Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          JcOvF3W04o05VznxOf/WwiRq69dFtrK8tuTahjZv9QI=
Subject key identifier:   2A:CC:99:57:A9:5F:7F:12:A1:47:DB:3A:1D:53:F9:C5:FD:AE:F0:D2
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       01A13D13C75C6DC140BAEFE4FB7BF4EBBBAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 01:01:08 +0000
Manifest this update:     Thu 15 Oct 2026 01:01:08 +0000
Manifest next update:     Fri 16 Oct 2026 01:01:08 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: DpDWQJXmiNZm5CTpdnRU2+qaCQb/C60s83SQHTHHXdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:c7:5c:6d:c1:40:ba:ef:e4:fb:7b:f4:eb:bb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: Oct 15 01:01:08 2026 GMT
            Not After : Oct 16 01:01:08 2026 GMT
        Subject: CN=2acc9957a95f7f12a147db3a1d53f9c5fdaef0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:c5:70:81:cf:1b:80:10:1a:47:80:ef:ef:
                    ab:f1:db:c0:6e:48:be:ec:f5:e6:c5:22:7c:b8:d6:
                    e5:fe:7a:99:45:ff:62:cb:33:75:4a:fd:7c:d0:4f:
                    9a:04:27:06:bb:28:69:aa:cf:1d:49:e3:68:f2:cf:
                    c2:70:ba:23:cc:85:de:34:6a:63:7e:f3:52:cf:65:
                    99:4b:03:7c:69:a8:6f:4c:1d:75:24:89:b7:12:60:
                    30:b6:e7:f2:ed:dd:99:5a:f5:f6:9d:28:07:cf:47:
                    d8:d0:32:69:28:fd:21:49:86:c6:9e:65:03:4e:69:
                    74:b7:19:dd:7d:90:de:d2:f8:4a:5f:8e:5c:f4:53:
                    29:2c:9e:a9:fd:fd:95:b8:8f:5a:23:63:8f:90:b6:
                    24:ec:1b:2c:83:df:ab:56:f1:79:f3:8e:c9:46:b1:
                    b7:86:10:48:c7:1e:56:f6:98:67:04:04:34:9f:0f:
                    ff:af:54:cd:86:57:e3:38:89:89:50:70:a7:95:69:
                    84:48:5b:27:60:c1:ee:59:0d:e8:15:2f:9c:61:81:
                    83:31:85:64:88:7a:81:e0:43:a0:94:c1:39:68:97:
                    b8:61:86:5a:8e:34:9e:9e:c4:00:58:93:a7:2d:fe:
                    6a:83:53:f5:c3:ff:4b:5b:c0:da:17:38:c4:f0:c6:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:99:57:A9:5F:7F:12:A1:47:DB:3A:1D:53:F9:C5:FD:AE:F0:D2
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:50:43:95:a5:2d:0d:3d:5d:99:c0:53:bb:c0:e0:0e:de:04:
         cc:3d:3d:fd:a8:43:4b:9d:49:72:78:e5:8a:6d:c6:cd:7b:49:
         8d:d5:4b:02:66:5c:15:40:ba:48:7b:10:db:d3:d6:be:25:e7:
         8b:7a:c4:0e:61:43:06:93:2b:74:bb:b0:f2:94:10:98:28:a2:
         d3:23:79:fd:12:ec:0e:d1:f7:af:da:5e:5b:d0:b1:ae:05:50:
         88:9a:2d:bf:fe:96:7e:b1:85:31:37:d0:a8:8d:fa:46:41:9d:
         03:b3:5f:e5:4c:67:67:12:eb:0a:f2:35:7c:ac:a6:f3:06:20:
         34:28:a3:eb:72:81:a8:08:2a:a2:f6:83:b1:d1:56:d4:fc:14:
         64:27:bf:ba:fd:bf:ee:43:da:d2:35:2e:76:60:a2:a6:d6:c7:
         53:85:53:25:57:a3:ca:3d:5a:b6:68:e5:9a:98:c4:07:50:bc:
         84:40:6b:11:5b:44:86:78:88:77:6f:fb:e4:d9:69:82:78:ea:
         84:40:bf:91:99:d0:c8:ea:6e:6e:f7:55:f3:44:a2:20:63:61:
         7c:52:d3:f0:55:83:e7:e7:fe:8c:b6:0b:85:0f:de:0a:44:3f:
         1f:3c:86:13:d7:28:90:db:9b:c4:d2:9f:7c:48:3f:64:52:07:
         71:fc:c8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:07 2026 by rpki-client