Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          myVYfZaUfLYufBr8JVYeAAuCgrjj+7qufWWjl6WZ08Y=
Subject key identifier:   11:39:57:9D:44:44:57:82:30:B4:60:1B:04:E4:08:D6:81:64:F0:88
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       01A0C40E27F3FC09C6619F3ED14CE06A89B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          079F
Signing time:             Mon 21 Sep 2026 13:00:57 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:57 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:57 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: XMv6c0/+sQBBOfR+/H2P3NUGyuO2RfvKne9IqleSexs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:27:f3:fc:09:c6:61:9f:3e:d1:4c:e0:6a:89:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Sep 21 13:00:57 2026 GMT
            Not After : Sep 22 13:00:57 2026 GMT
        Subject: CN=1139579d4444578230b4601b04e408d68164f088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:16:23:3f:98:67:21:56:13:37:3c:15:83:
                    5f:89:b9:1f:2a:63:ed:be:c2:dc:9d:c6:06:c2:3a:
                    7f:d3:40:61:d3:12:94:e6:d3:95:cd:ef:8f:29:d5:
                    ef:e6:62:7a:dd:d9:c6:0f:d1:29:b1:40:19:9f:1c:
                    eb:95:03:3c:ec:cd:da:d2:f7:65:76:51:be:f6:db:
                    21:54:0b:57:bc:06:7c:2e:b9:52:13:46:70:24:5a:
                    d9:d9:ff:13:52:2d:f7:b5:38:3f:26:b0:f5:95:84:
                    cf:9b:5f:4a:4e:42:1c:97:5d:e3:a2:c9:f2:0f:76:
                    14:d7:56:4a:00:36:0a:fc:7a:51:b5:8a:ee:8e:d1:
                    a4:18:5f:1d:88:da:0f:5d:f8:56:e9:86:b7:23:d1:
                    e3:bb:2d:c5:43:d0:15:4b:b5:82:88:3d:fc:94:18:
                    a4:d8:27:1e:ae:69:43:27:c5:eb:a8:ad:3c:82:10:
                    2d:40:29:51:db:65:7c:33:76:b8:11:09:a3:32:d8:
                    4a:df:10:67:e5:29:42:b7:5f:34:55:89:6b:5d:b0:
                    d0:8c:ba:f5:04:af:ce:9b:5d:78:1f:de:bf:d4:b9:
                    b1:64:72:a2:00:c0:21:fd:89:3a:89:82:52:29:e0:
                    7e:4e:55:df:cf:23:3c:4a:15:7c:09:52:3d:9a:61:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:57:9D:44:44:57:82:30:B4:60:1B:04:E4:08:D6:81:64:F0:88
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:48:37:e8:9a:f2:bc:28:37:bc:a6:3a:94:77:9a:90:52:84:
         db:81:a8:6e:b4:b0:35:44:1e:d4:c6:0b:8f:1e:eb:17:6e:bd:
         4c:53:c7:e2:2d:b9:f3:ea:6a:98:e3:48:c4:d5:dd:58:06:13:
         a0:98:be:27:39:b5:89:26:d5:2b:71:0e:93:60:b9:a4:b6:45:
         93:48:d8:a7:15:b6:fd:73:a7:e1:4a:bf:63:e2:9b:a2:ff:40:
         31:7e:43:78:f2:28:2f:93:ab:64:eb:38:ab:04:90:fe:17:20:
         58:a3:3c:2e:da:bd:af:b5:5e:7f:fa:8e:97:5d:6b:18:98:b8:
         b3:4e:6f:ad:e7:25:a9:4a:be:44:3b:e6:53:98:1d:91:08:a1:
         b0:40:66:5c:e7:fa:ba:82:b7:ee:8f:78:e1:2f:34:98:09:a8:
         95:31:c9:ed:a4:fc:83:bc:12:2f:ce:fb:f5:e3:a2:d8:c1:7c:
         75:ce:e9:e9:97:a3:52:15:b8:b0:44:6a:6d:1d:e7:8c:43:9c:
         70:72:01:0b:9d:43:db:82:81:67:d6:7b:76:ed:38:fc:da:a6:
         b6:68:9b:0e:8b:95:03:c9:74:93:e2:57:dd:e7:17:ae:55:fb:
         a2:01:60:4b:46:03:56:63:a2:17:05:62:02:97:34:54:00:d1:
         c9:08:0b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDifz/AnGYZ8+0UzgaomyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjYwOTIxMTMwMDU3WhcNMjYwOTIyMTMwMDU3WjAzMTEwLwYDVQQD
EygxMTM5NTc5ZDQ0NDQ1NzgyMzBiNDYwMWIwNGU0MDhkNjgxNjRmMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBYWIz+YZyFWEzc8FYNfibkfKmPt
vsLcncYGwjp/00Bh0xKU5tOVze+PKdXv5mJ63dnGD9EpsUAZnxzrlQM87M3a0vdl
dlG+9tshVAtXvAZ8LrlSE0ZwJFrZ2f8TUi33tTg/JrD1lYTPm19KTkIcl13josny
D3YU11ZKADYK/HpRtYrujtGkGF8diNoPXfhW6Ya3I9Hjuy3FQ9AVS7WCiD38lBik
2CcermlDJ8XrqK08ghAtQClR22V8M3a4EQmjMthK3xBn5SlCt180VYlrXbDQjLr1
BK/Om114H96/1LmxZHKiAMAh/Yk6iYJSKeB+TlXfzyM8ShV8CVI9mmG5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE5V51ERFeCMLRgGwTkCNaBZPCIMB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0g36Jry
vCg3vKY6lHeakFKE24GobrSwNUQe1MYLjx7rF269TFPH4i258+pqmONIxNXdWAYT
oJi+Jzm1iSbVK3EOk2C5pLZFk0jYpxW2/XOn4Uq/Y+Kbov9AMX5DePIoL5OrZOs4
qwSQ/hcgWKM8Ltq9r7Vef/qOl11rGJi4s05vreclqUq+RDvmU5gdkQihsEBmXOf6
uoK37o944S80mAmolTHJ7aT8g7wSL8779eOi2MF8dc7p6ZejUhW4sERqbR3njEOc
cHIBC51D24KBZ9Z7du04/NqmtmibDouVA8l0k+JX3ecXrlX7ogFgS0YDVmOiFwVi
Apc0VADRyQgLrw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:09:41 2026 by rpki-client