Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File:                     6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier:          XQWjxOGYknckn/bPkg3Ak3+zB+1L9TN95P6btfaqBYg=
Subject key identifier:   87:EC:C3:56:5A:1F:CB:67:BB:28:35:5C:13:39:71:5A:6A:71:B7:CD
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer:       /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial:       019F90915F68512E033A4B284E9B6D6C78D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number:          0DAE
Signing time:             Thu 23 Jul 2026 20:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:13 +0000
Files and hashes:         1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: RYVZ2U16BeH/tesS+Vb8ilbYJmVnMFsaZUAeKojkGUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:5f:68:51:2e:03:3a:4b:28:4e:9b:6d:6c:78:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
        Validity
            Not Before: Jul 23 20:01:13 2026 GMT
            Not After : Jul 24 20:01:13 2026 GMT
        Subject: CN=87ecc3565a1fcb67bb28355c1339715a6a71b7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:b4:62:87:e6:a9:b6:4f:a0:13:92:17:1d:
                    42:b0:9b:b2:e4:86:41:ed:97:23:fa:62:f2:e4:2e:
                    45:e2:36:98:ec:1b:33:47:bd:f2:1a:c8:89:61:f6:
                    4c:71:83:d9:c0:4e:1f:37:6f:3e:0b:fa:3a:3d:09:
                    65:b1:be:24:6e:a1:12:91:66:90:91:bc:0c:76:fd:
                    df:96:4d:db:b7:53:2a:70:30:a8:05:21:56:d7:31:
                    68:9e:0e:99:c4:57:59:8e:76:8e:80:b2:ed:cf:d5:
                    13:65:8f:44:7a:92:47:3c:c0:64:37:1e:d5:8f:a0:
                    03:90:b7:60:48:84:bb:38:1f:37:97:e6:b6:af:fc:
                    8e:8f:dc:24:99:69:0c:2b:a1:e2:54:75:79:f8:a3:
                    52:b2:3d:df:b5:00:d4:bb:4f:fe:99:f3:e7:32:41:
                    22:2e:82:fc:bf:23:6f:2c:21:a9:96:3a:2c:98:aa:
                    4d:aa:dc:24:d1:8c:82:a4:8c:57:53:68:de:40:93:
                    66:af:69:00:49:cb:e2:a4:bb:82:76:1d:e4:0f:45:
                    75:2e:3d:38:b3:de:73:1d:c0:e6:c4:5f:0e:25:16:
                    2a:18:f2:15:d1:50:e8:f5:68:03:de:f9:71:fc:f3:
                    32:f9:65:5a:e3:fe:aa:39:c2:75:f9:5d:03:92:dd:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:C3:56:5A:1F:CB:67:BB:28:35:5C:13:39:71:5A:6A:71:B7:CD
            X509v3 Authority Key Identifier:
                keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:01:b6:6b:e2:a3:eb:22:57:d5:a2:27:f8:43:be:ea:3d:73:
         f4:43:02:7e:52:cb:8f:8a:08:15:1b:e2:55:21:03:df:06:b4:
         fc:78:8f:d8:cb:f3:17:0e:b7:95:cb:bf:3b:e3:1c:4e:e8:e6:
         27:e9:b2:b0:54:d9:57:09:d1:b8:bc:44:a1:cf:47:67:18:0b:
         74:88:e7:9f:c4:4e:e6:95:ef:ce:dc:86:61:80:0f:6b:9c:8b:
         b5:e0:7b:84:99:1f:11:55:34:21:1b:f2:f3:83:0e:9f:38:b9:
         ea:46:9e:78:6d:97:f4:09:9e:d6:b0:a9:16:6b:57:13:9c:fe:
         89:c6:e0:c5:91:d9:fd:d3:a9:96:89:41:71:a6:df:57:1f:ec:
         f2:69:10:a9:63:ad:e1:06:dd:18:dd:78:7b:ee:7d:20:d8:15:
         3f:f0:37:43:de:8d:1d:09:09:41:4b:7c:03:e6:1c:09:1d:01:
         74:59:9f:5b:39:56:ed:3e:77:e2:9d:08:35:54:f1:1a:90:f5:
         a7:5c:38:1e:64:d1:70:ae:0c:5a:63:5f:86:13:fd:45:68:10:
         ee:99:ad:46:e6:24:8f:f6:7a:61:3e:59:8b:b6:c7:25:9c:36:
         8f:97:fe:74:81:eb:24:72:be:70:2e:7b:35:53:90:c1:7b:78:
         2c:cb:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:21 2026 by rpki-client