Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File:                     2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier:          K5K+Zrte6Im36TSqv7558HIsAtUM6TD6jupUAx7s8EU=
Subject key identifier:   61:F7:10:AC:03:F4:07:04:C3:23:CD:E3:B5:68:E1:B0:92:82:D0:0F
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer:       /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial:       01A0016FD6DC13BC4E76F6A604986D9F119E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number:          0C6A
Signing time:             Fri 14 Aug 2026 18:01:41 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:41 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:41 +0000
Files and hashes:         1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: 8hxEGEhvpfYedKSFbHNBRwJw+RuJfl0SNSFqH+H1Sr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:d6:dc:13:bc:4e:76:f6:a6:04:98:6d:9f:11:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
        Validity
            Not Before: Aug 14 18:01:41 2026 GMT
            Not After : Aug 15 18:01:41 2026 GMT
        Subject: CN=61f710ac03f40704c323cde3b568e1b09282d00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:c7:cf:5f:b7:5b:45:7c:f2:df:d3:1c:eb:
                    02:9e:63:61:be:d5:56:a9:50:5e:49:19:01:0a:fc:
                    fc:7a:a8:fe:51:47:33:0d:ab:9b:cf:7b:84:5c:f0:
                    ef:3b:cb:34:eb:c1:da:98:3f:d0:ff:20:6d:fd:b2:
                    33:47:f7:e8:a1:8c:d5:f2:0a:20:e4:a8:6b:9a:c0:
                    79:4f:80:bd:35:d9:70:b3:7e:59:74:e1:82:59:66:
                    df:e7:c4:4f:48:ae:f5:ec:c8:3d:49:c3:7d:bc:dc:
                    0f:46:a7:c0:43:86:07:b7:78:72:32:17:12:af:0c:
                    df:ef:57:7b:f2:cf:d7:a9:be:67:9d:5f:9e:b1:57:
                    f3:47:de:0a:e9:66:71:f9:3a:3c:f3:5e:49:51:8d:
                    d9:75:aa:4b:d7:77:a4:62:b4:01:ce:b8:bf:b4:6a:
                    ed:46:db:40:07:c6:48:7e:c8:e2:ac:6a:04:9f:07:
                    10:8d:40:fe:66:c3:bb:7a:d7:59:d1:a7:8d:6c:7f:
                    ac:55:46:db:42:0d:f0:44:09:09:2f:88:de:a2:2f:
                    76:99:b9:83:bc:9d:59:1c:c0:6b:32:13:43:3a:50:
                    f5:62:b9:6e:49:27:86:f6:69:29:d8:0f:ef:01:ae:
                    5e:58:0d:94:48:e5:0f:11:dd:17:d4:3d:cb:7d:55:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:10:AC:03:F4:07:04:C3:23:CD:E3:B5:68:E1:B0:92:82:D0:0F
            X509v3 Authority Key Identifier:
                keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:ae:48:a6:27:e0:26:b2:9a:f3:b2:c2:76:b0:22:6c:97:
         d9:32:ff:04:99:43:fb:c6:9f:61:38:6a:93:a7:50:5f:12:d5:
         1c:c2:b5:e6:de:39:a9:c4:24:23:42:30:0c:26:89:88:65:c8:
         d3:3b:1c:54:b2:78:8f:7a:e9:a4:7b:d6:82:18:2a:6f:a6:64:
         39:a5:18:b9:5b:00:c0:f2:ac:1d:93:8f:bd:00:a8:c8:74:13:
         74:51:2c:80:c7:a1:76:1a:87:e7:4e:ae:51:ff:b2:cb:af:85:
         a3:d2:25:19:6f:97:1f:34:ee:5c:61:25:46:5a:80:01:fe:9c:
         0d:45:b5:5e:d3:55:86:65:53:ad:cc:63:16:ea:e4:0d:25:09:
         d2:38:89:93:9e:78:77:4c:f0:51:f0:93:7c:2d:6b:26:ea:10:
         1d:fc:d6:d0:57:fa:4c:0e:aa:1e:bc:eb:24:a3:ae:fa:61:07:
         e6:46:62:19:cc:d8:3f:de:31:37:96:92:0f:f3:ce:70:82:c1:
         37:39:42:36:08:cb:40:26:da:fa:32:63:35:43:bc:d7:23:12:
         62:ad:c4:9e:55:11:b3:3e:81:37:af:b8:2e:20:7e:4b:55:91:
         e6:57:e3:48:bc:74:9d:2a:aa:64:03:42:b2:4f:74:c8:5b:14:
         34:3e:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:00 2026 by rpki-client