Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File:                     6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier:          f173QlIqDrq0EsPrwqDeHnmv7eEECNRMqClPrG5iMsc=
Subject key identifier:   49:65:2B:4B:3B:BA:3C:45:00:EE:1C:83:72:9E:87:AB:11:3D:F7:9A
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer:       /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial:       01A0D3EF54E69146AA91FE14CCBF76D63CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number:          1A6A
Signing time:             Thu 24 Sep 2026 15:01:12 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:12 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:12 +0000
Files and hashes:         1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: uMHjLZwf15YYqR6/Nc+s4ZQ+h007HvvXShZKPpknd8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:54:e6:91:46:aa:91:fe:14:cc:bf:76:d6:3c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
        Validity
            Not Before: Sep 24 15:01:12 2026 GMT
            Not After : Sep 25 15:01:12 2026 GMT
        Subject: CN=49652b4b3bba3c4500ee1c83729e87ab113df79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:72:c0:69:bd:cb:87:fc:9f:cc:03:f8:e5:
                    82:4a:b3:5a:86:35:b4:ec:87:78:cd:fe:56:29:81:
                    ec:72:f2:d9:3a:c5:c3:0d:b9:2b:32:f2:fb:f5:40:
                    70:27:f9:fa:1e:06:13:b4:18:f4:f2:84:ea:d3:4d:
                    a2:e6:cd:54:88:0b:5e:17:55:42:aa:6c:01:7c:01:
                    9f:6e:b4:a2:17:46:25:a9:d2:bc:ee:58:dd:33:0e:
                    53:90:54:85:e6:58:59:fa:f2:c4:b4:2e:8a:95:ce:
                    6a:fd:37:1f:c0:59:7f:16:61:a6:1b:00:74:0a:dd:
                    71:e0:b4:13:b3:c3:d0:4b:df:d4:f1:11:60:4f:7e:
                    14:78:1c:15:cc:81:f1:71:70:ed:1e:74:92:40:ff:
                    79:59:2b:ce:76:2c:f6:04:17:2d:09:7d:58:42:7f:
                    bf:cd:c1:4e:ec:54:f5:1e:aa:aa:a8:d9:ab:13:59:
                    0c:11:0c:e2:a3:e1:40:c3:fc:37:bf:a7:00:ec:31:
                    36:c9:90:f4:19:3a:1a:bf:11:d7:ad:8f:8b:be:53:
                    f0:56:72:74:e3:e8:09:5f:65:c7:98:51:c4:1c:fb:
                    1b:b4:ed:93:99:47:ed:75:a9:ff:be:a8:da:1a:17:
                    3e:ea:7b:70:de:ca:86:9b:32:0a:e1:30:a7:cc:63:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:65:2B:4B:3B:BA:3C:45:00:EE:1C:83:72:9E:87:AB:11:3D:F7:9A
            X509v3 Authority Key Identifier:
                keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:34:8f:72:5a:b2:5b:ad:04:58:de:7f:c0:4a:df:26:a3:7d:
         ef:ea:d5:71:12:f5:d4:de:22:1d:b5:d4:81:c2:27:2b:f8:26:
         73:46:de:f5:9b:87:a8:15:ce:85:75:09:5a:cb:fe:9f:f9:c3:
         8d:69:9d:ad:d1:3f:37:28:66:98:a0:de:db:17:06:48:a6:b2:
         7a:c1:46:73:e2:67:6c:e5:ef:01:3f:b7:5b:33:1f:64:48:fa:
         46:e6:a0:9f:68:7a:45:ee:ef:c2:91:5e:71:ef:75:25:b2:69:
         81:0d:07:32:50:a5:62:a1:f8:4c:51:75:c5:3e:63:01:53:27:
         4c:d9:62:78:5c:b1:21:2e:e2:8c:90:8b:f9:50:4d:72:a8:b4:
         88:0a:0c:d2:d8:7d:90:15:b8:4d:7b:03:08:e2:df:a3:05:65:
         a6:f1:75:56:e4:3d:50:75:de:f0:d1:1b:c7:10:de:4c:0f:da:
         5f:1a:29:42:ff:f4:e7:92:04:59:aa:b2:4a:66:3a:53:2a:64:
         e8:05:79:d5:27:6c:ee:01:8b:60:34:88:f7:b2:aa:dd:22:d0:
         6a:04:f5:78:13:f2:26:c2:35:c3:51:1f:ee:85:30:7c:82:1f:
         5b:ae:cd:78:04:8b:4a:a5:b3:fc:1d:36:6f:b4:f0:46:a0:ca:
         13:6e:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:23:22 2026 by rpki-client