Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          1aPVyXkOOHnoOui1ZyByvuI2JGwJF56UPFhYnn1pgRs=
Subject key identifier:   75:90:90:4F:E3:4A:AD:12:B6:6B:04:ED:FA:A7:37:FD:6F:A4:B0:44
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       01A0C9A235D4DA57332241384F3AEDEDA016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 15:00:45 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:45 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:45 +0000
Files and hashes:         1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
                          2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: rvNBe5osfjCuXuGj9WLmymcXut/MncqbIDkEMOjY5qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:35:d4:da:57:33:22:41:38:4f:3a:ed:ed:a0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Sep 22 15:00:45 2026 GMT
            Not After : Sep 23 15:00:45 2026 GMT
        Subject: CN=7590904fe34aad12b66b04edfaa737fd6fa4b044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:2a:5f:66:e6:53:be:3a:dd:af:ce:20:6a:
                    b2:47:3f:72:c4:fe:d4:4b:47:87:2e:4f:7f:c8:87:
                    6f:66:bb:4a:6b:97:e2:30:82:d2:b9:f1:7c:43:65:
                    b1:f7:8f:86:83:2f:f1:75:90:d5:32:1c:ec:9b:82:
                    d9:6f:f7:61:b6:52:0a:82:b1:b1:e6:38:35:20:46:
                    6e:eb:32:74:56:78:74:61:cb:82:d4:08:dd:48:03:
                    6d:3a:8f:c3:5c:a1:42:3a:74:3c:28:f4:4d:fe:d8:
                    e6:ec:dc:c5:21:d1:b8:fa:3b:d8:d8:83:d0:0d:41:
                    86:d8:dd:60:49:63:fb:07:2a:de:2c:c7:03:56:ec:
                    7f:45:84:e1:1f:0e:84:fa:a7:8c:17:0f:a5:f3:da:
                    47:4d:2f:a1:af:17:7d:b4:df:45:29:40:ae:19:16:
                    5b:59:1e:4f:62:ad:43:06:31:f0:bc:2f:8e:78:c1:
                    f6:24:9a:f7:e4:6e:87:ba:8c:31:2e:8b:91:ef:cc:
                    f8:3d:5b:bd:b8:85:0f:2c:ed:b7:ec:2c:84:34:37:
                    b0:bb:ba:39:12:1b:74:6a:7e:e0:f1:bb:87:af:59:
                    c3:b6:47:17:25:28:69:83:b7:af:0e:4f:54:0b:20:
                    d1:0a:4f:b1:6f:09:06:c8:c5:ae:a3:1b:2f:d3:c0:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:90:4F:E3:4A:AD:12:B6:6B:04:ED:FA:A7:37:FD:6F:A4:B0:44
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:c3:54:72:51:24:58:c8:2a:6d:6a:7a:5e:85:10:27:a7:
         32:95:a2:bf:e3:91:fc:35:c6:d3:cf:59:4e:20:91:38:90:19:
         18:a1:cb:32:03:ab:a8:13:08:86:b9:81:6a:f6:9d:28:c0:c8:
         b2:2a:f5:65:a1:48:36:a8:35:95:51:e5:31:b7:f7:ad:a3:a0:
         a9:7a:cc:c5:25:ea:1c:2c:36:6e:52:74:64:70:c1:ad:b4:f7:
         8e:80:af:2f:3e:ef:27:c7:43:1c:8d:58:23:51:c1:0f:0a:d3:
         4f:81:e9:af:48:9d:f8:8c:47:4d:d0:37:f9:57:37:a9:24:40:
         d4:56:25:12:ab:be:65:21:45:9d:a7:f7:5d:60:6a:89:83:18:
         68:47:5f:43:26:39:ca:f8:78:97:bf:a0:53:62:46:34:4d:67:
         e5:c4:b1:e9:1d:8e:fb:bb:84:4e:2a:57:63:1d:34:64:52:d6:
         f4:82:a1:0e:e0:6e:76:ac:a4:c1:7b:7b:52:76:0c:31:ab:88:
         64:58:ed:3d:6f:af:3b:49:bd:fa:f3:70:53:dc:e5:e0:d8:52:
         e8:c5:c0:3e:67:c5:9c:a3:3d:bb:ed:4a:30:f0:94:fc:de:75:
         07:49:6c:6b:c1:07:ef:df:4a:a9:db:67:1a:be:48:52:32:34:
         13:df:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:00:37 2026 by rpki-client