Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          pjcBsVGFaHAT+OaP0Zqpa7FP4R6AunnOOe49lPvbNR0=
Subject key identifier:   4C:43:17:54:3A:3E:24:AA:CA:FB:7D:70:8C:9B:63:6B:6F:17:C5:76
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       01A1C3670DAF32B7837E095F6F94A8769115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          11C6
Signing time:             Tue 10 Nov 2026 03:01:13 +0000
Manifest this update:     Tue 10 Nov 2026 03:01:13 +0000
Manifest next update:     Wed 11 Nov 2026 03:01:13 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: /1IMvkdAXw/7Oo7u3V9lY3umC4zRT/cVnABGr8H5vSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c3:67:0d:af:32:b7:83:7e:09:5f:6f:94:a8:76:91:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Nov 10 03:01:13 2026 GMT
            Not After : Nov 11 03:01:13 2026 GMT
        Subject: CN=4c4317543a3e24aacafb7d708c9b636b6f17c576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:0a:0e:01:35:36:7e:cb:f4:44:68:b0:39:
                    b3:f7:24:27:1c:1a:29:98:3f:88:58:74:d0:eb:ce:
                    1d:7d:56:fe:54:c8:17:ea:de:70:5c:98:ba:77:94:
                    c9:14:9b:7b:ce:88:52:a2:83:1b:22:8b:fd:47:1e:
                    96:c8:05:c5:35:07:87:ff:b5:b9:8c:2d:a3:cc:66:
                    d1:66:22:3a:3e:4f:cb:2b:12:ca:8d:f1:e1:9a:cf:
                    c3:2b:d2:d7:a9:d4:bd:99:3b:f1:9b:31:ed:fb:ce:
                    28:0c:5f:19:6a:0a:25:63:f6:48:14:c1:1e:21:e9:
                    e3:26:ba:96:1d:3a:fe:8c:ff:c6:ff:26:a7:fc:ea:
                    e0:2c:cd:9d:c5:6c:77:db:60:14:03:a1:4e:73:ab:
                    0e:2d:a1:5b:8b:0f:45:4b:ef:d9:43:8a:c2:f4:3b:
                    aa:99:1f:e5:d0:4b:75:30:a6:1f:95:61:c1:1b:f6:
                    9a:32:03:06:02:e6:04:6e:33:8f:f5:74:31:8a:da:
                    47:66:cb:32:67:33:ea:da:e2:22:9e:3e:e3:3b:b0:
                    62:b4:6f:b2:95:62:a8:25:46:58:14:06:cd:ad:26:
                    bf:8b:47:dd:9d:78:be:94:65:57:49:99:ab:88:d1:
                    4b:6e:20:5a:f8:e1:9f:dd:36:a3:76:68:b3:02:83:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:43:17:54:3A:3E:24:AA:CA:FB:7D:70:8C:9B:63:6B:6F:17:C5:76
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fe:d8:11:b9:d2:20:37:67:5b:3b:5e:70:dc:6d:44:bb:56:
         00:f8:57:21:e5:56:ed:80:9e:c8:97:1a:51:c8:9d:3d:0b:f3:
         5c:02:37:43:e5:5e:8d:ac:0f:47:6e:d7:67:76:a8:d2:e6:db:
         ca:ee:10:a5:46:09:d8:47:ce:34:e3:c6:1b:7f:ef:68:40:d9:
         4e:3f:89:87:1a:2d:ff:97:b0:36:64:39:67:27:38:5e:bf:f6:
         a6:be:3b:c6:94:4d:37:bf:36:d8:a9:86:45:de:f7:84:f1:93:
         57:f2:51:f9:39:ff:dc:44:53:62:c5:2d:41:c6:b7:14:e9:3f:
         d6:11:9f:84:d4:14:11:dc:82:e8:66:c0:e0:11:06:d6:8b:f1:
         f2:ac:eb:0f:9d:f4:02:1c:12:aa:0e:f1:b1:e8:12:b3:f8:6a:
         2c:ef:12:d4:1d:4e:40:01:75:d4:d7:b5:db:4c:3a:48:be:00:
         44:4e:4a:9b:c8:34:8f:b0:05:fd:1c:f1:91:37:30:e4:88:e4:
         02:f6:d5:33:ff:d7:2e:6d:e4:97:a4:1a:8d:dc:0b:2f:b8:a2:
         ac:01:85:e6:8c:e3:2f:f3:e0:4e:01:fa:d2:45:57:95:d7:ec:
         4a:b7:cf:4e:24:58:ab:a1:e4:ff:e1:cf:66:f7:bc:70:26:af:
         b9:32:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----