Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File:                     1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier:          BMIaGO+0Nm08lBNtD8oaqbAO5NSziiShRCXng99cmUM=
Subject key identifier:   0A:05:10:12:37:27:55:9B:8D:51:69:B7:8F:37:54:69:45:BF:81:87
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer:       /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial:       01A0DF185C2F0F9B0191514C56811D174B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number:          1A6F
Signing time:             Sat 26 Sep 2026 19:01:50 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:50 +0000
Manifest next update:     Sun 27 Sep 2026 19:01:50 +0000
Files and hashes:         1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: Jl8/4UThdabKHoNwRHl82yfTkCNv1N9KWsJkfi9+9FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:18:5c:2f:0f:9b:01:91:51:4c:56:81:1d:17:4b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
        Validity
            Not Before: Sep 26 19:01:50 2026 GMT
            Not After : Sep 27 19:01:50 2026 GMT
        Subject: CN=0a0510123727559b8d5169b78f37546945bf8187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:5c:6c:1a:08:d5:a2:e9:5c:e4:0e:e0:93:
                    cd:64:63:5e:9d:48:2c:63:71:84:9b:5d:98:65:08:
                    1f:11:07:40:ae:fb:90:a2:63:1c:1a:98:56:64:82:
                    63:3d:d6:b9:d9:e4:80:e5:c0:6d:86:2b:79:68:c7:
                    38:fe:e7:86:79:e8:54:15:a3:cf:70:42:1d:3f:ba:
                    8b:7c:5d:2c:32:62:8d:2d:a9:06:a2:af:88:82:19:
                    cf:a8:f7:7c:48:88:dc:10:b8:b4:74:77:a3:0b:51:
                    ef:e5:c4:c5:e4:54:76:b4:48:45:5e:b3:c8:d9:12:
                    54:4d:11:8d:46:26:aa:65:ce:c4:4b:34:ca:20:14:
                    aa:2c:3d:64:1c:fe:94:ea:41:ea:3a:a7:97:c9:d7:
                    fe:f4:a4:02:a0:e7:cc:f9:95:20:49:a0:4b:b0:b2:
                    b7:ed:20:61:b1:88:6d:cd:1e:9a:05:35:39:b4:c4:
                    e1:18:d3:5c:7d:7b:59:5c:b9:71:dc:10:89:3c:17:
                    a7:fe:01:db:70:89:67:dc:27:ee:dd:b6:1c:0d:8f:
                    6c:00:72:61:2f:7c:eb:45:40:bf:6b:99:4d:f1:43:
                    16:60:9f:6b:0b:e4:01:50:d0:10:e6:0a:43:62:8d:
                    24:b1:2c:f0:63:28:97:bf:19:ab:7c:98:74:11:55:
                    e0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:05:10:12:37:27:55:9B:8D:51:69:B7:8F:37:54:69:45:BF:81:87
            X509v3 Authority Key Identifier:
                keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:40:b0:09:97:0c:64:ae:79:8c:1d:e8:05:e9:f3:11:e5:
         1c:e1:0f:95:99:d8:08:da:39:db:a5:33:75:ca:dc:b2:c6:29:
         1b:56:b0:97:f1:36:e2:59:5f:63:b0:b1:b4:3b:e1:17:13:fa:
         d4:8b:37:9f:7a:ad:44:0f:36:77:16:e2:84:58:21:6c:6b:9b:
         a1:be:42:de:b4:fb:af:b0:d8:ad:fb:bf:06:cd:f9:5a:ff:0b:
         59:ec:f7:c9:43:e7:f3:ad:99:6b:4a:86:f0:d9:ce:55:b1:62:
         72:1c:02:e5:0b:5f:3e:1a:89:63:06:84:ca:38:a4:48:3f:02:
         4c:fb:1e:aa:f3:f6:bc:71:16:3e:5a:16:52:41:4d:0f:4f:4c:
         95:22:f1:7f:1f:46:1a:7b:39:15:8b:54:e2:9b:f5:ba:9f:35:
         7b:75:c0:d0:f2:bd:2d:73:7b:76:c5:22:59:5a:70:69:2b:0c:
         bf:83:8b:9e:4f:5c:32:ec:32:1b:fe:71:10:34:14:18:99:4d:
         4c:b3:ba:39:c4:10:2f:98:d6:1d:d1:62:10:6c:0f:c0:dc:33:
         b2:9f:d1:e7:71:d4:a6:ab:0f:87:8a:55:57:2b:6d:c1:d0:20:
         33:fb:77:f9:37:9a:90:cb:c9:02:9c:89:51:d0:1a:92:e1:05:
         93:64:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:50:02 2026 by rpki-client