Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          bgNJVOTGUQZB5yxqGFcygy64WKCykt3nZa/oE07hY/E=
Subject key identifier:   C9:D5:7C:D9:49:6E:FC:C1:73:19:64:41:E7:03:AC:1C:73:8F:7F:32
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       01A0C28D21320F88846E8E0ADDEC5F4D3020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          1141
Signing time:             Mon 21 Sep 2026 06:00:23 +0000
Manifest this update:     Mon 21 Sep 2026 06:00:23 +0000
Manifest next update:     Tue 22 Sep 2026 06:00:23 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: HB7dWKuz9rqt4ahRuUiHOHnj7sUaLWQ52fGai3GgS4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:21:32:0f:88:84:6e:8e:0a:dd:ec:5f:4d:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Sep 21 06:00:23 2026 GMT
            Not After : Sep 22 06:00:23 2026 GMT
        Subject: CN=c9d57cd9496efcc173196441e703ac1c738f7f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:39:fa:14:89:ea:f0:61:26:58:0a:f3:e0:
                    40:93:5a:e7:02:7b:43:44:f4:2a:aa:40:26:78:d7:
                    ad:30:db:8c:5f:5a:d1:2b:b9:33:76:18:d7:ee:df:
                    79:17:9b:31:ea:d4:b5:d6:71:e0:12:f0:02:f4:90:
                    16:4e:5e:85:35:75:6a:55:04:59:87:ef:b1:24:75:
                    81:cc:54:95:15:bb:0a:2e:8c:eb:e8:a8:16:3f:56:
                    8b:d6:33:a2:17:48:08:3f:e2:df:29:98:5e:45:81:
                    f8:ea:4c:67:5a:50:15:c2:50:40:95:82:69:fb:0b:
                    e4:50:9c:57:52:2a:59:b1:39:94:50:1c:eb:d6:8f:
                    60:9a:ff:46:ab:b7:08:45:d6:29:fb:5a:02:38:05:
                    32:c8:57:a5:90:19:14:4d:ce:24:5a:ca:52:9b:b2:
                    91:4a:d1:3b:4e:c7:db:b7:e6:0f:c6:5b:01:c4:40:
                    3d:64:3d:ab:48:bb:87:a8:65:60:ac:79:a0:b6:5f:
                    40:6d:79:62:fe:a4:c0:6e:f8:4c:5f:38:a2:8c:ee:
                    53:46:49:27:1f:33:b1:bb:31:af:38:11:dd:50:8b:
                    e2:47:b0:09:a2:5d:0e:03:5d:79:d9:fd:13:8f:da:
                    51:ef:24:5c:00:a2:ce:0f:d4:3c:9e:4c:f8:cc:40:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D5:7C:D9:49:6E:FC:C1:73:19:64:41:E7:03:AC:1C:73:8F:7F:32
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e6:d1:11:af:a1:59:73:34:0c:17:a6:b9:bb:26:4f:b0:c8:
         d8:15:77:7c:a7:1b:f6:ff:59:77:af:42:15:c3:6a:89:2f:6d:
         92:a8:30:f8:ed:d3:4d:4b:68:8d:41:23:dc:2d:a8:1c:22:2b:
         f2:0d:e1:48:d9:87:29:a4:ad:7c:97:20:ed:ef:4a:80:c7:05:
         d9:9a:2f:de:99:4c:98:f8:b3:34:ec:70:3c:e8:62:87:ca:45:
         5d:0d:bb:11:4f:9e:0f:3d:34:27:35:36:f1:25:7f:65:31:6d:
         93:d0:13:2a:0b:28:c2:f9:f1:73:6d:b8:9b:59:c1:39:ab:20:
         57:80:63:09:dc:a1:67:70:f2:62:bc:78:58:dd:fb:ff:b8:c2:
         06:08:da:a0:9e:7d:78:de:67:1a:36:c4:3b:50:9a:5e:2f:d0:
         2d:86:ff:d4:c7:33:14:a9:d3:ca:62:57:fe:2e:e0:4f:41:7a:
         da:2f:85:4f:c6:e5:17:4e:5f:19:5f:3a:e0:8e:53:69:ae:44:
         1f:e0:93:87:bf:2d:5b:61:82:d2:98:04:36:1d:f2:c0:5c:73:
         bd:e7:04:27:6a:34:b1:b5:ec:b9:9a:08:e3:7a:65:8f:de:ec:
         bd:0f:03:23:fd:61:67:19:f2:eb:c9:51:aa:b5:90:1d:2f:cc:
         c5:3d:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:16:38 2026 by rpki-client