Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File:                     C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier:          6+emRcKEz+2/87rZKlgeBCI8MB0pya54nUfbmjW+yps=
Subject key identifier:   F3:18:DA:82:CA:9B:D2:3B:EA:FA:86:C5:D2:A2:70:4A:EC:12:4F:8D
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer:       /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial:       01A0C368E2C9C340D988B63C44AD51A76BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number:          1144
Signing time:             Mon 21 Sep 2026 10:00:25 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:25 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:25 +0000
Files and hashes:         1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: 8lIt87++wkI7fEmywl73HKVYHMK4fI841Emx05pWH10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:68:e2:c9:c3:40:d9:88:b6:3c:44:ad:51:a7:6b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
        Validity
            Not Before: Sep 21 10:00:25 2026 GMT
            Not After : Sep 22 10:00:25 2026 GMT
        Subject: CN=f318da82ca9bd23beafa86c5d2a2704aec124f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:22:a0:d9:be:43:03:30:2a:81:04:66:fc:
                    2b:51:83:96:07:69:34:64:48:53:58:1d:de:ce:55:
                    82:65:19:b8:94:55:58:c7:bd:8f:e5:c0:bd:fa:6a:
                    e6:8e:a4:bb:3a:18:46:56:9d:39:11:11:cb:fe:0e:
                    5b:8a:62:96:36:86:de:14:75:b2:09:d6:b0:f3:f8:
                    e0:61:70:93:fe:0f:f4:ab:26:6d:44:18:fb:10:26:
                    c4:e9:5e:61:28:0d:06:ed:a8:ae:d1:76:ab:98:c5:
                    f7:52:0f:47:87:f0:86:74:b1:bd:f4:ec:74:6e:f7:
                    b9:f0:51:43:12:83:cc:89:4d:11:51:ac:55:9b:a3:
                    a0:3a:0c:29:9e:e5:6e:ab:82:43:1f:3a:78:cb:69:
                    93:43:7f:b2:44:b3:52:28:98:52:74:40:f1:b8:9b:
                    09:30:77:46:20:cb:9a:c8:cc:c1:6b:a0:00:ad:18:
                    db:4e:e2:5f:37:44:19:5d:34:9d:bd:bd:f3:37:d2:
                    1d:2d:72:e0:a2:86:6e:90:6a:7c:08:5e:28:1f:66:
                    62:79:db:ef:68:07:7a:af:0e:5e:79:d9:4b:35:0c:
                    95:c3:30:59:35:fb:e3:e6:03:55:2f:69:d5:e2:f4:
                    8a:b1:28:ff:e3:df:85:98:93:b8:92:9b:78:b7:a9:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:DA:82:CA:9B:D2:3B:EA:FA:86:C5:D2:A2:70:4A:EC:12:4F:8D
            X509v3 Authority Key Identifier:
                keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:e9:0a:90:f5:91:3e:e1:44:2c:6d:18:25:26:bf:da:b5:
         79:df:8e:86:a7:1d:9c:0e:d7:5d:5d:ce:ed:74:05:2b:9b:20:
         41:80:1b:3b:a8:a8:25:bb:ef:81:49:4f:19:dc:a4:12:1d:80:
         40:96:b6:c0:94:8b:23:5e:40:54:95:b9:b7:60:f6:3d:de:67:
         70:d0:4f:ff:99:28:7a:50:2c:43:7b:57:ce:66:73:ef:7d:90:
         c3:d4:5e:89:1b:f4:e4:b2:1e:8d:45:4e:e8:d0:d2:6f:a7:1f:
         0f:60:66:88:08:a8:b0:4f:64:68:3a:40:43:db:c3:01:98:6d:
         07:6d:12:f5:80:18:bc:b2:2f:f9:80:13:33:e6:f8:aa:54:ed:
         58:81:38:b5:06:e3:61:24:65:97:da:7c:f1:14:c0:49:7e:16:
         f0:61:21:67:67:c6:e2:74:1d:a3:ed:7d:5b:2e:02:ae:2f:05:
         ac:f7:a5:91:5a:85:16:55:5f:11:ab:5e:e5:9f:8d:da:25:7f:
         b3:c3:17:cf:43:9e:e7:6a:27:1b:fd:f5:e9:14:21:87:a6:1c:
         31:62:6b:6e:20:fb:de:50:d0:e3:6f:26:10:0a:8f:d3:f1:c5:
         e7:9f:90:59:a7:9c:ef:67:4e:00:c3:94:ec:18:12:25:4f:4a:
         ef:64:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----