Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File:                     6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier:          OqiZElOXr+ZZLRQ4mYW1YJyyCJCL3qiD58Ut0L+Dxk0=
Subject key identifier:   2D:86:B0:7F:4D:3A:CE:79:85:9A:B0:CE:06:97:F3:ED:06:01:C8:7D
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer:       /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial:       01A001701EB16F8B4BDECA9D0AC8E538B5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 18:02:00 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:00 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:00 +0000
Files and hashes:         1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: zwF/8UUc+7Y0+Y5oPFHeobC6fY/VaTxFaNAabagMHV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:1e:b1:6f:8b:4b:de:ca:9d:0a:c8:e5:38:b5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
        Validity
            Not Before: Aug 14 18:02:00 2026 GMT
            Not After : Aug 15 18:02:00 2026 GMT
        Subject: CN=2d86b07f4d3ace79859ab0ce0697f3ed0601c87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:31:f7:0b:9f:90:f3:c0:89:4f:a0:ef:9d:
                    a1:98:63:32:3e:07:d9:05:46:c7:b6:20:56:85:36:
                    13:54:f1:61:ca:fe:03:06:8f:9b:c8:f8:15:71:d4:
                    7e:06:5a:d7:69:4c:8c:04:24:46:2e:d8:39:a6:8e:
                    b8:03:4a:51:e1:ec:08:b7:6d:fe:b9:f7:1a:80:50:
                    46:aa:89:2a:54:6a:d6:12:48:00:01:ea:a3:c1:47:
                    ae:c5:be:97:77:3b:01:95:24:b2:c1:53:be:39:cd:
                    2a:cd:9e:ec:b3:83:8d:84:5f:ca:71:f6:92:00:56:
                    eb:41:eb:3c:c1:3c:94:fa:0b:6b:7c:bc:15:c1:f5:
                    c2:eb:e5:99:c1:3b:6e:e0:5a:f4:46:58:63:73:e1:
                    a6:c8:54:74:23:39:62:1d:56:ed:7f:66:7e:80:65:
                    32:3f:cf:53:d0:2b:8b:64:51:d1:72:7f:8d:49:0d:
                    2e:24:b2:88:7d:d8:ec:ef:eb:ae:2d:b0:da:7e:72:
                    32:85:5a:28:2d:22:bd:d9:62:ec:9b:b6:b5:73:e4:
                    a7:22:98:d7:25:50:37:b6:81:07:21:de:d4:04:35:
                    42:2e:bd:c0:91:6d:5a:cd:5a:ea:bf:72:9b:2c:3c:
                    9e:49:37:de:68:62:33:c4:fd:e9:73:d6:c7:9d:14:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:86:B0:7F:4D:3A:CE:79:85:9A:B0:CE:06:97:F3:ED:06:01:C8:7D
            X509v3 Authority Key Identifier:
                keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:c2:aa:3c:eb:ef:4d:29:d5:d8:c3:03:1c:e9:97:f1:38:
         f4:cd:50:80:49:98:00:1e:ef:ac:6c:d2:a7:57:3a:58:fa:9f:
         96:f8:80:ba:61:71:f8:50:55:17:90:7c:12:11:42:29:8e:01:
         a3:8e:81:e3:87:3d:42:dd:7c:84:32:bd:b6:f4:57:f2:c1:a8:
         22:35:02:a5:09:62:e0:93:8c:3f:c2:84:db:41:38:a4:fa:da:
         c6:87:91:01:59:dc:ed:ec:fd:5b:b6:b2:23:ec:44:bc:8a:97:
         e9:28:c2:35:cd:42:1f:ab:f5:8b:6a:2a:9e:ae:45:6c:ca:da:
         ce:60:8e:3f:32:06:b1:07:73:b8:45:f1:89:d1:79:7e:55:1d:
         45:85:58:62:33:a3:66:b4:e5:21:a2:00:4f:a4:fc:6e:5b:09:
         af:6d:a8:5b:11:f1:ff:43:6a:58:31:34:b0:8e:01:bf:95:e9:
         4a:b1:f7:1e:8d:e3:9d:84:1a:5c:a0:47:c2:b3:11:e1:7a:1d:
         78:30:c8:b7:23:08:08:76:6a:b2:0e:43:65:d4:61:53:32:38:
         d1:01:f5:c2:81:7b:77:89:f6:ec:ea:8a:d0:13:45:8c:75:e7:
         0b:09:85:75:e7:d6:d3:1b:5f:61:c3:cc:19:10:54:95:9c:54:
         74:11:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:05 2026 by rpki-client