Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          mJmIemak5IEBziREUk7BOHZIAJsBqn/N4CgUxEXOgoI=
Subject key identifier:   B8:98:C2:6D:8B:36:78:0D:E6:D4:37:A6:8A:97:92:82:00:1F:48:F3
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       01A12C57C7E79082C7E434A71B97E3386555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          1A98
Signing time:             Sun 11 Oct 2026 19:01:52 +0000
Manifest this update:     Sun 11 Oct 2026 19:01:52 +0000
Manifest next update:     Mon 12 Oct 2026 19:01:52 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: p8Q4190OUEsTaOJtrEtCefHpvuBXD1xqiEogFHk4hV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:57:c7:e7:90:82:c7:e4:34:a7:1b:97:e3:38:65:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Oct 11 19:01:52 2026 GMT
            Not After : Oct 12 19:01:52 2026 GMT
        Subject: CN=b898c26d8b36780de6d437a68a979282001f48f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:5d:2a:79:fb:3b:f5:7d:ae:28:5c:9d:d3:
                    a7:70:6c:3d:84:11:de:09:df:a3:42:17:73:21:48:
                    d6:55:58:0f:3e:05:e9:9f:b3:54:62:6a:41:24:82:
                    e7:98:4d:0f:75:76:bd:9d:5a:49:d5:3a:f4:60:59:
                    a5:76:58:eb:93:8b:5e:cc:76:ca:51:fd:11:83:88:
                    33:be:9a:15:64:0c:77:84:64:cb:59:d5:6d:cb:6d:
                    de:82:8a:11:d7:bd:95:e7:34:1d:af:74:27:64:ca:
                    6b:08:f7:fb:44:e9:c5:ee:c1:73:fb:15:99:d7:60:
                    d4:52:94:31:dd:f3:01:e6:4a:76:87:30:54:31:20:
                    58:07:90:70:30:70:8f:17:d0:75:88:52:cb:e2:03:
                    11:60:bb:15:9d:91:28:4f:4c:75:79:65:26:46:ed:
                    fd:e3:35:6b:bc:a3:fa:3c:a4:38:95:f2:23:14:e3:
                    06:d8:ba:7f:75:a0:98:89:01:f8:9b:2f:9d:35:b8:
                    1d:4d:74:af:96:e9:6d:35:14:3b:4c:84:69:da:0d:
                    fe:79:ae:1d:d7:27:77:aa:e6:3b:b6:9a:ec:7d:b3:
                    48:09:20:eb:f2:1d:15:37:18:7f:1b:e1:87:44:54:
                    aa:db:38:0e:de:e1:e4:e0:39:93:10:2b:18:d0:20:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:98:C2:6D:8B:36:78:0D:E6:D4:37:A6:8A:97:92:82:00:1F:48:F3
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:28:cc:49:a1:8f:ef:83:fc:23:b9:3c:6f:5d:89:bb:99:f2:
         a7:75:af:57:b1:ae:60:ef:da:16:9f:23:d8:89:7e:6a:84:f4:
         2e:0f:33:50:ec:84:f9:e3:c6:33:c4:53:c2:9e:76:46:9d:59:
         bf:5b:f3:5a:e2:e8:2b:ef:bd:42:0c:f0:ba:f5:2f:71:15:6c:
         99:dc:57:1f:49:67:d7:12:73:cf:b7:4d:18:18:ee:e2:d0:37:
         49:b6:82:0f:f7:a8:5b:ad:44:b1:86:e8:fa:20:be:a6:c4:a4:
         3c:ac:b5:4e:c5:9f:ce:9e:cc:6d:4b:99:7c:69:c9:16:ad:2a:
         a8:56:d0:86:89:2e:bf:08:0b:7d:10:74:48:9b:cb:ef:75:b4:
         3c:c6:be:6d:69:f1:07:ff:93:86:93:88:6e:e0:33:50:a7:4f:
         64:6e:2d:40:94:b9:42:f9:22:c7:02:66:b2:21:65:7a:33:6e:
         0c:3f:5f:27:ec:8f:86:7c:0f:5b:bc:15:df:f8:44:98:6c:33:
         b8:c8:dd:b0:33:92:5c:d7:80:51:cb:46:7e:19:42:57:7a:a4:
         bb:5a:2f:00:3a:a6:4c:29:8f:ad:3a:b1:53:09:bc:38:66:60:
         21:44:aa:cf:91:20:1b:8a:29:96:5c:96:45:34:23:f9:5c:b6:
         30:1c:4f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:08:44 2026 by rpki-client