Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          6XSQSoqP0s/Fwrxp6y2dIjFAf2PU9SkHN13ZeVx+y2I=
Subject key identifier:   F7:45:B4:44:4D:32:CA:06:10:5D:24:29:94:7C:1E:44:56:56:C6:DD
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       01A13DB8902979A905213ACCACFBB32D24D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          10FB
Signing time:             Thu 15 Oct 2026 04:01:07 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:07 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:07 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: OR6WZg9xC9fgPgWwez09M+bKk7GP4bNYy3QAAzbVJGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:90:29:79:a9:05:21:3a:cc:ac:fb:b3:2d:24:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Oct 15 04:01:07 2026 GMT
            Not After : Oct 16 04:01:07 2026 GMT
        Subject: CN=f745b4444d32ca06105d2429947c1e445656c6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:3e:1e:d1:81:77:ad:7b:6d:92:11:d3:d2:
                    31:ef:9e:87:a7:38:90:7a:7b:48:74:f8:60:33:e5:
                    f5:8e:29:67:d6:aa:fd:a5:b8:55:19:54:f2:44:7c:
                    ff:bf:b1:39:f2:05:03:4d:45:75:c5:47:5b:65:ac:
                    f4:b8:c9:c7:37:d5:f0:bf:81:ad:81:1b:b1:9d:f1:
                    f3:02:9c:7d:c5:e2:85:61:39:4d:9f:53:2f:ca:e5:
                    9c:b3:39:87:c4:68:e1:84:0c:95:59:2c:56:96:26:
                    5a:ba:fe:70:27:b1:02:f5:7c:3b:b7:e6:0f:eb:b7:
                    28:00:c0:ed:3a:0e:bc:7a:5d:36:ad:6d:c6:ea:44:
                    7a:1c:4f:de:58:7a:aa:8f:e5:c1:5f:a4:6b:21:db:
                    ce:1e:7d:5b:69:ae:d2:e4:33:33:c7:e6:b6:5b:ff:
                    77:89:a5:81:3c:9a:ce:89:75:6c:a6:b7:e6:68:d9:
                    72:43:0d:bd:df:b3:bb:82:97:3a:51:b7:6c:ac:9c:
                    cd:90:4b:b0:21:f8:6e:21:5a:53:3e:2b:06:66:56:
                    1c:13:ef:ee:df:07:81:63:66:79:34:b2:eb:8d:1e:
                    a1:82:5a:b3:94:e9:d6:b9:84:f2:8c:18:02:81:3c:
                    42:8b:63:f6:98:12:2f:70:57:1d:30:5f:4b:fb:a0:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:B4:44:4D:32:CA:06:10:5D:24:29:94:7C:1E:44:56:56:C6:DD
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:a5:a2:25:ff:c0:ae:71:51:1b:af:7a:58:22:ba:fc:eb:
         a0:32:dc:c8:bd:c2:60:c0:8c:84:2e:06:59:39:52:da:69:69:
         83:55:26:64:a2:a9:d0:4e:03:e5:5f:cd:1b:e2:b0:83:3f:39:
         28:54:09:85:e9:a4:2b:fc:16:0b:79:c8:05:36:fa:56:29:73:
         a9:ea:70:d2:1d:fc:04:cb:9e:5e:c1:6a:b5:c8:c0:a3:c9:ee:
         8c:8e:3e:78:5e:cc:4f:9a:df:bc:e4:cd:ce:f5:c3:60:e0:85:
         42:ca:dd:72:95:de:1d:c9:06:d9:94:d9:3a:4f:6f:40:7f:fa:
         29:35:7d:ef:cb:56:d3:8a:a6:68:a7:a1:d6:70:cf:0b:19:da:
         2a:8c:38:5f:d2:b5:b0:3f:f2:cb:03:00:8f:58:17:86:69:e7:
         38:32:0e:e7:ab:4e:ba:5c:19:fd:6c:ea:78:28:3f:68:cf:8b:
         b7:d6:81:2f:4e:f7:9e:8f:fb:55:23:22:4b:a0:07:b3:46:85:
         b8:b0:73:0f:e1:29:e9:59:ef:43:45:ed:c7:93:58:00:ef:fc:
         71:d1:ef:cb:b7:0a:85:83:59:db:b4:5b:20:b0:76:e6:36:2c:
         e4:7c:9f:b6:4c:8b:f1:ea:1a:4d:9c:b4:0e:b1:90:1d:76:b7:
         8b:a2:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:06 2026 by rpki-client