Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          psZj/uYgTkCGivB2WcRD6gcWRqy3CR/hk4wojdUJO18=
Subject key identifier:   DF:01:5E:B1:AC:27:AC:74:D8:C7:CF:9A:26:51:E1:5C:5C:32:30:3D
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       019FA975C170A591D24D99648AB97247E75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          16DC
Signing time:             Tue 28 Jul 2026 16:01:34 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:34 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:34 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: BswN9TsEukk3LzxE9f3u1IGfIW86gs1RuneKc9Rodgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:c1:70:a5:91:d2:4d:99:64:8a:b9:72:47:e7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: Jul 28 16:01:34 2026 GMT
            Not After : Jul 29 16:01:34 2026 GMT
        Subject: CN=df015eb1ac27ac74d8c7cf9a2651e15c5c32303d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:b0:66:4d:fe:b1:48:18:8e:b3:01:6a:1c:
                    4d:3c:f2:28:3f:8b:c1:97:53:aa:ad:b5:24:f3:9d:
                    d4:6c:89:27:a6:24:48:1c:de:89:fb:51:ec:e6:43:
                    2d:a9:68:da:68:7c:2b:d5:3b:6e:a0:73:47:0c:c5:
                    37:a0:e8:50:e7:39:da:de:f4:57:77:4f:66:37:ce:
                    da:2e:0f:81:28:95:53:1f:6b:7a:c7:69:2f:b1:77:
                    a4:9a:83:ab:21:b4:c3:34:6b:32:a0:55:f4:c8:6c:
                    1a:d7:cf:48:7c:94:39:c9:18:6d:60:03:14:d9:07:
                    b6:96:6e:5f:da:ca:a3:57:a0:8e:ce:fa:b9:3d:8e:
                    24:ec:1c:72:35:35:28:15:df:e1:b2:48:31:18:92:
                    1a:80:9d:5c:ee:b6:4a:87:62:a7:4a:e0:6b:07:7f:
                    b3:73:fc:0f:f3:fc:03:19:12:80:c7:22:11:34:2f:
                    13:ec:bc:82:d5:d2:94:b9:07:31:95:fd:92:db:cb:
                    ef:a2:3c:d2:a1:3b:55:cd:ee:f6:06:25:30:6f:d2:
                    bd:34:a8:1b:cf:0a:bd:83:47:c8:01:c0:d7:cd:8f:
                    54:15:4f:25:48:95:c5:83:f4:b8:00:31:0f:16:0a:
                    7f:8c:06:1e:83:bb:43:1f:97:9c:98:83:e3:7e:6f:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:5E:B1:AC:27:AC:74:D8:C7:CF:9A:26:51:E1:5C:5C:32:30:3D
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:bb:2b:c4:92:f3:bb:be:ea:66:23:c4:d4:e8:0e:fd:06:
         0b:44:7a:a5:e1:47:d4:52:e6:d9:42:e1:d4:9e:03:e5:0b:d8:
         8a:7b:ec:08:54:9f:96:ce:fe:0b:2a:b0:7a:8e:30:24:65:c9:
         59:38:22:a2:a4:7f:ab:76:09:73:66:38:97:f3:86:20:73:3d:
         fe:aa:59:78:66:88:a7:31:1a:ef:c6:29:64:bd:69:20:be:e3:
         6b:29:49:eb:71:33:4b:6e:50:d9:47:a4:a7:d1:74:69:f4:de:
         40:ce:d2:97:ab:27:ad:67:0e:42:08:4d:0e:e7:21:af:be:52:
         5d:c2:96:1d:9f:a1:c1:09:2c:96:10:7d:cb:59:5b:eb:d7:70:
         7f:b4:9b:0c:e5:8b:9d:c8:f8:a8:6d:79:77:b3:56:44:fe:7d:
         cf:92:a4:5f:31:09:0b:b8:ae:30:a4:dd:7d:a6:50:5a:5d:f5:
         2c:66:10:59:f6:c3:e9:6a:d7:2b:22:91:a0:84:39:13:c4:65:
         80:58:b3:5c:40:d5:dd:4d:41:cc:b6:01:59:83:00:31:37:94:
         8b:ea:ac:91:08:8e:21:4f:c1:3e:07:ec:9e:33:85:5d:89:93:
         1f:b2:6e:a6:fa:6d:90:42:36:ad:0e:6b:bf:48:c0:82:5a:7b:
         20:46:20:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:15 2026 by rpki-client