Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File:                     CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier:          0wqWDPSevGzA3VSXvgf3hbDdQugrR0c5Svnf3ggChHc=
Subject key identifier:   B7:9D:21:F0:11:8A:A1:26:06:8A:8D:84:A2:7E:8B:F8:16:6B:32:E2
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer:       /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial:       019F18309AB66CD3C65998E86AA264EAE836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number:          0806
Signing time:             Tue 30 Jun 2026 11:01:06 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:06 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:06 +0000
Files and hashes:         1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: zQMs2qe9NEvqmbu+oxSXC+GWJ5dM0enugLO5K1/Hpco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:9a:b6:6c:d3:c6:59:98:e8:6a:a2:64:ea:e8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
        Validity
            Not Before: Jun 30 11:01:06 2026 GMT
            Not After : Jul  1 11:01:06 2026 GMT
        Subject: CN=b79d21f0118aa126068a8d84a27e8bf8166b32e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:37:f4:97:ca:3c:a9:d5:d5:12:1f:bf:d5:1c:
                    cb:86:96:8f:48:6b:a0:97:97:90:0d:d0:27:0a:c8:
                    fa:e9:36:1f:41:94:c1:4b:4a:42:24:90:2e:e6:97:
                    66:9a:ba:b5:b2:c0:57:51:24:1e:4d:78:8b:ee:f8:
                    58:9a:3f:22:81:8e:2e:4b:06:50:7a:c2:cb:a0:c2:
                    d8:aa:17:ae:a9:eb:82:7d:45:b1:85:0a:77:20:c2:
                    da:07:b2:65:ee:e9:4a:15:cc:27:fb:d2:30:5b:ff:
                    e1:e6:ff:de:cc:ec:78:f1:92:10:2e:22:e5:88:02:
                    f3:3d:0b:67:c4:5b:84:44:21:b1:35:0e:ca:f7:e0:
                    b4:ba:39:6c:b2:80:4c:d6:1a:ba:ef:97:dc:d8:bb:
                    1d:7d:40:bd:d2:75:47:39:21:cd:a3:f9:1b:1f:58:
                    26:04:47:88:25:43:80:f1:ae:d5:d6:0e:63:8c:c3:
                    fa:e1:00:a8:59:ba:66:fa:11:a3:d2:87:c8:aa:02:
                    b4:1b:d7:54:0e:62:cd:f6:ed:15:90:30:cf:cf:35:
                    53:9d:de:48:b5:87:b5:1d:1e:d6:3b:af:88:10:fc:
                    41:41:70:fd:dc:f2:72:2a:0f:9a:94:32:98:77:c6:
                    3d:dc:f0:86:8d:e7:48:2d:e8:9e:b5:09:bf:e4:0e:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9D:21:F0:11:8A:A1:26:06:8A:8D:84:A2:7E:8B:F8:16:6B:32:E2
            X509v3 Authority Key Identifier:
                keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:24:91:a4:43:21:a5:a5:0b:55:5f:19:2e:01:0b:fd:58:2e:
         be:39:bd:dc:ff:91:f1:b7:c8:ce:77:6c:66:6b:2c:ed:91:8f:
         cf:c2:ed:9b:7e:2b:2d:83:e3:11:ad:2e:38:b8:98:dc:b7:c6:
         05:46:7a:1d:55:92:a0:6a:1c:95:b2:32:6f:5e:6d:e0:7a:1d:
         df:b3:9f:b4:3f:26:da:0a:c9:69:cd:00:83:4e:b4:b5:5d:57:
         cf:1e:b4:db:ab:fd:80:7c:38:83:b7:0e:61:8a:1d:f0:01:12:
         3c:02:34:98:7a:9d:14:48:d3:b3:46:2e:b8:3e:97:9d:5a:97:
         64:14:6c:4d:39:3f:0d:53:e4:c9:86:20:0a:85:77:ec:cf:d0:
         0d:d9:5b:57:dc:28:e8:cc:5a:49:d9:89:ba:e0:fa:14:74:e8:
         c1:30:4f:bd:65:8c:73:e8:6b:dc:7d:03:0c:51:41:1a:ac:aa:
         9e:4c:e8:c9:17:25:34:d3:3e:b7:a6:06:fe:72:b9:3a:08:89:
         a5:d3:34:a9:8f:02:c4:c5:19:03:94:f9:57:80:c8:90:bb:35:
         ff:b4:c4:a8:62:0f:f3:bb:9f:6e:1d:67:fc:8a:4f:f2:e9:06:
         00:8e:40:21:b4:c8:ae:96:c1:62:3f:8f:29:6f:f2:5e:d3:f6:
         f5:c5:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:09 2026 by rpki-client