Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          +2jkSurWLPMrd4u7W7dXmSF4hGUn961W5nUq1j9Tdlw=
Subject key identifier:   0E:0C:B5:A4:17:BC:E0:11:19:6E:0B:84:7D:7D:EA:A6:C7:CB:AD:BA
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       01A0CAB46C4CEA7FC3F14BD9F9FD742F11E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          1A65
Signing time:             Tue 22 Sep 2026 20:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:16 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: 5Q2Hb0Vp9DJbka+dy66VPLX9BmuMlzX0MKTLucdQhx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:6c:4c:ea:7f:c3:f1:4b:d9:f9:fd:74:2f:11:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: Sep 22 20:00:16 2026 GMT
            Not After : Sep 23 20:00:16 2026 GMT
        Subject: CN=0e0cb5a417bce011196e0b847d7deaa6c7cbadba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:8d:bb:85:77:47:e2:ef:ab:8e:7f:93:25:
                    f3:79:15:55:45:1c:40:e2:a9:16:42:a2:2c:ab:2d:
                    f7:74:53:59:3e:88:a7:26:df:7b:e2:4a:7c:f1:e5:
                    b9:a7:95:52:47:93:d3:7b:09:af:dc:e6:0f:f9:23:
                    c1:22:18:db:b8:d7:f5:4e:b8:21:a5:7e:1e:e2:2c:
                    e7:81:44:a8:9f:52:29:d7:74:d4:25:0e:28:3c:f0:
                    b2:53:50:e2:54:8b:32:f2:24:d1:50:bf:91:c3:b1:
                    12:e1:a0:65:db:98:0f:36:99:61:c0:38:c6:8c:48:
                    0b:ad:43:e3:5e:d2:d4:08:dc:01:0f:c9:84:33:34:
                    cc:ad:b8:71:85:90:66:a6:94:90:6c:2e:5d:3b:e7:
                    67:8b:20:af:7a:18:92:82:4f:28:78:fd:cb:a2:a4:
                    a1:0a:48:d6:f4:03:1b:e9:3b:7d:c5:a0:8b:5a:02:
                    ad:9a:81:58:c4:db:b5:51:c3:37:e1:b9:1b:7e:42:
                    1b:ca:05:bb:fc:a2:43:f5:7c:64:6e:1f:28:16:71:
                    6b:3f:e8:b1:0a:3a:34:b8:99:57:a8:4e:2e:14:08:
                    ad:97:05:5b:7e:2d:c8:64:c8:82:aa:53:a5:5f:93:
                    8a:e0:23:43:30:a6:fc:90:27:0f:c0:21:5d:96:23:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0C:B5:A4:17:BC:E0:11:19:6E:0B:84:7D:7D:EA:A6:C7:CB:AD:BA
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:90:84:8b:dd:7b:54:e3:9c:92:c7:a7:13:92:f2:51:ab:
         71:00:0d:9c:13:f7:d6:dd:16:6a:2f:80:2e:1c:76:0e:ed:6d:
         d0:27:a9:dc:df:b6:37:06:49:ea:95:1c:a4:e0:f0:d1:9b:de:
         5e:3d:ac:91:60:03:a6:7f:8b:08:3f:3d:a2:df:9c:bb:ed:ed:
         10:57:6a:6a:c0:b5:8d:b2:68:0f:36:ed:a8:dd:28:a7:4d:64:
         7c:16:fc:89:7e:71:d6:c3:6a:c3:1f:4e:68:73:b6:78:04:76:
         d6:f1:0f:bb:8a:73:01:c3:f8:4a:19:61:9f:86:cc:86:18:0e:
         00:3d:ac:3b:9a:96:0d:24:b7:7c:66:d5:93:7f:5a:72:fa:1b:
         af:21:24:60:16:22:52:a8:df:d5:8d:5c:42:72:c5:80:8d:bf:
         99:b7:0b:74:13:2a:90:a0:08:56:88:31:2d:24:57:b4:c0:2c:
         e8:7c:41:0e:11:40:aa:48:2b:f7:57:0a:11:a5:89:b2:88:bf:
         69:3b:7d:5d:d8:ff:37:31:af:bd:4d:5d:e3:28:42:6d:99:f9:
         cc:93:da:95:51:f8:03:c8:69:d2:a1:f9:49:51:f8:37:c4:80:
         61:68:68:71:46:1d:0f:60:e7:78:1e:ee:a7:d2:91:48:eb:26:
         67:0b:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:38:33 2026 by rpki-client