Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          atGnd6EqqlCwMeIYY5rwIXEujUsLafExwFCX0josn5M=
Subject key identifier:   CE:81:78:48:3A:A1:53:87:41:0F:12:DF:05:E1:B1:99:B5:84:06:D1
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       01A1DA25849AEE896973FB68BD15654597DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          1940
Signing time:             Sat 14 Nov 2026 13:00:54 +0000
Manifest this update:     Sat 14 Nov 2026 13:00:54 +0000
Manifest next update:     Sun 15 Nov 2026 13:00:54 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: znYD4J4OnhCT/fwURG7nqXm9Snt4US4SqELQ7oWOVVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:25:84:9a:ee:89:69:73:fb:68:bd:15:65:45:97:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: Nov 14 13:00:54 2026 GMT
            Not After : Nov 15 13:00:54 2026 GMT
        Subject: CN=ce8178483aa15387410f12df05e1b199b58406d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:05:54:7b:c5:79:f1:65:56:2e:8c:80:01:
                    b0:f9:ec:ea:1e:7f:c9:e8:59:8e:0d:41:ec:fe:ef:
                    de:e0:e5:67:62:6e:c0:10:e2:39:48:03:fe:71:24:
                    ae:53:76:6e:71:b1:9c:d6:79:e4:6e:69:d5:8f:ad:
                    e0:ba:4f:4a:fb:9e:81:9d:80:02:fa:df:e1:62:d9:
                    bd:65:ae:52:33:0b:39:25:7e:4a:82:fd:53:9b:c5:
                    7d:7d:59:b6:73:6e:8f:3d:56:db:ef:90:58:7c:07:
                    24:da:54:28:27:7f:cc:53:3a:fc:5f:d5:95:5d:40:
                    f0:8a:b4:8e:9f:20:2c:5b:24:0f:c9:3a:b5:cd:06:
                    63:85:65:47:e7:62:74:3a:93:92:13:93:71:23:91:
                    08:bb:a2:0a:5b:15:40:91:25:f3:46:1c:7a:fd:43:
                    a9:50:10:37:a0:0a:a0:b9:df:83:ca:50:bc:95:a4:
                    2b:a0:a9:97:b6:bf:25:13:b4:f5:7e:04:5e:15:72:
                    6c:0c:63:97:2a:8e:95:01:71:39:f7:4e:15:45:64:
                    8a:bb:a1:ad:1c:4a:07:f8:7d:a1:f4:39:e9:44:59:
                    10:7f:86:51:3e:0c:b6:65:8c:99:4e:81:29:5a:4d:
                    41:4b:d6:cd:64:19:4a:d3:7e:92:7b:4d:8e:32:bb:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:78:48:3A:A1:53:87:41:0F:12:DF:05:E1:B1:99:B5:84:06:D1
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:d0:54:8e:3c:20:d0:24:04:53:69:38:41:f1:97:e0:2e:
         4d:a6:15:bd:3b:3c:c0:50:67:3b:46:5a:51:08:3a:1c:80:2b:
         9e:a0:6a:93:fb:e1:7a:fe:ba:0a:57:54:e6:31:ad:65:67:80:
         8a:91:ae:b9:1b:13:c9:1c:6c:45:88:df:a7:b6:7b:0e:37:c0:
         1f:26:bf:31:12:c8:51:44:d5:6a:42:b1:a6:0a:44:11:5c:4a:
         a3:97:23:5a:1b:6e:7a:48:5d:cd:72:48:a7:3f:78:db:8a:25:
         4d:73:cb:fc:fa:2e:58:5f:b9:4c:b9:44:f1:15:be:e6:07:e9:
         56:b5:19:da:c0:fa:16:b3:25:be:d9:97:b2:cd:17:bf:77:f5:
         21:bf:5a:d3:b4:d9:92:bc:e6:72:65:0e:61:12:f6:03:95:52:
         45:50:4d:84:98:ec:93:07:36:6f:f0:88:78:79:8d:da:41:d6:
         c2:92:cd:5c:b7:8d:05:ae:51:33:32:6d:3b:fd:74:f3:1d:46:
         72:17:a3:4c:ad:0d:fa:13:10:a7:16:82:72:df:0f:27:de:50:
         9e:53:13:48:86:f8:4b:5d:ee:98:c3:01:bb:e2:cd:ae:0e:e8:
         5d:ac:8b:1b:9f:68:c6:41:74:07:16:6f:6c:72:dc:6f:d7:0b:
         f7:b2:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:31 2026 by rpki-client