Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
File:                     6h-diwo3ikLxlEBBkUVJTlRgQMc.mft (raw, json)
Hash identifier:          kH7UJwlOvqE/+gahtnmQKN3gVA2QQyuPJCdbCU8RonU=
Subject key identifier:   08:E6:12:82:12:4E:25:F7:E1:7B:28:21:50:DD:C2:65:B5:71:39:A9
Authority key identifier: EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7
Certificate issuer:       /CN=ea1f9d8b0a378a42f19440419145494e546040c7
Certificate serial:       01A0404E4B9DD696956CDE0143CA592A27D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 23:01:08 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:08 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:08 +0000
Files and hashes:         1: 6h-diwo3ikLxlEBBkUVJTlRgQMc.crl (hash: 4E1K/EeXG9+D1/DSjLvjzfQcALQE6n1PO0WEbYHPmT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:4b:9d:d6:96:95:6c:de:01:43:ca:59:2a:27:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1f9d8b0a378a42f19440419145494e546040c7
        Validity
            Not Before: Aug 26 23:01:08 2026 GMT
            Not After : Aug 27 23:01:08 2026 GMT
        Subject: CN=08e61282124e25f7e17b282150ddc265b57139a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:1a:4c:e8:0b:ea:c8:03:d5:aa:d5:54:9a:
                    d5:57:48:fc:bc:f4:cd:f7:62:8d:52:1a:2c:6f:6c:
                    3a:63:b5:84:8a:0c:35:d5:c2:22:06:b5:9a:9f:83:
                    f7:54:23:6c:12:27:9c:0c:dc:45:36:dc:9f:c1:14:
                    59:6b:d5:a5:3c:49:83:a5:c1:46:e3:6a:76:02:67:
                    d2:8b:f1:50:19:ea:fb:57:57:b9:74:49:c2:7d:ef:
                    60:94:da:41:0e:7c:6b:1c:2f:96:dd:8a:f0:cc:fa:
                    59:3b:db:4b:42:42:f6:86:ff:e9:42:f5:0d:f0:e6:
                    59:b9:23:3f:e7:ba:09:89:49:c7:4c:cb:28:e4:e8:
                    04:cb:68:d6:63:2a:12:b4:57:65:03:c0:bf:c9:96:
                    29:5f:ca:65:be:e3:78:79:47:9e:9b:b5:fc:79:f0:
                    70:1e:e8:03:7e:af:17:36:dd:89:67:47:90:b2:ec:
                    75:3c:09:c8:60:a2:df:d0:5c:d7:43:88:d0:89:d9:
                    ac:de:b0:3b:28:e0:a6:cf:40:c2:4f:1f:bb:a3:4d:
                    8b:2a:be:aa:a0:f9:ee:9a:48:e5:66:d3:e3:c2:89:
                    b1:6d:4d:89:07:1d:c1:71:98:5a:b0:e6:ae:94:13:
                    c2:4f:8e:5f:29:3c:09:35:88:23:66:3a:3a:1c:cf:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E6:12:82:12:4E:25:F7:E1:7B:28:21:50:DD:C2:65:B5:71:39:A9
            X509v3 Authority Key Identifier:
                keyid:EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3d:69:47:84:1c:3a:7c:98:f6:b1:47:84:35:5e:ef:93:95:
         da:43:41:85:50:00:c6:f2:ba:0d:e6:d9:1e:11:4f:70:e3:c7:
         33:12:d7:b9:9d:e5:fe:42:d1:b1:e5:28:2f:a0:d3:74:84:3f:
         80:52:92:22:fd:81:2b:80:83:6c:10:7a:0f:e5:16:53:2c:62:
         a5:e6:75:61:43:95:a4:52:05:90:e4:ee:17:13:d2:83:23:4a:
         f2:e2:60:88:cc:d4:8b:ee:89:d6:dd:e2:8f:5d:87:d3:57:55:
         85:df:e4:4b:82:ca:27:37:c2:d8:ea:a5:a8:0a:8f:01:96:0b:
         4b:72:14:07:48:ea:d5:c3:e5:94:4a:f3:34:33:f2:68:c0:9e:
         82:ff:82:72:8c:ae:e4:1a:b3:58:6c:2b:31:ac:0d:f0:c9:c6:
         ff:cf:8e:d1:db:be:ed:a3:9e:ed:a3:a7:d8:30:ff:ff:f5:fb:
         3c:7c:18:b8:56:d3:ba:c7:70:48:56:4d:b1:ca:c0:bf:6e:60:
         e0:51:66:3a:80:80:a5:1b:09:d7:a6:8b:cf:a0:a5:96:39:19:
         69:5e:4a:61:d6:7e:f4:44:6b:3d:9a:08:49:46:05:93:08:b5:
         e1:3f:8f:82:7c:68:1b:e4:7b:bf:be:29:0b:3c:a0:78:29:8e:
         8d:3b:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:28:27 2026 by rpki-client