Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          M5PCuhSHGTt0V5Vv3Egc2aSIGGAGm7y8332uhV8MBtw=
Subject key identifier:   DA:23:FF:46:D1:49:9F:25:CB:A2:39:3D:02:18:37:19:C0:41:FB:60
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       01A0D5DDBEBBC5BACBD925068520095CA00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0E61
Signing time:             Fri 25 Sep 2026 00:01:14 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:14 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:14 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: 0xHWsY+huOKMMU0ou69O4UYzdZxOeYJMf+GdzXB0ojg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:dd:be:bb:c5:ba:cb:d9:25:06:85:20:09:5c:a0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Sep 25 00:01:14 2026 GMT
            Not After : Sep 26 00:01:14 2026 GMT
        Subject: CN=da23ff46d1499f25cba2393d02183719c041fb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:df:2b:9a:74:cb:16:c9:cd:ef:43:34:f7:
                    13:fc:ac:2b:22:e8:5d:c0:e8:44:ab:d6:01:bb:35:
                    0a:15:8b:ef:28:b4:24:d6:ec:e8:95:66:83:a5:84:
                    8f:00:77:a9:b7:fa:89:ab:37:37:73:a2:0d:47:b9:
                    d4:34:f9:5b:85:d6:18:3e:82:60:bf:3f:97:12:45:
                    43:1c:2e:83:fa:54:55:e6:13:cd:1d:9f:56:39:88:
                    1d:4f:25:e5:bb:44:0d:1a:61:41:43:2b:2a:f0:e5:
                    f8:fc:c4:48:d3:ba:23:f1:5a:02:d6:f6:66:1d:c5:
                    30:31:f9:dd:ae:a4:75:b4:a9:04:4e:f0:9d:a0:2a:
                    b7:74:19:24:93:c9:5c:c3:ae:5a:be:d7:8b:43:22:
                    44:9a:54:49:a3:8d:7a:3f:13:3b:2e:d6:a5:a8:27:
                    29:f4:70:63:76:12:5f:e7:74:2f:5d:b2:27:b2:e4:
                    5a:c5:5b:59:55:cd:5e:52:4c:90:f8:29:25:50:5f:
                    c1:72:05:a3:11:6d:3f:77:46:7e:ca:d1:62:55:c1:
                    8e:8e:a0:9e:e0:f9:ba:58:b0:3f:a0:9d:52:27:f2:
                    7a:45:66:ff:e4:a8:df:e3:6d:51:e2:eb:03:ca:2a:
                    ce:f6:66:6d:56:fe:8c:d0:b4:a4:15:02:98:f7:20:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:23:FF:46:D1:49:9F:25:CB:A2:39:3D:02:18:37:19:C0:41:FB:60
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e6:fa:36:fa:60:21:c5:3a:e7:10:ae:bc:bc:84:3a:24:89:
         69:b9:b8:85:0d:a9:23:25:40:1f:07:3c:cb:db:fe:bc:c9:8e:
         38:6f:92:3f:54:9e:a5:ec:b2:11:8d:74:ac:4f:1d:36:a4:70:
         ba:d9:b9:5d:10:c1:77:17:8d:bd:da:af:7a:df:fd:f8:38:12:
         0a:0b:39:bf:a4:c4:ed:77:85:26:12:d6:31:06:8b:3d:48:82:
         8f:ad:f8:60:65:5c:6c:87:f3:e9:87:b4:20:52:fc:63:f8:af:
         87:75:65:a5:1e:cd:02:e7:36:53:8d:c5:dd:e4:07:a7:84:23:
         b0:20:72:29:71:6d:26:05:56:b1:0c:5a:15:12:0b:47:e7:03:
         67:c2:01:d4:b5:00:bc:6e:27:e9:6c:cb:b1:e5:12:fa:d1:b9:
         d2:21:c9:dd:0a:68:87:92:d3:67:f9:c7:ac:d8:2b:56:a3:31:
         8d:92:40:ce:b6:ee:50:bf:90:c6:bf:68:0b:59:a3:86:e2:94:
         25:f9:0f:1b:b6:c0:67:af:37:5e:97:24:9d:3f:2a:61:96:ed:
         d7:42:1d:37:31:17:11:15:26:de:50:62:af:fe:4b:91:e4:4d:
         75:a4:38:25:d2:c4:fa:3b:d1:d1:b0:48:34:a1:dd:de:aa:22:
         43:d7:c1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:56:47 2026 by rpki-client