Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          UpQs7NVZC/18ejRvbJ2JOeTt9OmwXsOp2bDVWwvBLrY=
Subject key identifier:   88:55:44:C0:3B:9E:44:B1:3D:0B:CF:3E:DF:41:C7:7B:C4:8A:78:C8
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       01A13DB8233C80568C6100AD09F73D137FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          123A
Signing time:             Thu 15 Oct 2026 04:00:40 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:40 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:40 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: R+zPLtRSc95h6rB8ju82coX0WWVydrnio1P23TU7gFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:23:3c:80:56:8c:61:00:ad:09:f7:3d:13:7f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Oct 15 04:00:40 2026 GMT
            Not After : Oct 16 04:00:40 2026 GMT
        Subject: CN=885544c03b9e44b13d0bcf3edf41c77bc48a78c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:96:bc:97:2e:18:3d:8d:81:ca:3b:43:8c:
                    25:dc:4c:d5:8b:b5:4c:d5:53:f1:d7:a2:c1:38:29:
                    cc:ec:49:f4:46:1f:88:1b:58:3e:10:44:bd:6a:6c:
                    2e:69:e6:e5:21:48:5f:db:8b:1a:c9:b0:e9:be:3f:
                    d3:1a:54:67:a1:af:ad:56:2c:7e:14:0b:e1:e8:c9:
                    b4:fa:f3:26:7f:be:df:4c:51:b3:bd:ea:26:d2:1d:
                    67:8a:e8:53:bc:84:7a:b8:81:bd:53:89:a1:9e:cb:
                    79:67:57:60:99:26:ea:4c:51:60:ee:5d:f5:12:86:
                    63:32:cf:ad:d8:93:66:c4:b1:b9:f6:aa:cd:5a:1d:
                    87:8c:c5:4f:4e:eb:f7:d2:18:78:7c:c1:0d:5c:3e:
                    95:c0:0b:72:ca:c8:8a:3d:44:2f:15:d8:a0:47:e9:
                    f6:50:b5:bd:98:03:8f:d5:d3:de:a8:2b:95:9a:cd:
                    ce:1e:f2:6f:5b:51:25:96:df:19:85:2b:29:11:08:
                    8e:c4:8c:dc:11:42:d0:11:51:e6:90:c4:d9:47:42:
                    bc:82:5e:0b:0a:fd:0c:a9:d2:a6:fd:dd:bd:eb:a0:
                    fa:7d:6e:c9:99:18:c0:c0:49:fd:ac:15:31:a0:8c:
                    e5:16:f3:a9:03:e6:17:55:6e:53:9e:e0:cc:23:f8:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:44:C0:3B:9E:44:B1:3D:0B:CF:3E:DF:41:C7:7B:C4:8A:78:C8
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:40:fb:6d:c0:36:48:bd:a9:62:9f:74:eb:90:9b:d8:cd:
         05:40:14:3b:27:93:9a:4e:6c:50:3d:4b:b8:99:8a:e8:ac:3e:
         89:5c:fb:32:c3:86:8c:05:41:4d:3f:28:2a:c2:b4:4d:b9:4c:
         c6:29:24:85:18:1e:28:3d:8c:6a:54:83:cc:8e:b3:8d:2e:66:
         73:c4:da:03:d3:c9:7c:e4:33:79:8e:69:14:77:dd:1d:c7:a2:
         a6:e3:e7:71:45:1d:62:e5:fa:f2:23:4d:2e:20:bf:03:cf:2b:
         36:00:61:6f:81:c3:72:d2:bd:e7:25:8e:f6:d0:c2:d2:d7:61:
         bf:5c:cc:8a:de:ee:cb:55:9c:9f:94:b2:10:23:42:d8:ca:c5:
         69:09:23:9a:ed:5c:e5:e3:54:37:83:46:c4:e3:6b:23:fc:07:
         94:e2:a3:ae:24:9b:aa:ec:86:b1:d1:12:31:dd:2e:ec:ca:75:
         41:cd:01:38:65:19:26:d6:92:b8:20:21:22:d2:5e:f8:7a:0e:
         ee:4c:af:4d:a3:13:ae:5f:25:8b:b0:7e:3e:e9:33:06:40:41:
         36:f6:8b:02:3b:af:bc:20:bb:05:27:b0:3b:06:3c:77:5c:59:
         76:08:e4:cb:ad:fa:6f:75:83:a0:56:83:88:9a:43:e1:fd:62:
         f4:7d:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:51 2026 by rpki-client