Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
File:                     2V_Z-7sug4agu3amyEH8aKfD65g.mft (raw, json)
Hash identifier:          2lMq+hM+PjYyYpcMg4QuDCrcTU0igbDuoqBHYf56YSs=
Subject key identifier:   B6:F0:99:B9:66:0E:4A:61:1C:50:89:84:C0:AE:3F:7F:A6:59:45:95
Authority key identifier: D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
Certificate issuer:       /CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Certificate serial:       01A13ECBBF20462574B6CD31D799017667CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
Manifest number:          06F6
Signing time:             Thu 15 Oct 2026 09:01:42 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:42 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:42 +0000
Files and hashes:         1: 2V_Z-7sug4agu3amyEH8aKfD65g.crl (hash: J//MupWWNVz4ZjqyHS8upf54dMpBI4XAoUZ2BJRp7Ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:bf:20:46:25:74:b6:cd:31:d7:99:01:76:67:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
        Validity
            Not Before: Oct 15 09:01:42 2026 GMT
            Not After : Oct 16 09:01:42 2026 GMT
        Subject: CN=b6f099b9660e4a611c508984c0ae3f7fa6594595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:cc:f4:7a:60:87:c3:28:80:b4:52:60:74:
                    cc:10:f9:cb:4b:8c:a2:a8:48:51:26:8c:94:09:54:
                    80:3f:e1:38:4b:16:df:60:bb:77:18:ad:ae:2c:6b:
                    1c:5b:c0:84:c8:45:57:18:6b:df:c9:7c:70:75:ea:
                    da:46:4a:56:2a:f5:cd:b7:20:8b:52:b5:01:4f:bc:
                    c5:65:57:c3:a5:0c:ee:4f:3d:8d:42:b0:6d:4a:39:
                    54:04:e1:2b:a3:0f:cf:1a:aa:ec:b4:d1:e6:6d:4a:
                    0b:84:43:b4:e7:e6:46:62:80:13:95:14:d0:54:5b:
                    9a:d7:54:f7:dd:07:8a:1c:ff:a6:a4:c2:5e:53:d9:
                    d5:56:b3:d2:74:25:bc:25:f0:de:1e:26:02:85:a3:
                    64:0d:9a:2b:a2:80:b7:7f:8a:bc:21:6e:f8:ca:d2:
                    8a:2f:f8:08:16:2b:9d:35:4e:f4:23:9d:12:0d:1c:
                    0c:de:fe:02:a9:3b:c2:cd:e8:6d:25:b4:69:8e:23:
                    b4:2a:5a:af:f7:1c:73:c3:99:7b:48:57:c3:0c:42:
                    b5:6b:a4:a2:eb:1b:63:1a:08:f2:7d:b4:b8:d4:0a:
                    79:21:34:44:21:e1:43:c5:53:5c:38:e6:6a:c3:a4:
                    64:a9:08:67:ef:fc:ec:76:7c:b4:6e:29:af:a6:ad:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:99:B9:66:0E:4A:61:1C:50:89:84:C0:AE:3F:7F:A6:59:45:95
            X509v3 Authority Key Identifier:
                keyid:D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c9:04:3c:95:21:de:8c:9a:bb:47:3b:c4:1b:2a:08:d6:37:
         61:83:b9:51:a6:79:6b:ab:87:d7:79:39:59:4b:ee:8b:b8:c9:
         85:46:94:f3:83:b1:66:97:8f:d0:01:13:13:1e:46:a0:6f:13:
         fc:84:e4:c4:fb:6e:9a:64:b0:85:34:c9:c9:2b:ff:78:2c:1d:
         9e:04:67:14:46:28:00:d8:01:1d:96:20:2d:19:27:4b:af:de:
         24:36:04:21:62:12:11:ce:29:fc:a1:ff:78:c7:6b:b6:fe:08:
         62:32:0c:80:ce:70:75:18:a3:73:5b:93:17:e3:86:89:b7:ff:
         d1:9d:b8:4e:e2:6f:47:58:33:ca:8e:9f:b9:78:4d:6f:40:28:
         e2:23:31:a3:88:7a:85:e0:cb:86:88:3d:5c:21:6b:f4:10:1c:
         57:43:32:48:84:b8:ad:24:de:61:8d:0a:c4:f2:27:0c:82:14:
         12:a2:33:38:03:dd:9d:92:dd:c7:9d:90:a0:39:a3:89:ad:3b:
         51:27:a3:7d:5c:ec:9f:05:fa:43:52:41:47:88:36:df:a3:e8:
         68:d8:f2:7f:bc:90:80:69:b6:de:f1:c1:1b:03:3f:9c:4b:77:
         ba:d3:64:e4:ae:f9:71:22:55:c0:0a:ff:5b:f1:32:bc:c5:c8:
         37:8d:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:57:00 2026 by rpki-client