Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File:                     C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier:          NKcPJRQbyZFlowuxWJOw5eBf0qvUkekrOvdrtzC2SJA=
Subject key identifier:   EC:01:8F:6E:70:14:37:18:EB:F0:2B:85:47:27:38:AD:BD:7E:54:9A
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer:       /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial:       01A13D1384B9A865D4A63A2E9761FE5D8517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number:          1183
Signing time:             Thu 15 Oct 2026 01:00:51 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:51 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:51 +0000
Files and hashes:         1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: ZXZyLU5fZZ4kM37RqERinFJ+iUKKgXDDaCFQzKrnfrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:84:b9:a8:65:d4:a6:3a:2e:97:61:fe:5d:85:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
        Validity
            Not Before: Oct 15 01:00:51 2026 GMT
            Not After : Oct 16 01:00:51 2026 GMT
        Subject: CN=ec018f6e70143718ebf02b85472738adbd7e549a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:9c:c7:97:16:e3:53:e7:11:65:9d:35:69:
                    53:5a:63:e8:a7:41:64:ec:bb:13:5a:59:5f:cf:79:
                    0a:0d:b5:5f:91:fd:31:ed:8b:2f:41:fe:ed:a7:48:
                    94:f7:c1:b9:95:80:9d:a0:0e:97:09:a6:1d:b3:da:
                    6c:50:7a:c6:15:e0:8a:63:5e:33:d9:46:90:b4:17:
                    f1:b7:af:a3:38:f2:97:ce:70:0a:f8:d3:6d:ee:fd:
                    c2:a4:e5:cd:3f:79:93:c9:99:ef:c1:39:82:b3:64:
                    6a:a9:13:6c:cf:75:46:bb:3e:09:25:04:61:2b:a5:
                    bf:62:af:4a:bd:ec:35:3d:de:09:2c:21:51:15:79:
                    2a:fb:1c:9f:4a:d6:d7:50:7c:36:3f:c2:c2:b7:7e:
                    c1:50:3c:4a:31:d6:f3:33:2c:72:f5:4b:c7:40:29:
                    0d:68:60:09:42:44:5c:c1:0c:00:85:bd:b7:6b:08:
                    47:47:a0:75:7c:84:1c:40:56:d6:ba:34:73:19:a8:
                    8f:26:3d:14:a5:1a:07:1e:e9:59:ad:15:d5:f1:13:
                    79:cf:7a:53:c9:53:87:27:a2:21:b6:47:b7:91:06:
                    97:62:f8:9d:8b:c1:d1:1e:11:9c:03:49:47:92:91:
                    6b:07:18:ca:52:00:ea:56:e8:94:be:17:fa:5d:d5:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:01:8F:6E:70:14:37:18:EB:F0:2B:85:47:27:38:AD:BD:7E:54:9A
            X509v3 Authority Key Identifier:
                keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:27:da:fe:4b:dc:a5:c4:44:61:26:06:74:b3:ff:b3:fe:
         af:40:93:2e:bd:22:77:53:ef:e5:8f:da:a7:f1:14:3b:aa:37:
         19:65:42:b6:d8:54:0f:08:8b:d2:fa:1f:0d:ab:3a:9e:dc:b6:
         69:c7:67:82:2b:dd:e4:1c:f8:85:f0:86:7e:d5:90:98:2a:dd:
         8e:b7:18:e8:92:63:96:d3:2a:ea:fa:31:f6:16:e8:61:78:83:
         29:29:8a:e0:5b:35:70:6b:d6:fe:03:56:05:8c:e1:2d:bf:9a:
         3a:a1:d5:d7:c0:2f:dc:a3:c6:da:30:4a:2a:b7:c0:32:51:38:
         2f:62:35:fb:13:38:d7:d0:4d:20:dc:a1:78:4c:09:76:7a:9d:
         0b:bd:ad:c2:f0:66:5a:7a:8d:4b:54:2f:f2:c0:d4:34:1a:6d:
         6e:ce:ed:89:98:d0:17:22:2e:ad:96:f5:8f:73:3d:49:c4:c7:
         ef:e9:f4:e6:fb:e7:32:6b:15:84:2c:71:ac:0e:c1:ac:53:32:
         4e:3d:98:ab:04:c2:af:0d:0c:94:50:e9:04:8b:22:6b:1c:56:
         ff:65:c4:cc:8d:df:38:e2:b3:b5:34:26:9a:79:e7:c2:78:53:
         32:e7:83:90:7b:65:51:8b:cd:87:25:16:d9:b3:23:dd:2c:a1:
         e7:c6:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:43 2026 by rpki-client