Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
File:                     6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json)
Hash identifier:          mbkobG62GwjFNou0rlDB8G8SecuJKZwctA6EGbqp2Po=
Subject key identifier:   34:57:51:BC:F5:36:FA:0E:3C:63:E9:F1:58:00:3E:E1:3C:A9:4C:4F
Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
Certificate issuer:       /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Certificate serial:       01A0024B73F2D953D28B8D9E554CDD67BCE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
Manifest number:          0E0D
Signing time:             Fri 14 Aug 2026 22:01:34 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:34 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:34 +0000
Files and hashes:         1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: qEwmlsQ+eTWW40Kpy8rfq523dtGBRXckcX7PzbpVWuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:73:f2:d9:53:d2:8b:8d:9e:55:4c:dd:67:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
        Validity
            Not Before: Aug 14 22:01:34 2026 GMT
            Not After : Aug 15 22:01:34 2026 GMT
        Subject: CN=345751bcf536fa0e3c63e9f158003ee13ca94c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:e8:d6:4d:d8:ef:5e:56:4e:f7:46:62:b2:
                    06:b5:a2:9b:e5:55:24:0b:c5:1e:7a:ce:86:b3:6b:
                    97:90:27:02:28:64:a6:9c:e7:6b:3e:e6:22:78:a3:
                    8d:60:43:ba:85:df:7a:2b:d3:d7:9e:ba:f8:29:c5:
                    2b:1f:7b:ec:7f:36:6c:0c:ac:2c:91:8b:6a:39:22:
                    84:1a:2d:82:48:6b:fa:94:4e:d9:48:64:68:04:95:
                    18:60:6a:bc:83:0c:da:d6:e3:f8:45:4b:a8:ac:f3:
                    7a:ec:b1:e7:f9:28:73:ec:bf:96:37:8a:62:a1:29:
                    c4:1d:90:c6:3b:7c:22:7c:68:cc:92:9c:41:87:82:
                    7c:21:53:42:f5:09:f3:fc:26:11:af:35:f2:06:78:
                    0b:e1:7e:e0:93:f4:79:6a:42:31:2e:4a:c4:4b:f8:
                    51:6b:45:3e:9b:e0:8b:06:e2:b5:0e:5a:72:75:92:
                    c5:3a:fa:cd:20:cb:26:7a:8b:54:6c:b3:ae:65:96:
                    dc:14:ae:79:0d:cb:77:f8:93:57:31:f7:28:2b:a7:
                    60:94:87:74:81:a3:32:e2:da:e5:7d:bb:87:32:df:
                    ce:e2:e3:5b:cc:12:cd:82:10:f4:13:b7:d5:ea:31:
                    3d:de:76:07:47:fb:67:d4:f7:3a:ba:95:27:a8:9e:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:57:51:BC:F5:36:FA:0E:3C:63:E9:F1:58:00:3E:E1:3C:A9:4C:4F
            X509v3 Authority Key Identifier:
                keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:3b:b6:42:09:8e:c1:f3:36:00:7d:0a:bc:7a:0c:93:c2:
         6b:f6:6e:f7:a4:6c:63:5b:3a:d4:77:34:9f:8d:65:e4:10:e7:
         ca:ad:bf:0b:1f:2d:58:29:39:e7:3c:ce:68:ad:74:a2:e6:9a:
         b6:b9:85:ca:f8:db:d4:3d:94:7a:e9:06:1e:7a:46:74:ca:4d:
         92:f6:3f:c6:36:bc:4e:ea:61:2b:13:be:4e:b2:5f:af:39:08:
         e4:bd:a4:de:33:06:cc:72:19:8a:45:05:b3:29:57:88:6b:1e:
         8a:46:04:01:1c:33:b8:0d:db:18:ef:ee:bd:ca:58:08:c0:89:
         ef:e5:f2:c6:f3:44:41:84:d5:a0:eb:31:2d:8a:72:07:18:83:
         78:cd:cb:a6:bc:e2:2c:5d:af:ca:90:11:8b:5f:0e:23:cf:62:
         73:5f:6a:9a:3c:19:48:db:3f:36:4a:b1:5c:86:a6:35:75:68:
         a4:cb:bc:51:3e:62:74:1f:c8:a5:b8:c5:fa:e7:64:83:d8:c4:
         49:e7:a0:f9:9b:93:28:e2:e0:0e:a6:6e:de:6d:c4:df:f3:77:
         a8:9d:0e:84:36:e8:66:1a:eb:1a:d5:ba:71:bd:53:a7:e1:44:
         7f:73:f5:b5:d9:e7:5e:a7:bb:4b:e5:a5:b6:8c:7b:d6:b3:2b:
         84:b8:28:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACS3Py2VPSi42eVUzdZ7znMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzU1MmZjNDVhMzY2NDA5YjlmYzdiZDk2MTNhNTlmMWZl
MDZlNGQwHhcNMjYwODE0MjIwMTM0WhcNMjYwODE1MjIwMTM0WjAzMTEwLwYDVQQD
EygzNDU3NTFiY2Y1MzZmYTBlM2M2M2U5ZjE1ODAwM2VlMTNjYTk0YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFro1k3Y715WTvdGYrIGtaKb5VUk
C8Uees6Gs2uXkCcCKGSmnOdrPuYieKONYEO6hd96K9PXnrr4KcUrH3vsfzZsDKws
kYtqOSKEGi2CSGv6lE7ZSGRoBJUYYGq8gwza1uP4RUuorPN67LHn+Shz7L+WN4pi
oSnEHZDGO3wifGjMkpxBh4J8IVNC9Qnz/CYRrzXyBngL4X7gk/R5akIxLkrES/hR
a0U+m+CLBuK1DlpydZLFOvrNIMsmeotUbLOuZZbcFK55Dct3+JNXMfcoK6dglId0
gaMy4trlfbuHMt/O4uNbzBLNghD0E7fV6jE93nYHR/tn1Pc6upUnqJ6DwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRXUbz1NvoOPGPp8VgAPuE8qUxPMB8GA1UdIwQY
MBaAFOo1UvxFo2ZAm5/HvZYTpZ8f4G5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4Mzct
ZDQxYzNlM2MzNTU1LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4MzctZDQxYzNlM2MzNTU1
LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroM7tkIJ
jsHzNgB9Crx6DJPCa/Zu96RsY1s61Hc0n41l5BDnyq2/Cx8tWCk55zzOaK10ouaa
trmFyvjb1D2UeukGHnpGdMpNkvY/xja8TuphKxO+TrJfrzkI5L2k3jMGzHIZikUF
sylXiGseikYEARwzuA3bGO/uvcpYCMCJ7+XyxvNEQYTVoOsxLYpyBxiDeM3Lprzi
LF2vypARi18OI89ic19qmjwZSNs/NkqxXIamNXVopMu8UT5idB/IpbjF+udkg9jE
Seeg+ZuTKOLgDqZu3m3E3/N3qJ0OhDboZhrrGtW6cb1Tp+FEf3P1tdnnXqe7S+Wl
tox71rMrhLgo1w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:55 2026 by rpki-client