Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          hXD08csCd5fvPM4zpGcSPojnkAOuvitHYZiHtjujvTE=
Subject key identifier:   AC:26:EF:DA:34:37:A6:D7:7B:1B:34:22:EB:2E:54:00:C5:28:45:F0
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       01A13DB81A6503B7CC23A02751E79EF438F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          1AA1
Signing time:             Thu 15 Oct 2026 04:00:37 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:37 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:37 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: 1NEmYz5O7i1vLmYcnij2f8E1zyXnZqcCRlox+u8Ja64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:1a:65:03:b7:cc:23:a0:27:51:e7:9e:f4:38:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Oct 15 04:00:37 2026 GMT
            Not After : Oct 16 04:00:37 2026 GMT
        Subject: CN=ac26efda3437a6d77b1b3422eb2e5400c52845f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:cb:59:4d:d9:12:cd:6f:0d:21:dd:95:97:
                    a0:92:6b:3b:01:f3:ca:1a:92:dc:d5:99:28:0d:5e:
                    f2:e4:28:6f:aa:0b:45:8b:bc:db:bc:7b:38:68:3d:
                    b4:88:c3:4f:3d:1a:9a:2a:82:cc:a3:e2:68:85:14:
                    a2:88:b4:cd:89:56:24:6a:c9:66:62:52:dc:69:fd:
                    a5:f7:af:e1:2f:c5:e2:c3:15:4d:0c:f2:27:63:a4:
                    97:f2:d4:06:5d:21:e1:d0:f3:18:a1:a7:52:87:a8:
                    ec:89:fd:d9:41:ac:06:0e:92:06:4a:7e:dd:64:44:
                    5b:a9:48:08:15:b9:d5:c8:dc:46:a0:df:e0:4b:be:
                    a9:46:2e:9e:3b:56:b8:9d:ed:5f:ba:fa:6f:c9:3d:
                    69:6d:b7:fc:94:d7:08:35:9f:ba:9f:87:ba:18:56:
                    f8:c4:04:30:ae:a0:a2:94:d3:d3:6b:ba:ac:15:6e:
                    46:db:01:38:9e:19:0b:09:4d:7c:3a:34:da:d7:18:
                    7f:cb:e6:08:89:70:fb:3e:10:d6:c1:03:11:9a:e2:
                    d3:2d:43:2e:44:5f:62:fa:d8:30:36:11:29:bb:1f:
                    02:61:ec:12:cb:11:aa:b3:5b:fa:7b:05:d3:ee:39:
                    79:ab:6e:ad:1e:84:81:c0:28:c3:a4:ed:7d:d3:d8:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:26:EF:DA:34:37:A6:D7:7B:1B:34:22:EB:2E:54:00:C5:28:45:F0
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:1b:36:2e:4e:0f:ac:ab:6b:4b:d1:66:0d:e9:b2:d8:3e:
         a1:7f:64:95:ce:fe:e1:49:23:ac:b0:f1:33:40:f9:ca:4f:49:
         ff:5c:29:c4:69:7c:65:13:02:0b:c8:67:68:09:50:dc:56:00:
         c2:91:58:37:d0:5e:ba:3d:cd:38:54:15:a4:8e:7b:26:01:7e:
         17:13:38:f6:0b:d1:30:5f:da:2a:f9:50:f9:31:68:62:93:d8:
         da:18:86:23:4c:d8:d0:ac:8a:b0:ea:9c:a9:27:07:71:8e:0f:
         72:b8:d1:82:78:f2:fa:21:44:db:40:df:ec:58:a8:dd:2b:fb:
         31:f0:ab:fa:a6:02:d8:55:60:1e:3b:35:76:1d:1c:54:e8:39:
         dc:17:7e:fc:94:e8:4e:e4:3a:09:86:d4:9a:5c:e9:b9:54:b4:
         6b:6c:f5:9c:fd:89:ed:ae:a5:76:7a:05:83:ba:46:13:3c:2a:
         01:53:53:c7:b6:f6:cc:5e:41:76:6b:8f:9f:c0:fe:e0:24:01:
         6f:de:f1:25:c1:ca:d3:80:8f:55:2f:5f:12:0f:0b:ef:0a:52:
         18:c1:1d:8b:28:a8:47:7e:6b:35:c8:e0:9c:5d:3f:34:84:34:
         1d:d4:83:4b:32:bf:83:93:35:d8:dd:c0:ec:68:3b:46:8c:d1:
         af:f0:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:24:13 2026 by rpki-client