Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
File:                     6kHoOY_3zvtSIWNusighJuv-O3g.mft (raw, json)
Hash identifier:          ttWekq/u0Y9iE8CeWM9rCFPOxKzIMFUgX02HzPyOj60=
Subject key identifier:   7D:35:55:52:78:A2:9D:20:AB:45:A1:F8:F7:36:FA:D8:94:2E:CD:20
Authority key identifier: EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
Certificate issuer:       /CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Certificate serial:       01A13FA7BC5886FC359151CF50BB139E9A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
Manifest number:          06F4
Signing time:             Thu 15 Oct 2026 13:01:59 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:59 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:59 +0000
Files and hashes:         1: 6kHoOY_3zvtSIWNusighJuv-O3g.crl (hash: jd153la/ay2QtaWO40LgG1Opf2tMVfHGBWz11UxP3Z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:bc:58:86:fc:35:91:51:cf:50:bb:13:9e:9a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
        Validity
            Not Before: Oct 15 13:01:59 2026 GMT
            Not After : Oct 16 13:01:59 2026 GMT
        Subject: CN=7d35555278a29d20ab45a1f8f736fad8942ecd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:e5:d6:31:78:37:36:2e:f2:b5:f3:d1:a9:
                    10:2f:ed:d2:f3:eb:4f:97:2c:12:fb:ac:3c:bb:be:
                    5c:cf:95:f5:47:a1:07:39:82:38:79:54:45:99:3e:
                    81:cb:2f:74:47:3f:1b:4a:4c:ed:b2:c3:33:03:68:
                    5e:04:a5:ad:f1:73:a3:ee:4b:f0:43:ed:cf:09:b6:
                    8e:d3:ff:66:ad:5b:4a:76:5a:51:1b:e2:ac:9f:a8:
                    bf:af:2b:c4:fe:c3:b3:29:af:db:ac:46:0e:15:21:
                    33:cf:0c:dd:f4:fb:3b:30:5d:41:34:c6:e5:e0:0a:
                    84:a4:f4:c8:92:d8:49:d3:eb:66:4a:63:6e:46:63:
                    12:f4:6f:f5:b8:6f:e4:62:c4:b2:e9:4b:ef:a2:25:
                    b8:00:1e:c9:9c:dc:df:4a:0d:31:66:47:c3:e7:38:
                    c9:9c:66:7e:74:85:d3:26:ab:25:9e:43:57:0c:fa:
                    38:a4:87:1b:41:8d:7f:d2:b4:64:cd:3c:84:58:66:
                    91:11:c3:0a:2d:dd:c4:43:ba:ea:a4:f8:32:c1:e8:
                    2f:f2:94:22:ea:30:6b:93:2d:46:5b:e5:5d:b8:ff:
                    34:ec:3d:eb:80:a2:02:a0:83:88:55:1b:7d:a2:00:
                    36:36:6d:23:38:43:bd:fd:3c:d6:29:d6:4c:2a:7a:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:35:55:52:78:A2:9D:20:AB:45:A1:F8:F7:36:FA:D8:94:2E:CD:20
            X509v3 Authority Key Identifier:
                keyid:EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1f:40:f8:39:d9:d6:42:14:3f:e7:58:4d:f5:3d:1c:cd:18:
         f8:e9:db:ee:ab:44:a6:85:0c:aa:6f:8e:b4:96:5c:76:72:3a:
         e6:d6:3e:32:e0:ff:29:de:9e:07:5c:18:ca:0a:59:40:7f:57:
         b6:1a:4c:74:36:3b:f5:e5:ff:9a:40:22:17:aa:97:d1:8c:c2:
         c7:aa:f0:96:50:9a:be:69:38:5b:92:8d:8e:d1:5a:7b:5a:2d:
         fb:91:a5:26:da:24:ac:73:2d:ea:dc:09:73:9d:cc:8e:39:2d:
         57:6e:28:55:24:a5:d3:71:50:94:90:bb:97:eb:d2:d5:ea:8b:
         3b:ec:01:26:24:56:44:3c:5e:0b:a9:d4:06:ce:49:d4:09:ea:
         b2:c3:3c:4a:16:3a:e7:36:bf:a7:20:7c:26:9a:44:d5:af:8b:
         0c:2e:40:5b:d7:bd:fc:e1:6b:42:0c:1f:12:a6:e3:34:b1:78:
         88:36:11:2f:3a:72:f0:2d:9c:ce:30:a5:a2:8a:23:39:45:ae:
         14:a3:7d:18:40:aa:25:80:b2:35:71:f5:4b:f9:d7:13:a6:ab:
         50:87:84:a4:e9:8d:98:c3:71:51:cb:90:22:36:a9:d4:3f:d8:
         d5:11:5e:04:48:62:4b:13:41:35:ce:21:45:2d:8d:4a:a6:47:
         43:5f:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 22:13:05 2026 by rpki-client