Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File:                     6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier:          DYsG9DDyyszuHhmDL53vTtNy8yQJzXtJuusFCKDbkjU=
Subject key identifier:   73:10:CD:E1:D9:CF:A4:A2:22:47:4A:37:51:8C:8D:6D:B1:2E:DD:66
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer:       /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial:       01A00093749DC44865A05ADE27CD0326B6EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number:          0DE8
Signing time:             Fri 14 Aug 2026 14:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:58 +0000
Files and hashes:         1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: RJ+nP29BwOYqKwzI01Dta1YUSXUSWocOBVgnyXb8t/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:74:9d:c4:48:65:a0:5a:de:27:cd:03:26:b6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
        Validity
            Not Before: Aug 14 14:00:58 2026 GMT
            Not After : Aug 15 14:00:58 2026 GMT
        Subject: CN=7310cde1d9cfa4a222474a37518c8d6db12edd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:94:20:3d:f6:36:d6:06:6e:c0:9f:33:db:
                    e9:43:50:72:35:24:77:2d:f7:e9:21:b3:77:2a:85:
                    b0:72:0d:c5:29:98:fe:c0:dc:af:9e:0a:79:d4:0c:
                    90:70:0e:49:8b:bf:6e:66:b8:ea:a3:60:b9:ef:75:
                    db:dd:de:ee:ce:c6:94:55:a9:19:fe:79:64:91:d3:
                    6e:41:09:e3:29:50:5a:1b:04:25:bf:41:ff:78:47:
                    2e:c0:d7:49:99:1b:89:fc:c6:50:91:d1:16:cf:9d:
                    ec:c6:bb:48:d5:8c:28:0b:ef:d1:71:86:96:e5:fc:
                    d3:0e:98:74:f1:eb:34:69:34:80:f3:3d:44:58:e5:
                    3d:49:66:02:9f:08:5b:16:22:c9:2c:e7:36:95:96:
                    d8:7e:04:8f:4d:e0:46:5c:9d:66:35:ba:f6:52:c1:
                    03:d5:ba:8a:96:f7:3c:f9:6a:05:71:97:b5:eb:3d:
                    d8:42:55:26:ce:1b:1c:3c:f6:54:55:00:a2:88:a9:
                    50:b6:a0:ac:51:df:82:4f:18:b1:fa:8e:61:0e:f7:
                    4f:20:66:8d:a1:7f:e4:64:2b:ff:42:d6:81:40:a7:
                    a4:00:d1:04:12:65:f9:a9:89:02:54:16:87:bc:67:
                    1d:3e:56:fe:41:a5:48:93:b3:38:ba:40:42:aa:92:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:10:CD:E1:D9:CF:A4:A2:22:47:4A:37:51:8C:8D:6D:B1:2E:DD:66
            X509v3 Authority Key Identifier:
                keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7e:34:b3:5d:ef:91:c8:b1:41:bc:f5:da:61:60:c3:0b:8a:
         8a:24:57:73:69:7c:a4:52:81:18:02:6d:55:db:90:66:a3:d1:
         0f:04:bb:e7:94:6e:30:fe:35:f0:09:73:d0:7f:60:10:57:80:
         90:8e:90:85:57:33:e8:9f:d3:7e:71:78:4a:59:c6:8d:80:94:
         e3:f1:57:71:b6:a0:15:22:ec:2f:6f:4b:98:05:75:92:1a:00:
         56:b9:e5:6f:64:5a:4c:3a:53:2c:a2:df:5b:30:38:f8:8d:26:
         8b:d7:b1:d7:e2:78:35:74:66:97:67:2b:93:2c:b4:14:85:4d:
         93:bd:d8:53:e1:12:66:f4:75:81:87:cf:b5:f4:6f:e6:96:a5:
         c5:3a:6a:f2:dd:8a:26:9e:ab:94:ff:47:b2:c8:29:e3:8b:fb:
         c5:a6:70:7c:8f:31:a1:4e:5d:5c:f0:56:55:60:0c:a7:73:03:
         43:f4:47:d5:09:44:85:0f:f7:38:93:88:b5:2e:af:6f:8d:59:
         e1:67:77:41:b6:6a:13:68:fe:3f:d4:87:25:73:2f:fc:31:72:
         f4:1e:b8:67:e8:ba:89:c4:1a:f7:ea:bd:03:25:c7:cf:c5:af:
         11:30:6b:fd:aa:e1:58:4f:77:74:8c:11:dc:06:fc:9c:6f:42:
         df:d2:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:51 2026 by rpki-client