Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          baQb2OTAKyRe23pcHUFB9LYPoaYaq9qvMcY2meSrAII=
Subject key identifier:   C3:8E:FB:0F:26:51:8F:FC:5F:5C:28:57:E1:DD:83:B2:80:D9:BB:7B
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       01A001017166D4079A943687E71FBB4DBD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          073A
Signing time:             Fri 14 Aug 2026 16:01:06 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:06 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:06 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: R5PylQaTvRWo/t5IZP0NyDCD9B5YvQMkpUSlDr88QWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:71:66:d4:07:9a:94:36:87:e7:1f:bb:4d:bd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Aug 14 16:01:06 2026 GMT
            Not After : Aug 15 16:01:06 2026 GMT
        Subject: CN=c38efb0f26518ffc5f5c2857e1dd83b280d9bb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:8b:a0:d6:8c:aa:cc:07:22:0b:85:e9:b4:
                    0c:d5:64:82:a1:a8:58:da:99:c8:a0:7d:16:9c:8e:
                    83:53:bc:3c:35:05:b5:3e:c1:0d:77:fd:e7:81:4f:
                    8d:ef:d0:4b:8b:b3:07:2a:0a:f6:61:76:91:dc:8a:
                    d1:37:1b:62:dc:50:2a:79:87:de:8a:58:b4:c7:ff:
                    09:3e:07:e6:2b:78:05:84:04:27:0d:66:a8:b7:2f:
                    4f:06:12:ec:d6:0b:a2:13:44:68:71:1e:4e:f5:83:
                    67:d3:84:64:f8:81:ba:8e:54:ec:09:4a:4e:4a:54:
                    8e:a9:a2:49:c6:e4:ab:a6:fb:de:8a:73:3f:71:a2:
                    ac:9d:0b:7f:7a:24:61:a0:3a:ce:57:bf:16:1e:6d:
                    21:a0:a3:5b:84:81:f8:be:ca:25:5d:f8:b7:29:c1:
                    c5:42:5c:f9:28:aa:24:b6:b0:29:c8:ec:01:68:eb:
                    22:16:ac:a1:95:06:50:65:de:fb:6d:a8:58:d3:16:
                    6e:76:c8:27:00:5e:f5:02:27:54:6b:2d:c6:2a:00:
                    37:67:2d:45:71:34:7e:7b:c6:be:e8:e6:6d:f1:51:
                    2e:40:54:1a:8d:d5:be:8f:09:de:49:86:38:e6:21:
                    36:83:9b:3c:1f:64:7e:be:db:b2:a6:27:3e:d7:b3:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:FB:0F:26:51:8F:FC:5F:5C:28:57:E1:DD:83:B2:80:D9:BB:7B
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a9:8f:e0:32:ec:b2:5f:3d:fd:62:e4:d5:75:b8:f7:f8:7f:
         1b:56:db:a5:ac:0f:bc:45:dc:83:90:bc:7a:52:06:d7:d6:60:
         ee:e1:17:ee:fa:ac:d5:ab:c6:d0:b3:ab:c7:16:e4:49:95:6f:
         30:81:6e:cc:fc:37:81:76:17:2e:0d:2d:ee:64:fc:1a:61:bb:
         1a:d8:da:bd:96:3a:4a:fc:c8:0b:fd:08:a0:19:4e:a5:39:96:
         b6:b4:06:c8:6a:6b:27:5b:20:de:5a:25:34:a2:d7:4c:23:a4:
         68:8c:72:5a:1e:36:c4:19:e1:8e:03:40:49:fd:de:3e:5f:e1:
         ed:a9:06:d3:4a:f0:0c:7f:0f:b3:e8:45:00:c2:a1:7b:f0:9c:
         b3:1c:5b:85:17:42:e0:a7:03:cd:28:41:4d:b8:bd:d6:95:bf:
         f7:67:19:98:77:6e:5f:93:40:c3:fd:b7:a5:71:1f:a4:9d:04:
         96:59:5e:1f:1c:60:a0:f8:9c:73:00:d3:7e:e9:cb:99:c4:f8:
         2d:15:ca:63:5a:6d:b8:d6:b2:e3:6b:c4:fd:6c:dd:cd:78:6b:
         75:ee:d7:8d:11:c5:7b:1f:78:13:c1:dd:90:f1:3a:f4:a3:25:
         d8:e0:7c:b1:d9:09:ea:ac:28:9d:ff:a1:dd:15:ca:b7:94:4e:
         6f:d0:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client