Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          5QACWVh738h3yIJ8ffJfcuzLBtQNx1RvkpM9Z7LzAxo=
Subject key identifier:   73:A1:8C:B4:13:4A:D2:4E:3B:1F:EC:53:C1:C4:19:75:B9:E5:3B:C7
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       01A14D2BF16B10D9E981890C3B6E95F678BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          07E6
Signing time:             Sun 18 Oct 2026 04:01:27 +0000
Manifest this update:     Sun 18 Oct 2026 04:01:27 +0000
Manifest next update:     Mon 19 Oct 2026 04:01:27 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: inGHzMz5X/52uyI9wsHLS+9/MMxc+K3nLSxterkDavc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:f1:6b:10:d9:e9:81:89:0c:3b:6e:95:f6:78:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Oct 18 04:01:27 2026 GMT
            Not After : Oct 19 04:01:27 2026 GMT
        Subject: CN=73a18cb4134ad24e3b1fec53c1c41975b9e53bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:0d:14:10:dd:8c:ac:df:b3:ad:e5:93:dd:
                    17:a6:ca:fa:38:d0:22:2a:f5:88:83:68:95:33:f2:
                    5b:b9:8c:f6:09:42:ef:62:57:29:5f:47:14:31:01:
                    66:c9:fd:57:d5:7e:96:21:63:31:65:25:a7:b0:b7:
                    14:e9:0f:cb:9e:ed:58:e8:a9:2a:d5:c8:a3:6e:4d:
                    b8:72:2e:a2:8c:67:fb:96:da:1f:89:58:60:69:99:
                    8a:68:0e:58:69:4d:12:53:c8:0c:a6:19:e2:ee:02:
                    20:30:7f:ee:1a:9f:a9:17:1f:62:d4:27:2d:d4:04:
                    6e:45:52:3f:95:22:ec:54:9f:3b:11:d5:d9:ab:0d:
                    41:22:b0:fb:6f:1b:7e:98:4e:f2:8a:a3:4f:87:f8:
                    a3:d9:9b:59:4d:d6:7e:a3:02:2f:66:96:81:df:a1:
                    7b:c3:57:e4:dc:bb:a3:fd:72:74:f7:53:5d:03:0a:
                    b6:01:91:ff:d7:e3:21:67:69:70:ea:7c:d8:6c:2f:
                    04:18:e7:9e:94:53:a8:da:48:5b:57:db:c3:40:04:
                    ba:d0:b4:11:a8:11:28:10:62:67:3f:a8:27:37:c3:
                    6c:44:3a:4b:c5:09:2d:16:06:21:b9:22:91:3b:cb:
                    65:f4:59:cd:32:91:3f:b7:58:ad:83:a7:62:c6:89:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A1:8C:B4:13:4A:D2:4E:3B:1F:EC:53:C1:C4:19:75:B9:E5:3B:C7
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3d:0c:89:de:a2:a2:09:26:3b:1d:01:df:4a:30:b2:25:cd:
         4b:ab:6c:e9:b5:09:d6:60:41:1d:65:39:11:93:59:41:e0:32:
         70:fc:05:e4:9d:9e:70:8f:a6:14:35:64:56:9e:62:b4:21:f1:
         ae:95:7e:42:72:90:66:1b:21:aa:40:89:04:a8:5b:0a:b6:a1:
         37:a3:44:8e:de:a0:2b:fd:d8:30:25:0f:50:f8:f4:e3:af:6c:
         a6:7a:d8:87:9a:6d:18:f0:91:38:e2:e1:57:d2:90:d0:21:0a:
         d1:19:9f:36:d3:53:46:9b:24:27:6e:d0:59:ac:bb:4d:fc:df:
         06:f3:7c:6b:d5:b0:9f:a7:9a:c9:d0:a2:7d:73:b8:22:b5:b3:
         f0:37:2c:55:8b:64:54:d5:fe:55:40:40:1e:ee:d3:df:71:c0:
         8c:96:d9:c7:80:0f:9b:a1:de:53:aa:98:c9:2c:b7:58:04:97:
         8e:b1:6c:40:78:68:98:97:65:53:24:e4:cd:23:48:57:44:c1:
         a2:c4:28:a5:85:39:f4:f0:a4:a8:fe:e1:3c:3e:18:93:53:41:
         ee:5e:c8:9a:23:78:df:3d:67:72:70:3c:19:f0:87:90:d9:ff:
         cf:64:b4:29:ec:01:1e:17:33:29:30:72:79:45:42:e7:fe:64:
         0c:bf:d6:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFNK/FrENnpgYkMO26V9ni8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjYxMDE4MDQwMTI3WhcNMjYxMDE5MDQwMTI3WjAzMTEwLwYDVQQD
Eyg3M2ExOGNiNDEzNGFkMjRlM2IxZmVjNTNjMWM0MTk3NWI5ZTUzYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtigNFBDdjKzfs63lk90Xpsr6ONAi
KvWIg2iVM/JbuYz2CULvYlcpX0cUMQFmyf1X1X6WIWMxZSWnsLcU6Q/Lnu1Y6Kkq
1cijbk24ci6ijGf7ltofiVhgaZmKaA5YaU0SU8gMphni7gIgMH/uGp+pFx9i1Cct
1ARuRVI/lSLsVJ87EdXZqw1BIrD7bxt+mE7yiqNPh/ij2ZtZTdZ+owIvZpaB36F7
w1fk3Luj/XJ091NdAwq2AZH/1+MhZ2lw6nzYbC8EGOeelFOo2khbV9vDQAS60LQR
qBEoEGJnP6gnN8NsRDpLxQktFgYhuSKRO8tl9FnNMpE/t1itg6dixolGNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOhjLQTStJOOx/sU8HEGXW55TvHMB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmT0Mid6i
ogkmOx0B30owsiXNS6ts6bUJ1mBBHWU5EZNZQeAycPwF5J2ecI+mFDVkVp5itCHx
rpV+QnKQZhshqkCJBKhbCrahN6NEjt6gK/3YMCUPUPj0469spnrYh5ptGPCROOLh
V9KQ0CEK0RmfNtNTRpskJ27QWay7TfzfBvN8a9Wwn6eaydCifXO4IrWz8DcsVYtk
VNX+VUBAHu7T33HAjJbZx4APm6HeU6qYySy3WASXjrFsQHhomJdlUyTkzSNIV0TB
osQopYU59PCkqP7hPD4Yk1NB7l7ImiN43z1ncnA8GfCHkNn/z2S0KewBHhczKTBy
eUVC5/5kDL/Whg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:09:13 2026 by rpki-client