Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          AM6K1xB/LyTBKCfWic78nRlF38IatT7SXBeLrsPphN8=
Subject key identifier:   F9:F3:74:DF:07:4C:6F:00:DC:5C:F2:7A:4B:32:42:FD:65:21:73:27
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       01A0C933E63277773B6F5B5FCF839FD5936D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          1771
Signing time:             Tue 22 Sep 2026 13:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:16 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: Pie2oSMkBL6C+sHc3w1F43hAotZy5riNgEAgln4/pTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:33:e6:32:77:77:3b:6f:5b:5f:cf:83:9f:d5:93:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: Sep 22 13:00:16 2026 GMT
            Not After : Sep 23 13:00:16 2026 GMT
        Subject: CN=f9f374df074c6f00dc5cf27a4b3242fd65217327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:9f:97:9e:0c:b0:8d:a2:92:77:93:84:5b:
                    2a:87:c3:c1:72:2c:16:2c:c2:a3:71:88:2e:7d:b8:
                    88:40:c4:5d:53:6b:8d:dd:46:8a:f0:05:22:18:cf:
                    2e:58:39:35:19:43:d9:d9:d5:c3:9d:e3:78:b2:72:
                    84:8b:a7:d3:7f:68:b2:63:2b:8a:26:38:97:25:ae:
                    5c:f2:fa:1b:42:ab:1a:1e:8b:ee:39:96:1f:8a:6b:
                    df:dc:d2:82:c0:87:e7:c4:49:56:5a:b9:49:e3:1c:
                    6a:70:1f:13:f8:3d:e5:80:b0:d6:e6:55:50:c1:ce:
                    38:b6:a4:46:2d:d4:96:44:f4:8a:cc:6d:c9:72:ff:
                    55:31:3a:2d:dc:39:53:97:a3:b4:40:a4:66:60:c0:
                    f2:ca:90:11:9b:43:2f:fb:0a:99:af:d1:ac:be:76:
                    ea:4e:95:f1:38:e6:94:fc:1c:a6:9d:e3:9f:ad:1a:
                    a7:aa:c0:2c:b1:5e:c4:15:d5:e7:fe:3b:d9:23:41:
                    20:24:1e:7d:28:b9:0b:47:3e:ef:bc:8f:36:e0:af:
                    4c:57:39:5d:65:50:e5:c7:63:b4:3a:3a:fe:ba:4b:
                    2f:72:60:c3:18:95:66:c1:57:bf:a3:b7:93:78:7f:
                    dd:e6:04:fd:de:a4:6e:2e:54:ab:05:61:c4:98:73:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:74:DF:07:4C:6F:00:DC:5C:F2:7A:4B:32:42:FD:65:21:73:27
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:af:f3:fb:9b:d7:06:45:5a:fb:bc:62:c3:64:42:94:11:59:
         1d:af:7f:3a:25:bc:65:00:ad:f3:8f:d0:53:7e:24:fc:47:55:
         32:c8:2a:f7:27:df:ec:14:d7:84:93:e6:f2:5a:f6:c1:75:a3:
         e8:2a:1a:bd:7b:96:f0:b6:44:15:0a:14:24:fe:5d:85:b8:cc:
         11:32:53:1f:85:59:7d:00:a4:2d:99:ba:a6:32:3f:f4:81:d8:
         d0:cf:c0:2b:e4:37:f3:fa:50:06:46:dc:d4:09:ac:4e:12:62:
         f7:a0:f0:df:64:ed:30:0d:42:9a:78:ca:72:be:0d:fb:74:c7:
         cc:8f:1e:a5:75:88:bf:58:cc:82:16:b5:d6:8f:e2:f1:90:85:
         a9:be:c2:00:17:28:90:10:69:dc:d6:ef:92:fd:f7:04:88:57:
         ab:fe:3d:6b:6e:a3:a8:a0:0a:97:be:17:b5:43:7a:12:38:67:
         3b:2d:0d:20:03:67:28:96:ec:a4:94:55:85:49:52:12:f4:9c:
         88:91:b3:b5:11:47:42:5b:02:30:c5:54:cb:d6:66:98:d6:21:
         fc:5a:a1:3e:2a:fe:71:f1:ff:8b:b2:1b:1b:d7:c9:02:d2:6d:
         0e:13:5f:29:ec:d1:68:58:af:b8:b5:5d:b3:0c:73:e2:bd:97:
         83:09:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:34 2026 by rpki-client