Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
File:                     Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft (raw, json)
Hash identifier:          mt/BsGxVeaZARDvjffoahjrbhbAf9QFAtNYtcSjNgW8=
Subject key identifier:   93:85:1B:26:66:C0:1A:E3:28:74:CC:54:4E:3F:77:EC:5B:A5:3C:10
Authority key identifier: 37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
Certificate issuer:       /CN=372f5669f98cfd504e4a9d0e927427c503e33796
Certificate serial:       01A0D1FFFDD4AB8E6262FC24BA65E5BC030F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:00:09 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:09 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:09 +0000
Files and hashes:         1: Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl (hash: L6OkihDL5OMUKtJtBU30G9P+HyMkgfvlz4ZF5YSfGJI=)
                          2: b0w2NwRKZd0v1YirWaHR-yonRpM.asa (hash: Ca6ig3yL/cc9C02+a+qUVEZYxxXimWIDoXfV2NrJQGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:ff:fd:d4:ab:8e:62:62:fc:24:ba:65:e5:bc:03:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372f5669f98cfd504e4a9d0e927427c503e33796
        Validity
            Not Before: Sep 24 06:00:09 2026 GMT
            Not After : Sep 25 06:00:09 2026 GMT
        Subject: CN=93851b2666c01ae32874cc544e3f77ec5ba53c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:56:1f:99:cb:01:63:e9:ef:f3:cb:71:47:
                    78:b7:64:a5:20:fb:12:75:4a:e0:69:03:bf:86:e0:
                    9b:f6:6c:07:29:3a:5b:e5:48:0c:62:9e:eb:74:49:
                    ca:7d:17:ab:a6:71:90:06:7e:df:74:5a:20:73:9e:
                    45:0e:01:81:40:75:d6:75:7c:7d:cc:a8:14:81:42:
                    b7:63:6b:e8:53:5f:69:4d:0b:1b:b6:94:cf:dd:ee:
                    8c:d9:c4:76:ea:33:a1:72:fa:5d:4f:d0:d7:be:97:
                    82:62:0e:26:e5:ae:26:4c:dd:b3:65:7b:67:d5:f4:
                    2d:7c:d6:60:fa:fa:8e:78:78:9c:9b:c9:90:64:7a:
                    75:62:2d:aa:4b:f9:10:95:75:22:5a:fc:c3:9a:bb:
                    74:84:58:7e:4c:98:53:bf:27:c7:fc:92:27:8a:41:
                    c7:0f:06:29:88:56:28:82:20:03:9a:98:b5:90:42:
                    fd:74:98:c7:e0:8b:9d:34:f6:52:ea:6f:85:20:6d:
                    04:fa:53:6c:c0:4b:75:ac:c7:98:d0:02:90:19:27:
                    3d:30:79:01:7f:db:5b:f5:f4:43:71:17:05:22:14:
                    c0:0d:7a:08:59:9f:22:74:f9:d5:66:10:0c:8e:03:
                    d0:d8:9b:e5:0e:cf:57:8c:e3:d5:a5:9c:07:d1:22:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:85:1B:26:66:C0:1A:E3:28:74:CC:54:4E:3F:77:EC:5B:A5:3C:10
            X509v3 Authority Key Identifier:
                keyid:37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:39:0e:1d:cc:74:c8:55:8b:be:d5:7c:11:52:4a:1d:04:19:
         6b:f9:02:ac:37:0d:a2:99:77:65:c1:f7:8f:05:e9:21:f0:10:
         45:2f:28:15:f6:ae:77:da:42:43:24:09:63:4e:fa:78:15:18:
         38:9a:5a:2e:50:79:a4:62:53:c1:8f:a3:12:1e:84:bf:1a:42:
         4a:bf:76:db:40:77:2f:52:f1:e4:e6:77:5e:1e:d6:7e:c7:8d:
         e8:a0:79:8a:48:80:ff:09:33:f8:b3:37:5a:5c:52:3e:e6:33:
         99:d0:f7:9e:b1:64:a5:d6:6e:b5:1f:fe:2c:4a:9f:4f:86:07:
         cb:ca:dc:56:b2:71:32:d5:1e:19:0f:6f:3c:ba:c2:e5:ba:1c:
         4b:98:98:5b:f9:9a:72:6e:5e:5b:51:5c:2a:e6:5f:83:9d:cb:
         df:16:42:55:19:27:a1:21:bc:d9:10:e7:6e:e4:fe:94:b2:f1:
         3a:76:58:9e:38:44:61:ba:c6:d4:87:ea:fb:2a:72:c5:80:04:
         a0:c2:bf:60:3d:43:25:a9:34:30:e8:c0:57:c8:33:a4:9a:8a:
         e0:cc:73:11:9b:bd:7f:22:23:14:94:be:57:81:51:2e:a7:3b:
         a6:9d:7a:6f:d7:9f:78:fc:0a:a7:4b:70:dc:3b:3b:81:50:86:
         73:72:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:40:07 2026 by rpki-client