Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          8eW+6QtfmkIULESrSZBGCrqx6j4G5knFZgewzUpZ3JE=
Subject key identifier:   ED:A4:BE:F4:F1:FA:EE:89:6B:02:AD:20:34:BE:A6:D4:D0:60:F0:E1
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       01A0C40DD66829FC66C4CB860D4286893563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          18B0
Signing time:             Mon 21 Sep 2026 13:00:36 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:36 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:36 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: NsyF5YJoxzXSJ4e3ETo6cCtq50zwJsscvvzCkvnDIHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:d6:68:29:fc:66:c4:cb:86:0d:42:86:89:35:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: Sep 21 13:00:36 2026 GMT
            Not After : Sep 22 13:00:36 2026 GMT
        Subject: CN=eda4bef4f1faee896b02ad2034bea6d4d060f0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:00:59:1e:32:89:78:c7:db:f4:9f:dd:f9:
                    7c:d9:1a:0b:fd:91:b2:08:e7:1b:51:3f:e3:b8:b9:
                    a2:f3:87:e2:86:0b:3f:49:24:74:ae:93:84:24:98:
                    f8:dd:db:c8:c1:c0:c8:fd:b9:39:3b:6f:2b:d4:30:
                    88:6a:3e:b4:96:b4:f4:0c:38:6f:f3:63:f9:2e:19:
                    24:69:c9:5a:cc:50:a9:7a:03:f3:8a:d9:bc:b1:b5:
                    85:0e:4c:6a:fe:08:46:cb:18:a4:8d:b3:54:9e:66:
                    6b:37:12:9d:53:c4:26:84:a9:2d:0a:70:2f:bf:e1:
                    2c:f6:72:d5:f6:d3:32:31:69:e6:b0:9e:57:92:c2:
                    91:cc:df:72:b8:25:11:49:a2:eb:a2:8f:8e:29:ab:
                    0b:54:7b:fd:24:cc:9a:06:3a:91:41:f0:be:07:ef:
                    83:3a:ea:5b:94:4a:85:88:29:e4:05:e2:e2:47:b7:
                    bf:68:ca:d8:fe:86:2f:9b:b7:47:ca:0b:89:e9:df:
                    3a:34:cc:2f:0a:06:80:95:e0:d6:91:f3:1b:8e:b5:
                    43:93:55:f2:13:ee:50:e1:1a:01:9a:fd:11:86:9d:
                    f6:ff:49:dd:a4:d7:ae:0f:47:d9:e0:28:4f:5b:94:
                    73:50:fd:04:82:57:c5:c9:9b:cc:55:83:59:57:92:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:BE:F4:F1:FA:EE:89:6B:02:AD:20:34:BE:A6:D4:D0:60:F0:E1
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:69:64:57:6a:17:73:1b:81:20:6e:4b:2f:db:60:cb:5f:3f:
         b4:3c:f2:2b:43:6f:9b:18:ed:7e:df:0e:db:33:ab:a0:ef:0d:
         6b:b3:65:4e:38:b1:e0:94:71:6b:d1:9d:ef:7a:b3:54:72:7d:
         38:5d:df:02:88:03:21:8e:8d:ef:05:3f:59:63:4c:db:03:af:
         5e:e1:22:2f:2d:95:e4:13:a4:fe:cb:33:73:f2:49:84:69:9e:
         ec:29:de:60:ec:dc:3d:f6:14:23:39:f2:bf:80:90:70:7d:e2:
         1a:95:78:16:c2:b9:4d:c1:d3:2d:0f:9d:0a:3b:31:de:3d:95:
         01:05:7d:d9:d6:3b:41:53:c8:e1:42:b5:38:cd:aa:6a:47:97:
         a2:e7:5a:dd:f1:33:2e:fe:ed:ec:7e:65:26:29:9b:d0:f2:98:
         ad:b0:a9:03:6a:36:02:7a:38:bb:03:13:6d:40:30:be:fa:d1:
         a8:27:0c:ae:f3:8e:07:30:5f:19:98:2b:9e:1d:df:8b:e4:9c:
         ca:0c:5e:54:1f:c0:1c:7b:05:2b:af:29:54:a2:ec:a3:2a:c6:
         5b:93:3e:34:18:17:cd:97:b9:00:14:4d:de:da:c8:4a:0c:d3:
         e0:04:37:ad:c9:59:00:c4:c0:39:62:18:a5:65:0e:23:b2:a4:
         6d:eb:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----