Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          lvl+lu/vg80QTxVlvqPzCsJWQMEMuFzQu7FO0xTkaeQ=
Subject key identifier:   FD:BF:B6:93:15:5F:6F:5B:CB:C8:E8:15:0A:25:00:D1:28:B0:22:54
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       01A0D760981F2B883501CB9F5B584E00CF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          1296
Signing time:             Fri 25 Sep 2026 07:03:46 +0000
Manifest this update:     Fri 25 Sep 2026 07:03:46 +0000
Manifest next update:     Sat 26 Sep 2026 07:03:46 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: MybnQjwWmkJPwqjTNjC7M6CQlMS357kRaDjAP2KSbxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:60:98:1f:2b:88:35:01:cb:9f:5b:58:4e:00:cf:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Sep 25 07:03:46 2026 GMT
            Not After : Sep 26 07:03:46 2026 GMT
        Subject: CN=fdbfb693155f6f5bcbc8e8150a2500d128b02254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:21:fc:1c:b7:9f:60:5b:88:f5:6e:8b:6e:
                    aa:37:4a:49:92:e0:81:75:44:91:f5:a1:a1:ae:c8:
                    a8:0f:ea:1d:dc:3c:ab:ff:a2:7d:52:d2:0a:69:5f:
                    6e:4d:d0:bb:29:92:b4:cb:91:3a:a5:e3:16:5d:1d:
                    26:d8:7d:e4:d5:80:0d:6e:42:69:a5:3c:10:89:14:
                    0d:4e:d8:32:6c:e5:9f:c8:88:4c:64:e2:d8:02:35:
                    07:a0:2c:f2:73:06:61:76:08:38:06:0e:28:3c:e0:
                    3d:69:d2:64:aa:fe:b9:5f:94:06:3e:00:09:c2:63:
                    f6:f8:ae:3d:2d:2d:0e:3c:e8:9f:3c:5b:82:93:e1:
                    4d:fb:db:ae:9d:1d:eb:1d:62:be:a5:3c:a5:4e:68:
                    f2:b9:97:ec:dd:81:e6:d3:94:a4:5c:4f:d5:3f:b5:
                    44:94:a6:39:db:16:b9:ec:0c:d2:eb:6e:ee:67:b0:
                    02:8a:0e:c1:20:ff:d4:00:88:80:0d:e3:a1:74:c6:
                    c2:ae:72:28:8e:4f:f7:a5:e9:d3:35:9d:e5:fe:1d:
                    26:c2:2a:50:07:34:bb:a0:01:6e:30:23:ab:05:90:
                    b4:60:fc:1b:cf:32:72:43:fd:97:bb:88:00:8b:44:
                    b4:16:5f:c5:71:eb:d7:6a:34:ee:04:3d:09:e8:1d:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BF:B6:93:15:5F:6F:5B:CB:C8:E8:15:0A:25:00:D1:28:B0:22:54
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:5e:ee:70:a9:23:d2:e3:a9:6f:e9:09:2f:cf:2c:34:7f:
         89:79:75:c8:b6:b6:12:9f:41:fe:5f:63:d4:fd:e6:7c:98:d1:
         ec:a1:38:00:8d:df:55:88:31:c3:56:29:d4:b4:86:76:cc:73:
         61:bd:58:41:de:ae:4f:4c:27:08:a3:40:dd:88:32:d5:cb:05:
         76:31:c8:e3:e4:e9:94:79:84:f4:68:79:09:2f:75:2d:b3:7d:
         78:21:d3:39:b3:8e:85:eb:53:13:f3:67:08:9c:24:90:54:67:
         2c:30:fe:be:71:53:1b:db:ae:e7:4c:35:46:e7:18:da:da:af:
         3d:a3:89:a2:af:27:7a:af:71:f4:6f:86:b8:02:9a:7b:2b:db:
         a8:bc:bc:2b:74:7d:da:15:2d:a1:17:29:82:3d:e8:a9:ae:28:
         fd:14:ab:e7:db:c3:f3:f1:bf:42:a3:2e:ff:c2:ac:46:62:22:
         47:a1:96:85:02:e1:f9:26:31:e3:8c:74:00:4f:52:91:bf:d3:
         95:51:01:53:af:2c:c4:50:bd:28:0e:d2:4a:af:36:48:26:07:
         27:b6:a5:6d:5d:5f:bb:f8:20:38:3a:f6:11:f6:b2:88:87:b5:
         ce:52:97:77:f4:44:59:10:17:0a:b6:06:fd:ec:74:89:77:46:
         57:69:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:57:14 2026 by rpki-client