Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File:                     C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier:          Td8TkLEA/YPG+J9cLWPa22TteG+JMuZokitdY3dOhAw=
Subject key identifier:   AA:46:75:06:F1:E3:F5:F8:C0:A5:23:56:A1:E8:FD:45:4F:2F:9C:11
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer:       /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial:       01A0CB2233289B6DD55B6B364127C7E8EC60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number:          1148
Signing time:             Tue 22 Sep 2026 22:00:11 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:11 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:11 +0000
Files and hashes:         1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: tq5df2uLA+c1uxMlcpz4TKpUJ7K0GmCnrFu93k0WXDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:33:28:9b:6d:d5:5b:6b:36:41:27:c7:e8:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
        Validity
            Not Before: Sep 22 22:00:11 2026 GMT
            Not After : Sep 23 22:00:11 2026 GMT
        Subject: CN=aa467506f1e3f5f8c0a52356a1e8fd454f2f9c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:a9:b3:12:42:fe:fc:af:55:13:ad:aa:ce:
                    ea:bd:64:80:0c:8b:fb:2f:e2:63:b3:52:ae:4c:2c:
                    2d:e5:a7:c5:73:d1:cf:57:6c:58:16:5d:69:c1:36:
                    91:ee:d9:84:f3:32:0a:0f:69:44:47:72:42:f4:bc:
                    2e:38:cf:52:c1:97:40:fa:53:fe:a7:9c:c0:5f:6e:
                    b4:0b:a1:71:92:b4:4c:43:cb:4b:be:03:f6:27:8b:
                    97:2f:c1:ac:44:e2:5c:aa:eb:6d:78:1f:80:b8:8b:
                    94:82:b3:1a:cd:b8:77:2b:b0:0d:f4:2c:1d:1f:ff:
                    06:15:06:73:22:de:44:33:e9:99:e9:58:ab:ba:cc:
                    c0:ca:71:5d:bc:8c:8a:51:c2:69:6d:31:03:2f:9c:
                    be:58:e2:47:bf:3b:2a:98:61:62:14:69:cb:73:ae:
                    45:81:f7:d1:04:6b:e9:90:c3:20:42:0e:b7:cd:81:
                    af:94:78:88:ba:ff:58:9f:73:a4:38:8d:96:87:ef:
                    25:60:09:bd:06:b0:03:8a:12:92:22:34:2d:70:b0:
                    0d:65:b0:76:9e:f0:d9:a0:e3:9a:c0:a2:f7:48:d5:
                    6f:9c:9f:de:81:92:dd:ca:84:77:38:b8:72:17:ac:
                    33:8b:7c:25:69:3b:bd:ee:8d:19:65:e9:d0:f5:d6:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:46:75:06:F1:E3:F5:F8:C0:A5:23:56:A1:E8:FD:45:4F:2F:9C:11
            X509v3 Authority Key Identifier:
                keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:e6:2d:73:d2:d4:f8:6c:e7:b1:c4:a0:84:16:40:09:da:
         9e:a3:19:56:c5:82:d0:08:36:8b:93:c2:43:36:a8:e6:c7:97:
         e1:62:3a:19:5e:ca:3d:19:71:19:69:e8:03:4e:e8:62:7e:f2:
         7f:42:ad:7a:7f:1e:44:f8:a5:41:32:cf:1f:27:12:5c:b4:7f:
         41:2b:b0:95:dc:d3:36:05:8c:59:af:06:ff:95:59:3e:d6:d3:
         58:9d:a5:41:97:92:44:4e:fc:57:75:0b:6f:ce:d5:fd:1d:1e:
         8a:26:96:bf:6a:38:1f:92:26:79:39:0e:8c:13:9a:39:6c:44:
         7f:07:5f:b8:4d:6e:de:19:48:ac:df:40:21:84:dc:3c:8f:78:
         f9:d2:0c:7c:3f:b0:fc:a1:ba:69:74:a5:7c:d4:1e:e4:c8:00:
         2b:8a:13:22:e0:a7:6b:7b:88:98:13:55:d8:aa:92:c2:ed:a5:
         9d:b0:4f:16:95:1b:15:21:df:33:dc:1d:36:fe:a5:9f:d7:68:
         78:5f:f8:97:5a:44:ea:be:d6:cf:c6:35:5b:17:5b:08:f0:10:
         f9:30:9e:17:02:b1:9e:9f:28:1a:88:28:53:3e:56:19:03:16:
         df:e8:3b:3a:b9:40:64:e1:42:11:ed:48:59:44:1e:3a:b3:53:
         68:c3:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:10:34 2026 by rpki-client