Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          DixfTsO88UI9Z36xa+oOTGHf1W9OO1+xCJyOQmyJBBQ=
Subject key identifier:   70:CE:79:33:23:8C:D3:C3:3A:CE:0F:89:DB:58:33:44:75:A2:08:95
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       01A0D538D2DE3AE65AC63BB5B816AE278E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          1683
Signing time:             Thu 24 Sep 2026 21:01:06 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:06 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:06 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: E/NgTKSDyo959Q3emDTvWnMTv6YT5mu1bubolL5egrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:d2:de:3a:e6:5a:c6:3b:b5:b8:16:ae:27:8e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Sep 24 21:01:06 2026 GMT
            Not After : Sep 25 21:01:06 2026 GMT
        Subject: CN=70ce7933238cd3c33ace0f89db58334475a20895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:e9:a5:38:4b:5a:44:f4:db:fc:d2:c8:59:
                    3e:79:1c:5f:84:51:e1:93:a2:cc:2d:bc:a8:8f:20:
                    84:48:2b:e1:5e:23:f9:63:e7:80:d5:40:ee:bf:4a:
                    69:e1:72:db:52:37:9f:7e:0e:b5:b2:e4:ad:7c:ea:
                    c7:09:c9:02:d5:65:02:7a:6b:4a:f5:9c:b8:8c:8f:
                    38:ea:9c:d7:eb:cd:e0:71:be:29:8e:ee:21:9e:d3:
                    d7:b4:30:e5:c2:a1:dc:08:5f:58:13:f4:e0:11:63:
                    3b:5e:9d:69:f5:95:27:c3:91:00:93:8e:e6:0e:9b:
                    7e:08:2f:79:01:94:1a:85:74:ab:76:e5:3c:ef:83:
                    78:1e:8f:3a:5c:50:51:fc:b1:aa:e0:52:45:0a:a4:
                    76:21:a5:d0:73:5f:38:4e:e8:5a:f0:00:fe:86:10:
                    ed:47:89:a6:87:df:2c:58:31:3a:33:89:c6:90:81:
                    e8:3c:a8:7d:1e:91:04:6a:02:9e:56:65:5c:cb:06:
                    a2:27:00:f2:7c:7f:15:6f:57:50:f2:11:72:7a:07:
                    61:b4:12:6e:69:5c:2d:7c:69:9f:ad:dd:c6:76:bd:
                    ba:28:9b:c2:65:fe:28:1a:92:3d:0b:51:21:7f:82:
                    41:55:fa:1d:c9:5f:48:49:1e:80:66:35:1a:ba:c4:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CE:79:33:23:8C:D3:C3:3A:CE:0F:89:DB:58:33:44:75:A2:08:95
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:fb:74:46:4c:e8:09:93:83:e0:29:25:d8:e4:cf:f3:bc:
         90:63:bb:fc:9e:c2:f1:88:67:27:23:fe:07:f5:a8:87:13:13:
         0d:33:05:ea:ba:fe:fe:47:c0:66:26:3a:47:39:b1:79:25:86:
         ba:5c:82:4d:3b:f6:40:5b:92:b5:c4:ca:57:3d:57:d3:0e:67:
         a9:6f:c9:bc:f4:bc:80:dc:6e:4b:2a:f8:c9:14:60:8e:5b:da:
         b3:98:75:67:85:9f:b6:b7:3e:3c:56:f7:b3:46:da:5e:ab:19:
         a8:4f:39:bc:95:ac:05:85:2e:16:79:13:d1:ba:7b:e6:e2:7c:
         ee:49:12:e1:4c:c2:f3:58:21:7c:c2:98:85:43:19:f9:32:8e:
         85:3c:ad:6e:98:b4:4d:7e:f6:8f:a8:c2:b1:1a:c6:fe:f8:0f:
         af:4e:f2:eb:dd:19:f7:20:09:fe:44:93:96:60:60:8f:30:b1:
         8a:3a:e0:c4:c1:b4:f0:66:2a:77:2d:f1:42:49:aa:ca:15:67:
         c1:7b:68:cb:10:ca:b1:0a:b1:da:48:26:3f:38:9b:9c:30:c5:
         94:5d:ff:91:2c:6d:0d:a7:c3:88:7e:40:61:77:68:15:c1:a7:
         de:22:b5:5f:19:20:43:62:97:0e:0c:4b:e3:49:90:1f:4b:57:
         42:3c:e0:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVONLeOuZaxju1uBauJ44BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGIzNWY1OTllZjFjMjZmMjQ5ODNmOTE1YTdlYWVjNjc5
N2M3ZmEwHhcNMjYwOTI0MjEwMTA2WhcNMjYwOTI1MjEwMTA2WjAzMTEwLwYDVQQD
Eyg3MGNlNzkzMzIzOGNkM2MzM2FjZTBmODlkYjU4MzM0NDc1YTIwODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6LppThLWkT02/zSyFk+eRxfhFHh
k6LMLbyojyCESCvhXiP5Y+eA1UDuv0pp4XLbUjeffg61suStfOrHCckC1WUCemtK
9Zy4jI846pzX683gcb4pju4hntPXtDDlwqHcCF9YE/TgEWM7Xp1p9ZUnw5EAk47m
Dpt+CC95AZQahXSrduU874N4Ho86XFBR/LGq4FJFCqR2IaXQc184Tuha8AD+hhDt
R4mmh98sWDE6M4nGkIHoPKh9HpEEagKeVmVcywaiJwDyfH8Vb1dQ8hFyegdhtBJu
aVwtfGmfrd3Gdr26KJvCZf4oGpI9C1Ehf4JBVfodyV9ISR6AZjUausSz2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDOeTMjjNPDOs4PidtYM0R1ogiVMB8GA1UdIwQY
MBaAFOiLNfWZ7xwm8kmD+RWn6uxnl8f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjIt
NzcwNTk1MzYzZTY1LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjItNzcwNTk1MzYzZTY1
LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrv7dEZM
6AmTg+ApJdjkz/O8kGO7/J7C8YhnJyP+B/WohxMTDTMF6rr+/kfAZiY6RzmxeSWG
ulyCTTv2QFuStcTKVz1X0w5nqW/JvPS8gNxuSyr4yRRgjlvas5h1Z4Wftrc+PFb3
s0baXqsZqE85vJWsBYUuFnkT0bp75uJ87kkS4UzC81ghfMKYhUMZ+TKOhTytbpi0
TX72j6jCsRrG/vgPr07y690Z9yAJ/kSTlmBgjzCxijrgxMG08GYqdy3xQkmqyhVn
wXtoyxDKsQqx2kgmPzibnDDFlF3/kSxtDafDiH5AYXdoFcGn3iK1XxkgQ2KXDgxL
40mQH0tXQjzgGw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:38 2026 by rpki-client