Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          J6CZhtzeejEXu1IA6zMsjP+a9wTTtQOoYfoZCQDBuzw=
Subject key identifier:   E0:9B:DA:C1:55:2B:9D:D9:BE:9F:2B:4B:F1:8B:77:78:D7:B8:F4:9A
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       01A0CDB661D10B41E83AAA51A25D09B79D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          114F
Signing time:             Wed 23 Sep 2026 10:01:16 +0000
Manifest this update:     Wed 23 Sep 2026 10:01:16 +0000
Manifest next update:     Thu 24 Sep 2026 10:01:16 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: RmsZ6uqBY8JnF2QVCG3j0/6kROJUMvqSIcvwLiTUB/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b6:61:d1:0b:41:e8:3a:aa:51:a2:5d:09:b7:9d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Sep 23 10:01:16 2026 GMT
            Not After : Sep 24 10:01:16 2026 GMT
        Subject: CN=e09bdac1552b9dd9be9f2b4bf18b7778d7b8f49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:9f:52:9f:93:0b:03:24:ad:e4:6f:75:5f:
                    80:6c:c1:d0:32:1c:23:66:b3:07:69:51:08:f7:c3:
                    e5:9a:79:36:3c:8c:e2:2f:ac:c1:93:d4:cd:b7:ac:
                    f3:37:83:c9:26:f6:87:6e:6e:73:bb:ab:4b:b6:9a:
                    ac:ec:da:54:8b:ee:52:ba:63:41:34:07:5f:b7:dc:
                    73:8f:96:d4:16:03:c1:70:9e:1f:a8:63:30:a3:37:
                    87:a3:0f:ec:4e:00:cd:79:13:6e:c4:0b:e4:7b:a6:
                    54:f4:ac:55:15:b9:86:ac:96:64:ee:b6:1c:e0:cb:
                    04:eb:5f:18:da:da:b6:c3:56:31:40:42:f0:7b:51:
                    33:4d:3f:99:cd:36:eb:3d:72:3c:43:7d:5c:19:2b:
                    01:6f:f1:df:06:ee:15:49:a7:d5:36:a3:ad:1d:49:
                    a4:07:66:2e:1a:c4:8a:4f:34:4f:c6:e8:31:2d:fd:
                    ab:be:87:4d:e4:75:aa:0e:a5:bf:68:78:54:a4:37:
                    35:b1:69:8a:fa:62:ae:a4:b9:0f:69:d5:fb:40:5b:
                    24:9e:7b:71:8d:22:7f:4e:bc:66:5d:87:ea:bf:de:
                    3c:b1:45:70:90:c9:ef:31:03:2c:03:f4:f8:58:49:
                    c8:16:48:33:5b:c5:a5:5a:90:ba:3e:ee:4d:c3:d7:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9B:DA:C1:55:2B:9D:D9:BE:9F:2B:4B:F1:8B:77:78:D7:B8:F4:9A
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:85:0a:10:56:96:2c:e1:75:af:04:ac:e6:55:1f:58:55:8b:
         d2:3e:ae:7a:1d:e5:74:80:e0:e9:10:b5:25:17:d2:65:cf:16:
         6c:24:2b:22:7c:6e:fb:f3:88:a0:f6:62:82:63:21:68:83:f9:
         a9:59:28:b6:e9:a4:0c:a2:5d:ac:9a:8e:62:bd:31:01:78:12:
         f6:a0:6c:05:57:c3:bc:f5:16:c0:75:31:a9:32:29:73:34:7b:
         af:4f:e4:1f:a8:a1:c7:35:7d:7c:f6:4d:ba:07:38:ae:4f:de:
         8f:c4:b5:48:ae:aa:ec:92:c2:22:26:54:8b:1e:a0:a6:85:80:
         90:93:ae:0f:95:44:09:9e:67:94:cf:04:85:39:dd:d3:c9:7f:
         94:35:18:5f:8a:b0:ec:29:dc:bd:3e:dc:cc:f2:71:f0:8e:a5:
         ad:7a:2b:67:b8:a5:e5:3c:84:68:bd:4f:f3:74:29:10:40:86:
         49:60:e5:5a:42:a3:f5:c3:c8:14:f5:8d:d9:41:fc:67:7e:17:
         8b:98:1a:f2:cb:ae:f0:02:ab:d9:45:b2:6d:6f:cd:c7:cf:0a:
         44:ee:c7:9d:07:e4:1b:14:1b:c0:4a:69:1a:26:a5:ec:2b:e1:
         8b:ae:ce:6c:90:de:93:4f:84:c7:9e:84:a2:5c:86:66:58:36:
         92:e9:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:40:23 2026 by rpki-client