:73:d4:c9:9d:6f:99:7b:3d:2c:c3:d9:
                    09:11:10:01:c9:74:09:ed:dd:03:c5:a0:7f:bc:65:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B6:0E:14:81:36:16:08:8E:B0:91:78:08:B2:2A:CA:68:F5:8F:70
            X509v3 Authority Key Identifier:
                keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:1f:ec:42:1a:84:6f:e5:1d:69:08:95:f4:bc:4a:47:68:
         a9:03:76:d7:16:b7:d5:89:6e:73:e0:f5:27:28:17:03:15:b4:
         48:4d:bc:22:b9:54:4a:c9:b0:93:96:50:4d:50:6c:86:ae:7d:
         d7:44:78:bb:5b:3c:90:a7:4c:5b:26:d5:f1:3d:94:0a:b8:26:
         68:82:df:98:0f:07:c7:fb:3c:c3:8f:cc:69:4a:38:1c:52:35:
         30:dd:6b:28:6f:3e:bb:4f:7e:3a:09:36:85:7f:0a:58:d3:37:
         c9:4c:e2:10:c1:1f:0f:94:2a:11:f9:f9:1e:9e:92:9e:00:62:
         20:e8:41:b5:5b:25:94:03:89:d5:4a:09:51:b8:e7:2d:72:c6:
         65:c3:b6:7d:1f:61:64:1b:b2:27:7b:8b:ff:60:fd:83:e4:e8:
         a8:07:f3:70:0b:a2:ac:61:c6:25:1a:83:e7:07:0e:9c:16:32:
         f2:44:cf:50:40:8c:56:e6:80:4a:11:66:86:9b:d1:43:e9:9e:
         74:d0:22:08:93:05:27:79:c3:83:96:9f:fa:2d:f4:47:94:b7:
         c2:b6:72:fb:23:63:e8:2d:30:5b:80:3f:27:f8:b2:e0:09:ae:
         df:a7:72:78:12:38:bf:2e:be:7e:2f:27:10:41:40:ec:ec:ea:
         bf:d1:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:36:43 2026 by rpki-client