Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          rrlsMyO2fm7mSXw7FxM1wrn5MbpSWHgFufst0y0O+Kk=
Subject key identifier:   06:D8:B4:CB:6C:17:24:D5:04:5A:EE:C3:BE:AE:46:1D:90:67:E3:4D
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       01A0D011D8EEF4B3F5634ED02C99BC052906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          1148
Signing time:             Wed 23 Sep 2026 21:00:25 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:25 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:25 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: Hu8XhGqc0QxxckVaM/AXmu/vZGsvu+7tjoMm7Bjaef8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:d8:ee:f4:b3:f5:63:4e:d0:2c:99:bc:05:29:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Sep 23 21:00:25 2026 GMT
            Not After : Sep 24 21:00:25 2026 GMT
        Subject: CN=06d8b4cb6c1724d5045aeec3beae461d9067e34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:8e:1a:66:58:e5:92:d4:85:3f:2a:2d:7e:
                    ed:fa:56:cf:75:31:37:47:6d:cb:bc:f8:31:49:1b:
                    0d:c8:3c:fb:a1:ec:59:cf:63:0d:a8:4f:1c:46:94:
                    19:b6:cf:f7:0f:f4:c2:7c:bd:74:0a:1d:5d:1f:12:
                    d4:24:51:0c:8a:bf:c0:3b:14:d9:00:25:40:01:ba:
                    a0:91:59:33:66:2e:e8:e1:c0:0d:8c:cb:54:66:e5:
                    75:40:22:b5:13:27:5f:0e:a4:9e:0e:c8:f8:e4:e5:
                    8b:22:62:aa:b2:3d:4b:da:56:ee:d3:e9:96:35:ff:
                    60:b1:4e:70:cf:27:dc:6e:6a:3b:d6:4f:14:25:c7:
                    e4:0d:08:28:07:8a:a0:1e:c3:2e:b8:2a:4b:ba:4c:
                    3d:dd:61:9f:41:a5:5a:a9:cc:f1:43:52:5d:61:6e:
                    c1:ce:64:d7:7c:eb:2f:ac:c9:35:c4:69:c9:69:4e:
                    3f:ea:b9:5b:e4:60:c0:f3:b0:36:07:19:f4:d8:24:
                    52:c5:9e:a5:f0:32:0c:7f:9a:2d:92:4b:01:df:9f:
                    28:a5:3e:a1:b1:77:26:a1:0a:96:8d:c7:3b:1b:d1:
                    99:34:70:c1:bb:69:75:90:55:45:30:12:a2:47:63:
                    16:5e:72:f0:91:8b:88:bb:0a:b0:fe:6d:5f:7d:72:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D8:B4:CB:6C:17:24:D5:04:5A:EE:C3:BE:AE:46:1D:90:67:E3:4D
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1b:6b:a0:2a:b2:57:6b:6c:69:2d:65:a3:71:12:8c:41:5e:
         fd:bb:0b:a8:99:1b:6a:13:20:6c:f5:13:e6:91:0e:ba:2d:23:
         40:60:eb:3b:9b:21:1e:6d:b9:57:66:7d:29:45:f1:7f:4b:3c:
         28:af:f1:7d:70:7a:13:72:c5:b5:99:cc:09:f3:3d:06:72:77:
         8d:ee:40:b2:33:46:46:e6:a5:05:cd:c8:fe:d4:d4:5f:c9:c5:
         8c:22:d9:67:36:f3:d8:d4:d9:6a:bd:0c:21:8e:da:de:80:83:
         3a:90:d9:b4:80:51:25:6e:e8:1c:d9:5f:a2:c2:86:be:a7:2b:
         a3:05:48:f3:92:48:5d:8b:e5:2c:7d:cd:88:8d:21:5a:7e:ec:
         07:d2:66:c0:38:37:77:70:f5:43:5d:f4:09:d6:9c:0c:df:f6:
         3b:72:ee:58:3f:c4:53:77:79:55:e6:8e:74:8d:5c:cb:75:00:
         c2:f1:3c:cc:b2:28:42:89:1b:22:2e:a0:ed:ad:12:33:0a:e3:
         43:4d:97:18:41:1f:83:09:41:1f:41:9c:a0:e9:65:2b:e1:6e:
         37:02:8b:e3:fd:70:bc:0a:a7:99:fb:ec:97:2b:8a:a5:26:ef:
         0f:af:b9:6f:01:63:2e:a7:a5:f7:1a:05:fb:25:aa:d0:26:6e:
         8c:60:b1:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEdju9LP1Y07QLJm8BSkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZmI4ZDNiZWUxNTI1Mzc2M2IwNzZhYTMyZTJlMmJhNmY5
ZTA1YzMwHhcNMjYwOTIzMjEwMDI1WhcNMjYwOTI0MjEwMDI1WjAzMTEwLwYDVQQD
EygwNmQ4YjRjYjZjMTcyNGQ1MDQ1YWVlYzNiZWFlNDYxZDkwNjdlMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLaOGmZY5ZLUhT8qLX7t+lbPdTE3
R23LvPgxSRsNyDz7oexZz2MNqE8cRpQZts/3D/TCfL10Ch1dHxLUJFEMir/AOxTZ
ACVAAbqgkVkzZi7o4cANjMtUZuV1QCK1EydfDqSeDsj45OWLImKqsj1L2lbu0+mW
Nf9gsU5wzyfcbmo71k8UJcfkDQgoB4qgHsMuuCpLukw93WGfQaVaqczxQ1JdYW7B
zmTXfOsvrMk1xGnJaU4/6rlb5GDA87A2Bxn02CRSxZ6l8DIMf5otkksB358opT6h
sXcmoQqWjcc7G9GZNHDBu2l1kFVFMBKiR2MWXnLwkYuIuwqw/m1ffXLraQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbYtMtsFyTVBFruw76uRh2QZ+NNMB8GA1UdIwQY
MBaAFOv7jTvuFSU3Y7B2qjLi4rpvngXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl91Tk8tNFZKVGRqc0hhcU11TGl1bS1lQmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNzdkMDUtMzk0ZS00ZjNhLTlkYjEt
NDhiZWQzMDI5MWEwLzEvNl91Tk8tNFZKVGRqc0hhcU11TGl1bS1lQmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wNzdkMDUtMzk0ZS00ZjNhLTlkYjEtNDhiZWQzMDI5MWEw
LzEvNl91Tk8tNFZKVGRqc0hhcU11TGl1bS1lQmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphtroCqy
V2tsaS1lo3ESjEFe/bsLqJkbahMgbPUT5pEOui0jQGDrO5shHm25V2Z9KUXxf0s8
KK/xfXB6E3LFtZnMCfM9BnJ3je5AsjNGRualBc3I/tTUX8nFjCLZZzbz2NTZar0M
IY7a3oCDOpDZtIBRJW7oHNlfosKGvqcrowVI85JIXYvlLH3NiI0hWn7sB9JmwDg3
d3D1Q130CdacDN/2O3LuWD/EU3d5VeaOdI1cy3UAwvE8zLIoQokbIi6g7a0SMwrj
Q02XGEEfgwlBH0GcoOllK+FuNwKL4/1wvAqnmfvslyuKpSbvD6+5bwFjLqel9xoF
+yWq0CZujGCxTQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:50:49 2026 by rpki-client