Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File:                     6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier:          mqxcud93tkQKqngCGHr0IBcTpXIw3YIZEYIVY8cjoJk=
Subject key identifier:   6E:33:A1:CF:C6:84:06:A5:68:08:ED:32:4B:C7:37:AD:F0:14:6F:34
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer:       /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial:       01A0CFA3D96297542C124AEBB1EA40D94C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number:          155E
Signing time:             Wed 23 Sep 2026 19:00:16 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:16 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:16 +0000
Files and hashes:         1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: 5IA1YVrWJvjIefDAnlkU2E9F1AQAuuZeDqd/hrC6AHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a3:d9:62:97:54:2c:12:4a:eb:b1:ea:40:d9:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
        Validity
            Not Before: Sep 23 19:00:16 2026 GMT
            Not After : Sep 24 19:00:16 2026 GMT
        Subject: CN=6e33a1cfc68406a56808ed324bc737adf0146f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:11:3b:b7:78:66:f6:bd:32:6b:fe:5d:7b:
                    06:34:17:4f:95:b2:bb:39:54:0e:61:3b:8a:0f:cb:
                    c0:78:96:65:3b:8c:7b:d4:d3:a7:a0:75:1a:14:14:
                    04:c4:16:35:5f:68:60:f6:a6:4e:40:ae:b8:92:b4:
                    39:ab:2c:72:40:d6:1d:82:ec:17:18:c7:f3:1a:ec:
                    86:48:22:7c:ea:3e:06:7c:85:db:17:06:3f:56:36:
                    42:3d:5a:19:cc:1e:ca:c4:dc:4e:1f:27:93:c5:8a:
                    0b:6b:f3:fd:ee:7c:27:ac:0a:e0:cb:f4:5f:10:e2:
                    b4:25:82:e3:fc:7c:6a:8b:f1:1e:92:c6:e4:b2:56:
                    81:8e:de:f1:3d:f9:1e:85:76:ac:87:0e:a5:4b:7b:
                    6f:90:ad:e4:63:54:9b:15:be:84:dc:e8:aa:af:15:
                    a8:68:6a:0b:7a:18:c2:f4:b1:f3:88:44:80:42:91:
                    07:7d:ae:9d:05:e6:ab:c9:88:4c:0d:53:79:fd:7d:
                    a1:fb:22:c4:7a:b8:b1:89:3d:96:73:8a:ee:58:d1:
                    41:0c:e2:f7:78:1d:05:6e:35:3a:5b:2e:c8:a9:fe:
                    48:90:34:10:2b:85:f8:f5:a1:94:3a:27:6a:13:31:
                    a1:ed:dc:15:7d:8b:1e:f6:a3:07:c7:40:22:63:a1:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:33:A1:CF:C6:84:06:A5:68:08:ED:32:4B:C7:37:AD:F0:14:6F:34
            X509v3 Authority Key Identifier:
                keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:33:7f:2c:e1:46:d6:1a:f0:d3:09:8a:4c:5c:db:86:09:
         42:41:cb:1b:5b:32:23:c3:ca:c1:0d:a2:bb:78:a1:99:d7:97:
         97:7e:9d:41:84:a7:ef:a5:b4:a7:6c:84:ca:b0:38:89:3f:47:
         60:99:06:2f:80:8f:64:0e:65:ea:67:bc:8d:1a:8f:fd:ec:b3:
         97:78:84:8f:f5:c7:de:a8:0b:01:3a:b9:ef:ea:8f:21:87:65:
         5f:f3:8f:da:7e:62:89:2b:d4:2f:da:64:d1:0f:f9:fc:29:90:
         36:bf:2a:bb:a9:40:6c:65:62:02:b1:e8:4e:d2:69:8a:9c:f4:
         00:38:fc:f4:db:fb:11:3d:e8:13:e7:cd:83:62:de:dc:d1:9f:
         09:3b:9b:fd:4c:d0:82:55:df:d5:7b:19:10:3c:2c:4b:0f:4b:
         19:a0:fa:c0:2a:1e:60:42:8e:50:c0:b0:c1:4e:d6:26:47:22:
         96:eb:b8:52:09:2b:d5:94:13:37:fe:66:84:7a:8a:56:2c:6a:
         e4:9a:ab:b8:28:cf:e1:f8:78:6c:08:c4:70:1e:0d:e9:99:fc:
         c5:8c:aa:74:a3:10:43:79:0e:58:cc:7d:ed:c3:16:43:71:4d:
         5b:65:df:ac:c6:ad:8e:50:e6:84:90:64:ca:a9:b9:e8:59:60:
         4c:a0:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:47:55 2026 by rpki-client