Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          mhSZdMpTYPPE4SALOfrymQKdxNSZHqZvfpH0FV1zU94=
Subject key identifier:   F4:F1:17:24:D4:5D:BE:9E:5A:7E:63:F5:33:CF:9F:7F:3A:8D:CA:32
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       01A0D94D5E0C3467E9EB02E9A3294F395E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 16:02:01 +0000
Manifest this update:     Fri 25 Sep 2026 16:02:01 +0000
Manifest next update:     Sat 26 Sep 2026 16:02:01 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: XCjdwshwiFpZJhJSlAQVgIGajqxP2N51FiZ7jogKP5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:5e:0c:34:67:e9:eb:02:e9:a3:29:4f:39:5e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Sep 25 16:02:01 2026 GMT
            Not After : Sep 26 16:02:01 2026 GMT
        Subject: CN=f4f11724d45dbe9e5a7e63f533cf9f7f3a8dca32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:1c:85:34:cf:ce:c0:5a:9e:ae:e6:bb:8c:
                    ed:ba:e6:1f:a0:f3:0f:72:26:c8:95:e3:61:95:94:
                    ae:23:15:2c:ca:f6:ce:e4:94:ec:70:b8:5a:fb:e3:
                    af:b0:2c:da:e5:c6:bf:c9:52:5c:95:65:4c:73:22:
                    1b:0b:5c:1c:df:02:ab:cc:c0:8b:b6:bf:81:3d:ac:
                    71:5c:03:49:b3:cf:4f:7f:dc:f9:3c:ea:3b:e6:94:
                    da:f9:87:18:76:50:79:83:c0:b7:bd:3b:b2:0d:86:
                    c6:0c:a3:86:f4:93:03:fd:8e:9d:67:e3:ee:bf:6d:
                    37:cc:2d:7f:eb:ca:74:8c:52:ea:f5:9f:14:1d:72:
                    6f:b0:22:e8:d8:98:80:fa:f6:a9:c6:1b:e6:bc:bb:
                    fc:70:2b:a6:6c:b9:6c:72:11:f1:37:cc:1f:1a:c0:
                    b3:7e:24:38:65:c4:e6:62:23:30:42:b9:cd:bd:89:
                    d0:41:a6:f3:fa:44:0d:6c:81:98:a9:43:a5:09:8a:
                    d4:e5:d5:ae:4b:9e:54:f2:39:00:19:53:d0:c5:de:
                    14:16:5b:ae:5a:b3:4b:d3:3e:cf:cf:ba:61:22:f3:
                    07:f1:3a:66:2a:bf:d7:65:3f:a8:ef:6a:e5:5e:5f:
                    49:11:84:17:4a:55:0c:d9:d0:50:35:8f:e8:ea:cb:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:17:24:D4:5D:BE:9E:5A:7E:63:F5:33:CF:9F:7F:3A:8D:CA:32
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:39:77:c2:38:7f:f3:07:dc:67:97:4c:00:3f:3e:e9:f5:
         59:dd:e8:3b:2a:0a:ec:4d:b4:c2:f3:65:86:a0:c6:35:2a:95:
         ce:49:ba:90:78:bb:7c:ca:97:58:2a:48:be:76:b2:8c:9d:9b:
         89:c1:c9:7f:4a:17:0f:20:c6:f6:6c:0f:b2:7d:49:09:ef:d2:
         17:dc:17:88:9d:2f:cc:f5:8f:c4:d3:e7:e5:bc:ba:59:c7:ca:
         10:c0:92:88:a8:a6:a8:ac:11:8e:e5:ba:a7:c4:82:74:55:b1:
         72:41:f6:5e:ed:97:da:0f:be:df:56:24:63:fd:ea:4e:0f:54:
         9a:df:50:d6:56:0d:8d:c5:48:c6:4a:1d:4e:98:81:d3:51:5d:
         f3:49:1b:54:0a:2c:20:2f:9c:20:42:6a:0b:26:81:84:fb:06:
         ba:ad:9c:43:b6:3e:0f:80:c0:15:2b:f4:6c:90:2d:d5:42:a7:
         5c:a9:2f:63:c7:9c:24:01:48:ce:61:26:4a:70:ae:0c:e5:df:
         0e:76:40:c9:50:74:3e:1b:39:78:bb:15:32:3e:62:18:3e:51:
         5b:36:2b:a0:c5:d8:c4:0c:49:be:0a:4c:fa:8c:1c:55:c5:08:
         57:91:61:92:28:94:e1:d4:e8:b1:40:5e:20:a1:0f:cc:4c:3d:
         7a:5d:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:27:01 2026 by rpki-client