Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          BSlz1gQC9LuQxyBe8m3Nl8bQVIe7CvkcutZV1lNgwGg=
Subject key identifier:   8C:0A:C6:02:37:90:3A:0E:F1:DC:2F:5D:2E:D0:AB:3B:EB:81:BF:A0
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       01A00101106DEC0719D2864A626BFEA242E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          10E5
Signing time:             Fri 14 Aug 2026 16:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:41 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: +1xuWFd7EzoivPXu2/WDEzCgYRlXfAtRMx7+BRAwMjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:10:6d:ec:07:19:d2:86:4a:62:6b:fe:a2:42:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Aug 14 16:00:41 2026 GMT
            Not After : Aug 15 16:00:41 2026 GMT
        Subject: CN=8c0ac60237903a0ef1dc2f5d2ed0ab3beb81bfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:ae:0e:b8:f7:e8:4c:42:2a:7a:58:62:17:
                    21:86:47:b1:41:53:5b:52:50:ec:c8:2f:7f:f7:b1:
                    95:0e:12:5c:13:42:24:e7:e0:43:b2:e2:0b:5d:61:
                    1b:3e:cd:15:f6:0d:3e:8c:da:30:5d:fc:58:1d:5b:
                    54:c8:70:5a:f3:e2:68:68:c9:79:c3:f7:ad:58:2a:
                    19:5c:62:f8:19:0c:59:89:2b:bb:21:62:6b:18:7b:
                    18:ed:44:e6:ba:8f:7e:76:41:45:55:c3:5c:c9:ed:
                    fb:f1:f8:50:23:c0:34:fd:37:b8:5c:ba:f9:d1:bc:
                    9f:3b:0e:45:24:01:b7:59:c8:e3:2b:fd:60:19:44:
                    cb:51:59:c2:06:84:23:ed:0d:01:17:95:bc:a0:2c:
                    80:05:25:f6:63:ef:05:2b:cc:68:a9:e2:41:e3:7d:
                    35:b0:8e:45:1d:88:dd:9a:a5:26:35:48:96:a9:a1:
                    27:d3:d3:8b:18:35:d3:0f:1e:60:47:22:3e:1b:fa:
                    d9:2d:c3:37:4f:94:15:eb:18:b7:0f:f7:92:e1:b5:
                    0e:81:76:68:fa:88:18:af:27:54:0d:0b:04:e2:f2:
                    af:d2:22:72:81:30:76:50:05:ed:47:09:9a:46:7d:
                    06:1d:18:39:6a:2b:b3:46:4c:1e:b0:83:9e:24:de:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0A:C6:02:37:90:3A:0E:F1:DC:2F:5D:2E:D0:AB:3B:EB:81:BF:A0
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:48:2c:a0:19:af:e5:08:64:43:53:7c:2b:56:8b:1a:a5:46:
         a6:11:65:9c:56:99:3c:c0:2f:88:d2:e7:02:44:14:97:ab:36:
         f3:73:11:08:04:f1:ea:b1:de:09:70:54:ca:22:81:fe:c9:16:
         aa:8c:17:2f:b0:4d:fe:94:0b:21:88:37:e7:01:eb:c8:75:19:
         61:13:e6:c2:fd:72:8f:d2:68:36:10:c7:ea:f7:eb:27:3a:62:
         cb:a6:4a:1a:cc:5e:6c:28:0f:e4:c3:34:49:86:b0:0a:8a:04:
         87:3c:c7:86:35:c2:8f:78:0f:c3:76:78:23:ba:b4:1c:1a:05:
         16:37:45:b9:9b:88:d9:2a:63:ce:90:1b:51:4a:3c:8f:3e:df:
         97:86:1f:10:ec:8c:c6:f5:05:7f:8e:3a:f9:b4:a1:b1:39:a8:
         bf:c1:1e:c2:61:6c:f1:b1:fb:ae:23:2f:81:0f:72:83:2b:60:
         ab:43:2d:99:95:ef:e6:a5:12:6b:97:3b:8a:57:32:33:ac:d2:
         31:bd:3b:6e:84:67:03:54:49:a2:7b:25:86:a8:10:60:d0:d4:
         c0:a9:9e:77:2d:b3:87:7d:49:d4:78:4d:b5:7c:6b:7a:14:0c:
         52:a3:12:90:c3:60:de:89:97:c5:85:de:81:c5:62:bf:58:6b:
         d3:1b:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:52 2026 by rpki-client