Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File:                     6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier:          p+3cK5xXgD+MN5brZYVW4f0P2xUhfOdOZj6T1zW7DE8=
Subject key identifier:   C1:9B:3F:41:BA:89:54:4F:9A:67:B4:34:7D:68:5E:B3:07:AC:1B:98
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer:       /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial:       01A13FA7AE7CDF22E48CD0E7C17B80714C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number:          11C2
Signing time:             Thu 15 Oct 2026 13:01:56 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:56 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:56 +0000
Files and hashes:         1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: 3n3i9+JjAivNHk0chfJGvntvslIRaIPrUaiykKuprBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:ae:7c:df:22:e4:8c:d0:e7:c1:7b:80:71:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
        Validity
            Not Before: Oct 15 13:01:56 2026 GMT
            Not After : Oct 16 13:01:56 2026 GMT
        Subject: CN=c19b3f41ba89544f9a67b4347d685eb307ac1b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:0b:d7:a1:af:44:66:57:27:2b:cb:2f:5e:
                    e3:ff:fc:cc:11:64:e2:d0:93:7c:20:1a:cd:1e:87:
                    3f:22:f3:3d:4e:45:e4:26:c5:e9:7d:53:05:5c:04:
                    8d:9a:a4:89:e2:a0:ed:33:e8:d6:5c:58:5d:d6:78:
                    16:6a:97:c4:83:3d:85:c4:07:ef:78:ec:0a:a9:bd:
                    1d:30:d7:d0:05:b8:d7:11:d5:15:44:e6:d6:58:0c:
                    bb:08:5f:0c:ac:aa:fb:e0:b0:13:1d:48:7c:14:9a:
                    39:00:2b:97:b8:89:8c:39:f2:b0:ad:94:c4:f4:35:
                    d1:1c:d6:f5:9e:04:eb:48:82:5d:59:2a:c8:9f:f1:
                    48:e3:f2:c8:79:d3:05:48:11:19:d2:af:dd:8e:a2:
                    66:18:a4:87:fc:4c:55:71:3e:c5:8d:5b:69:3e:58:
                    68:cb:0e:16:f2:a3:8d:f7:cb:c1:35:31:c2:a2:a8:
                    5d:85:d4:9c:52:c2:44:2f:97:bc:5e:0f:81:5e:89:
                    6f:27:1b:8d:dc:7d:ed:b1:f4:83:7d:f0:11:28:c0:
                    70:c6:f2:86:66:67:86:16:2b:89:4e:5b:0c:06:c2:
                    2b:38:8f:0c:c0:0c:39:30:9d:fb:6b:a5:38:e9:c5:
                    f3:98:6d:eb:76:34:37:3f:2b:3d:76:f5:7b:c4:32:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9B:3F:41:BA:89:54:4F:9A:67:B4:34:7D:68:5E:B3:07:AC:1B:98
            X509v3 Authority Key Identifier:
                keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:8b:e5:93:3d:cf:6b:69:7c:f8:c5:ee:e7:55:3e:96:c7:
         d4:51:43:dc:b2:c4:a8:f7:e1:d5:6b:55:07:03:3a:5d:ac:db:
         fe:28:0d:64:79:2f:bf:3c:1c:f7:ba:79:e7:0b:4b:71:ad:c8:
         1f:66:e1:91:23:87:89:01:ee:33:5a:7c:97:ff:e3:e4:e7:8f:
         4a:a1:1d:66:c8:11:37:ad:65:77:9c:7e:3f:1f:56:3b:c0:8b:
         1e:3e:49:b2:a3:22:20:fc:f0:66:74:5a:57:10:28:83:1a:7d:
         b4:52:2e:a5:fd:67:e8:86:36:81:4f:08:3f:93:3d:b6:dc:30:
         a8:13:02:ce:80:26:7c:75:8a:aa:76:f4:2f:0f:a7:9a:39:71:
         e5:29:64:b5:73:2f:52:8f:82:4c:ab:dc:2b:82:50:36:4b:a4:
         fc:55:ad:83:f9:2e:ea:fc:57:f3:ce:ac:35:a0:b8:0d:76:c6:
         a3:4c:87:76:05:5f:b3:56:6d:41:4c:ed:4a:d0:2b:c3:9a:a1:
         a1:d3:52:dc:49:f6:77:f6:d4:7e:1a:8e:73:c6:de:f3:a2:be:
         f3:99:19:ee:92:69:a6:5e:b4:4e:0e:30:fa:46:5b:d3:2a:e3:
         cd:eb:9a:7c:fa:43:52:a8:02:43:b1:54:22:84:74:51:68:d4:
         32:e3:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:06 2026 by rpki-client