Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          o6AWt3XyioDdtrXlL1Fbxc1wNm9Qnw0HAvHvkRtLAdg=
Subject key identifier:   71:36:EA:15:38:3A:A1:A0:72:9D:0D:8E:01:21:96:26:41:66:5B:DE
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       01A0CDB5A738667E8D51A50BEF9485E1FA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          07A4
Signing time:             Wed 23 Sep 2026 10:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:29 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: 7UBWzDJvK0W1fSnjrZvJy/1U9rJhMjc6NT4sWoUpMQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b5:a7:38:66:7e:8d:51:a5:0b:ef:94:85:e1:fa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Sep 23 10:00:29 2026 GMT
            Not After : Sep 24 10:00:29 2026 GMT
        Subject: CN=7136ea15383aa1a0729d0d8e0121962641665bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:41:05:2f:b4:56:04:55:e8:c5:2f:f2:01:
                    50:ab:0b:2e:9e:85:53:f4:23:1c:75:0f:fc:17:b5:
                    2a:af:02:45:a4:52:c1:2a:67:d8:07:18:3b:3e:c9:
                    61:81:ec:40:f0:41:66:16:5b:dd:83:af:ac:7b:cf:
                    81:17:9b:50:fc:de:e1:0e:88:f1:78:cb:09:3f:36:
                    86:6d:d2:2b:69:7d:4b:8e:b0:4e:92:14:1e:02:5f:
                    69:55:75:74:de:01:08:1d:8b:d5:19:2c:cc:b0:a1:
                    64:31:eb:ad:5a:16:98:1d:28:d6:66:63:d7:93:c5:
                    da:58:51:ab:e4:8a:c3:75:34:df:e2:ed:f1:ce:17:
                    4e:57:07:a2:ac:18:4f:9d:56:f7:48:67:e0:08:db:
                    4a:83:99:9a:3b:bc:da:ec:05:3c:cc:ed:50:e3:1e:
                    a7:ab:56:75:16:0d:39:26:37:80:59:12:c4:95:79:
                    1e:41:55:66:79:3e:32:5c:68:a6:14:e6:17:65:1b:
                    89:0e:7d:a7:a8:90:d0:c9:7c:f4:a8:33:35:62:ab:
                    71:50:66:ea:a2:b0:ab:59:e3:71:3e:a5:13:37:0d:
                    d0:58:ec:b0:9f:fd:77:2d:44:26:5c:b1:59:59:9c:
                    a9:80:bf:26:da:72:c0:99:e3:80:20:27:38:1f:56:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:36:EA:15:38:3A:A1:A0:72:9D:0D:8E:01:21:96:26:41:66:5B:DE
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:cd:40:fe:17:af:42:a9:bc:5f:2d:0a:57:07:45:5c:13:
         26:3a:c4:f3:77:d2:83:9e:d3:76:4b:74:f5:78:b4:c2:72:a6:
         a0:c4:bc:54:88:aa:70:58:7c:44:39:84:c0:23:e1:9c:2f:b6:
         13:df:1b:c7:b7:59:e3:cc:fb:58:a7:10:64:b6:84:a9:ff:97:
         d9:de:79:e1:db:3b:9b:17:e7:7a:0b:b0:9f:03:10:ff:54:b4:
         85:78:21:81:22:c3:8a:45:46:9f:cf:b7:31:45:d9:11:5d:dc:
         20:99:70:ab:0f:fd:57:4e:05:fe:fb:97:bf:5f:bf:b0:1f:56:
         0a:a6:c5:86:7b:cd:d7:65:f1:9c:2c:02:5f:6b:b8:b3:9f:d5:
         66:aa:b9:78:b6:c9:cb:ee:e5:c7:6b:82:75:df:b4:98:2b:96:
         3e:b4:cc:99:65:67:e8:27:b8:99:3c:31:17:be:79:2f:7b:65:
         c4:9a:2f:51:dc:7c:08:df:bf:b1:5a:26:1f:99:4a:c0:7b:87:
         52:bd:4e:47:b5:0e:84:f0:87:50:39:b2:3b:c0:4a:45:dd:eb:
         64:eb:ee:0a:30:d1:f8:13:c4:db:79:82:4f:41:8e:94:65:93:
         20:d4:8f:be:ff:82:74:04:88:e2:c8:c4:72:3b:d1:d7:20:df:
         e0:0a:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:21:17 2026 by rpki-client