Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File:                     6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier:          QAARqT/RfpCuvrUKL019oSIl+H/YF/dtXFWcKojunl4=
Subject key identifier:   9C:D0:A1:EA:54:22:A5:FA:A6:45:6F:3D:CC:C1:F7:76:88:10:30:6F
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer:       /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial:       01A00101E57561DEF06739CFB5C641FACAD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number:          14F3
Signing time:             Fri 14 Aug 2026 16:01:36 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:36 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:36 +0000
Files and hashes:         1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: QaEHh8ykRjO/PQO57BUvozlcaESFXMERroBPi+TMBB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:e5:75:61:de:f0:67:39:cf:b5:c6:41:fa:ca:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
        Validity
            Not Before: Aug 14 16:01:36 2026 GMT
            Not After : Aug 15 16:01:36 2026 GMT
        Subject: CN=9cd0a1ea5422a5faa6456f3dccc1f7768810306f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:6a:80:3e:1a:cb:96:f3:9b:2a:87:f5:e7:
                    c8:fa:e6:4e:2b:5c:f9:a9:3e:2b:d8:8f:50:00:a1:
                    a4:9e:11:ab:85:0b:23:dc:34:75:c7:d9:93:14:84:
                    fe:ee:ad:d0:ca:fc:99:ef:3b:79:48:d6:bc:85:76:
                    74:99:19:97:4f:19:d6:9c:b6:3f:8b:5d:77:58:45:
                    a7:76:38:a8:5b:53:ce:dd:c6:01:0f:38:ae:ed:ee:
                    0c:b0:fb:5b:53:c3:4c:2f:65:23:4e:96:69:19:08:
                    09:f7:38:d1:88:a4:04:a4:38:7d:df:95:b3:b1:8c:
                    53:04:b0:72:13:c7:e0:8e:44:40:5d:96:13:4a:ef:
                    20:4c:78:0d:7e:64:f3:0a:b4:1d:89:71:73:40:07:
                    31:26:84:4a:1e:db:b3:5a:dc:ff:79:8e:91:5a:e9:
                    12:88:5a:a4:d5:71:04:10:02:15:bc:a8:98:e9:e7:
                    16:46:83:90:79:e0:88:c8:13:4e:06:6c:d0:a7:91:
                    1e:e8:42:64:9c:b2:67:a7:91:7b:7e:fc:84:6f:a9:
                    4f:db:71:7b:5f:2d:27:6a:26:80:24:bf:7e:a8:ed:
                    ef:9d:d4:ac:8a:5e:b6:3a:b2:6b:2b:7e:69:f4:69:
                    8c:18:63:4f:6c:28:3f:da:58:0d:e0:b5:47:6d:cc:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:A1:EA:54:22:A5:FA:A6:45:6F:3D:CC:C1:F7:76:88:10:30:6F
            X509v3 Authority Key Identifier:
                keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:2f:d7:a8:36:b6:83:81:48:94:d8:af:0f:8f:e8:fa:db:
         2e:8d:27:9d:9a:72:73:fc:f4:a7:7f:67:7c:cd:aa:86:67:aa:
         a7:5e:6a:6d:b3:09:e9:e6:eb:7e:14:f0:3c:a9:79:d8:34:b1:
         b5:36:0b:74:89:f5:6e:30:35:5b:96:3d:0e:9a:77:99:0e:29:
         ac:f7:1c:ba:f5:ac:94:2b:46:d5:0e:f0:b7:dd:d2:fc:a1:84:
         77:ed:96:67:1a:2f:f8:15:08:62:90:f7:8e:5b:47:66:7d:69:
         87:07:8e:51:c6:4e:81:2c:79:96:07:08:76:e2:a4:5b:4c:14:
         d0:27:cf:47:12:dd:82:96:5f:c2:71:a0:b1:bb:13:7a:50:b5:
         8b:44:6f:f0:a5:10:3e:03:9f:31:08:4f:b9:ae:87:67:c6:59:
         9b:73:85:df:2b:57:77:54:90:fc:08:b3:9c:11:d8:95:72:b4:
         b4:3c:32:e9:55:ff:99:05:91:36:0a:93:cf:f3:07:16:77:ef:
         76:b3:c5:9e:75:8e:6f:cb:3b:9c:5e:89:2c:cb:e2:cf:59:48:
         a3:25:3c:a7:c6:bb:42:2a:ad:4d:04:72:e3:0f:52:17:47:90:
         56:e4:01:0d:06:0d:ee:b0:ae:04:bd:79:d9:96:18:d7:7c:6d:
         d1:3c:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:37 2026 by rpki-client