Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          jJ/qdaCWVB1gWdOaa5VgmK7Od2YGG2S5UuBvxcDV47A=
Subject key identifier:   3E:78:C6:C6:27:98:5E:DB:AE:9E:2D:2E:E8:5A:05:44:5D:96:C9:2C
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       01A0D3832E776178CB3AD94F37CE75960CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          18B8
Signing time:             Thu 24 Sep 2026 13:03:04 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:04 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:04 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: YfLZyQWJC02Y20vHZOKLvOHnrvxjTadH1NAPsyj5CtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:2e:77:61:78:cb:3a:d9:4f:37:ce:75:96:0c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: Sep 24 13:03:04 2026 GMT
            Not After : Sep 25 13:03:04 2026 GMT
        Subject: CN=3e78c6c627985edbae9e2d2ee85a05445d96c92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:04:43:ac:d2:82:3b:ec:ad:93:f1:66:11:
                    3f:51:25:a4:e6:c5:ae:ed:02:c6:4c:25:1a:06:43:
                    26:5b:35:bf:65:e9:7b:d5:26:b1:24:03:4e:94:16:
                    53:8c:37:15:7c:14:f4:b6:d0:1c:fa:32:2c:88:4a:
                    9f:65:c0:ee:20:a8:17:31:8d:db:a5:bb:0a:ea:87:
                    4c:51:e4:43:1d:1e:66:78:c8:0e:80:30:51:d9:f7:
                    ec:f3:55:87:94:35:01:83:00:c4:e2:d1:77:43:53:
                    18:ef:fe:6d:0c:1a:bf:d5:91:b9:76:94:8b:d5:f1:
                    27:d9:2c:73:d3:53:fa:c3:8c:00:4b:5d:e3:a0:c1:
                    ee:1d:0d:6a:d4:44:2e:c9:33:45:e7:fe:25:29:56:
                    82:74:ff:8c:de:10:d0:fb:bd:dc:d2:95:e4:bd:99:
                    05:2e:74:a0:b3:a4:5c:fd:dd:bb:92:c3:54:59:fd:
                    57:b2:84:fd:fe:62:cf:ee:33:aa:a4:fd:8d:e2:d5:
                    a6:c7:65:4f:d2:c9:8f:a0:0a:10:c2:cd:fa:51:12:
                    5b:92:dd:37:76:c7:df:6b:a0:b9:68:4a:46:6c:f4:
                    42:34:4f:bf:a6:03:cc:7e:d9:d8:0e:43:32:7d:b2:
                    18:9f:56:d4:40:1b:fc:23:10:b8:ac:2b:8c:41:df:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:78:C6:C6:27:98:5E:DB:AE:9E:2D:2E:E8:5A:05:44:5D:96:C9:2C
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:20:0e:44:85:4a:c2:4f:84:b5:ac:63:8d:36:af:91:eb:3f:
         dd:6e:51:8e:5b:cb:d2:a6:1b:b9:74:9a:3a:db:c1:fc:4f:81:
         82:d7:bc:1e:4f:80:28:d2:4e:d9:71:0c:37:9e:f5:0e:0b:95:
         e4:4b:2e:c5:8f:af:50:f9:2d:5c:e4:5e:4b:d3:36:a9:56:5e:
         d7:be:3f:c8:09:a2:1c:cf:33:35:6a:b7:c5:f1:b5:9a:81:48:
         2f:33:d9:b5:a5:82:04:d0:3d:a8:79:7e:b1:bb:b7:68:d3:9c:
         7d:96:85:7d:af:86:3c:62:f4:22:91:1c:46:99:0b:63:4e:f4:
         8a:79:b4:a0:75:02:a4:63:c3:0c:6b:f3:de:1c:0f:80:53:a7:
         89:c6:07:17:5e:b3:cf:2c:e5:72:80:1e:82:4a:07:46:5d:48:
         cd:3c:8b:e0:31:8e:9e:d8:55:cb:71:f7:e3:7d:ee:f0:31:6f:
         ed:09:2f:2b:55:38:50:36:b5:6b:fc:8c:f6:df:ed:8b:04:1d:
         bb:c2:82:7c:1d:4a:b3:0a:3d:11:02:bd:69:0d:04:e4:3f:95:
         fb:a5:5a:bc:4d:f7:9f:54:0f:4f:bf:e4:f1:0b:4e:7d:25:b1:
         b1:48:af:cf:35:80:91:ba:46:ca:e1:7d:ee:ea:0b:8a:56:36:
         75:c6:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:39:12 2026 by rpki-client