Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          hRJhv12n2KcHeA6E576/Jvlc96dsZazA6x2Vf3Walrg=
Subject key identifier:   DE:06:3D:AC:20:E8:E2:21:8A:55:E9:40:B7:77:28:77:E8:8F:5E:5C
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       019F90FE713BC886A4400F4C9E18EF893B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          101D
Signing time:             Thu 23 Jul 2026 22:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:21 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: zgh4sSRwsMuUSQU6OsumefRALqe+GMMOhUYkgbAoJt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:71:3b:c8:86:a4:40:0f:4c:9e:18:ef:89:3b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Jul 23 22:00:21 2026 GMT
            Not After : Jul 24 22:00:21 2026 GMT
        Subject: CN=de063dac20e8e2218a55e940b7772877e88f5e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:db:1f:f1:66:e2:5c:97:36:d3:60:dd:45:
                    82:22:f6:f9:28:97:22:66:06:ae:78:f5:b6:6b:35:
                    1d:64:f1:53:3d:16:e6:30:90:25:62:69:ed:b1:80:
                    6f:72:04:ac:29:91:4f:95:a9:10:87:90:18:e6:d8:
                    fe:7b:69:d7:c9:10:75:aa:2b:8d:8c:82:c1:3c:01:
                    89:e6:b9:7e:d2:4c:c0:e7:73:27:09:bc:b4:67:2a:
                    a6:36:63:d9:33:f6:bf:41:bf:0f:74:50:24:7c:d0:
                    66:2e:b7:b9:4f:46:79:57:b3:11:6e:ac:27:b0:b0:
                    e7:a2:39:e3:5f:4d:01:6e:39:5d:cc:27:b4:97:d5:
                    ac:0e:71:7c:45:5a:9e:35:4f:89:49:ca:da:93:f4:
                    da:d2:c4:b7:0f:e0:62:19:fc:7d:d0:43:e1:ac:16:
                    f6:79:61:26:1c:22:fc:68:8e:71:50:77:9f:4d:92:
                    f1:7d:14:1e:85:c2:e8:83:ca:ec:83:f0:44:cc:9d:
                    81:86:b7:d7:bf:39:2c:dc:ef:4b:93:81:d8:fa:fa:
                    81:ed:d0:8f:b1:ef:50:75:cb:ff:b4:e3:0d:4f:ba:
                    dc:f5:61:28:b7:43:c8:ec:fd:0f:aa:00:fd:8a:87:
                    76:78:b3:95:d0:67:6c:41:76:d6:ce:0a:d4:eb:c2:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:06:3D:AC:20:E8:E2:21:8A:55:E9:40:B7:77:28:77:E8:8F:5E:5C
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:66:c6:f3:c8:41:71:cb:fa:81:9e:7c:c6:85:85:d1:12:93:
         78:64:fa:4f:81:90:76:50:c8:c8:55:70:64:e8:b2:75:f4:d8:
         63:b1:6f:81:42:f4:14:f7:a4:d5:26:af:97:84:03:74:a0:57:
         f5:dc:f8:16:9e:57:3a:15:7c:b7:27:8e:78:68:fc:5d:fa:e7:
         01:31:c3:f8:ef:e0:77:4d:83:76:8b:03:93:6b:aa:d3:51:80:
         da:86:ac:80:26:3b:7e:34:4f:6d:12:15:d4:90:52:ba:af:9e:
         54:38:ac:d1:b6:e9:3f:fc:24:ca:ab:dc:48:25:7c:30:a5:74:
         ba:25:d2:9e:25:38:9d:9d:70:d8:3b:da:cf:51:40:b9:f4:bc:
         22:f7:c2:f6:cf:b7:5d:5a:71:be:b4:d8:5b:3b:3a:5e:d2:3c:
         7e:78:7d:11:72:b7:e0:3d:d9:8d:52:8e:ce:88:c1:3d:4d:11:
         7a:ea:4a:6f:c5:a7:63:5b:0e:3c:99:59:06:36:6d:08:5f:02:
         5c:fe:b6:f1:ec:13:ba:c7:97:fc:82:94:7b:ac:29:8f:c0:52:
         71:79:f1:44:aa:94:e5:7a:40:84:22:da:ad:88:3a:25:2f:47:
         36:36:86:8a:21:c2:5d:9c:3c:b0:d7:9d:d7:66:2f:83:c3:f2:
         b5:d6:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:25 2026 by rpki-client