Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File:                     CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier:          S/nza57W+GjFx1dEPePZ6UxqdYSF73lVpQ8mMCdeEO4=
Subject key identifier:   9E:56:A7:BC:12:4C:EE:0D:20:4D:B6:63:75:51:5B:6C:37:07:36:8F
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer:       /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial:       019FAAF58447F139C89327C66BF7604D0727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number:          0852
Signing time:             Tue 28 Jul 2026 23:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:44 +0000
Files and hashes:         1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: +6iw5TdzPOz04XlqovgNxFCcNm/RUo6VEPXk/lWyf5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:84:47:f1:39:c8:93:27:c6:6b:f7:60:4d:07:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
        Validity
            Not Before: Jul 28 23:00:44 2026 GMT
            Not After : Jul 29 23:00:44 2026 GMT
        Subject: CN=9e56a7bc124cee0d204db66375515b6c3707368f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d6:46:ff:fa:b4:cc:3e:ce:97:34:73:44:73:
                    c1:87:65:34:58:3a:b8:6f:27:de:40:fd:bb:f1:5b:
                    70:c0:16:e5:23:ae:87:5c:27:e8:de:77:6a:a8:52:
                    93:5f:29:fa:c5:62:42:bf:fa:92:33:09:d5:19:4d:
                    cf:3b:50:01:71:8e:4b:f0:7d:86:57:67:75:0c:7b:
                    18:07:3f:75:49:8b:63:c2:98:29:47:cf:dd:df:fc:
                    94:a1:eb:f9:23:b2:f9:1a:93:86:e6:a6:55:df:ed:
                    61:a9:bd:40:96:fb:4b:55:cb:74:22:70:49:cd:2b:
                    b9:f2:9a:0f:b7:9b:9c:4a:3b:23:1b:e0:1e:85:e7:
                    bc:9d:20:95:ac:c4:52:ba:50:5e:26:66:e2:57:28:
                    20:ce:10:22:32:8d:4c:65:d5:89:b3:d1:e8:1f:fc:
                    a3:8d:70:78:7e:db:72:e0:82:61:45:7b:9a:ff:8d:
                    2a:50:64:7e:c7:c6:65:6c:d1:fc:56:dd:b9:d3:7a:
                    21:d7:32:51:99:5e:31:59:e7:73:dc:c7:60:80:c9:
                    85:b3:37:6d:bf:4d:e6:72:eb:aa:ec:72:6d:12:cd:
                    d3:a2:4b:b1:7d:a3:94:fe:85:48:28:bb:98:a0:09:
                    26:59:b2:b7:1e:b4:5c:38:d4:09:af:b3:45:8a:e0:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:56:A7:BC:12:4C:EE:0D:20:4D:B6:63:75:51:5B:6C:37:07:36:8F
            X509v3 Authority Key Identifier:
                keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:10:9d:9e:ac:59:ef:6c:7e:8d:ca:da:5d:cf:d0:a3:36:
         59:39:a5:4c:47:f4:fe:2e:69:12:01:be:94:78:87:01:6f:e4:
         49:20:53:d7:58:fb:ba:7b:41:f0:a1:c8:65:ec:d8:84:58:9f:
         61:78:07:9f:14:aa:3a:12:f4:cf:7a:c9:05:2d:31:12:95:a3:
         e4:df:0d:3f:eb:7d:eb:b4:12:14:b1:a4:9e:27:67:55:4a:1b:
         d9:15:bc:fa:ca:79:9b:68:3b:0f:92:4c:c1:4e:c7:74:da:65:
         dd:e6:6c:02:65:d1:a1:46:1e:77:c6:34:26:01:12:aa:5e:9d:
         3c:ee:25:56:81:66:82:86:ff:e5:9b:47:15:97:6a:16:0f:dc:
         e3:2f:c9:d0:82:2b:18:7a:9d:82:e8:f8:df:d7:ae:c8:6d:b1:
         75:f8:86:10:91:05:62:f5:f6:3f:dc:e2:12:86:93:e0:a1:ac:
         e7:68:ab:b1:d3:f9:05:fe:b2:18:dc:53:de:9b:01:73:53:0c:
         df:2a:a2:1b:38:da:a5:91:27:42:bc:25:b7:db:bb:d9:29:6c:
         7d:23:d9:ac:3a:83:84:4e:37:fe:46:e3:e3:bc:d1:82:ad:55:
         64:04:65:45:51:25:91:bb:f2:20:58:38:62:a9:30:77:cb:b5:
         57:20:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:01 2026 by rpki-client