Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
File:                     6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json)
Hash identifier:          JekzetAyLsYZbnOmuFKKgZ8Q5IXaPEKAOl+IBInL0uw=
Subject key identifier:   A2:46:53:88:E2:9D:CC:80:90:26:3E:C9:29:E1:65:89:E8:88:6E:46
Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
Certificate issuer:       /CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Certificate serial:       01A0D9BB3CCAFF9F9DB6E040BB8FEF310F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
Manifest number:          0597
Signing time:             Fri 25 Sep 2026 18:02:01 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:01 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:01 +0000
Files and hashes:         1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: 8f/tkcTSp5Aa9kLZ2yGr0/wTn5bel3pt5C7UJqza5YE=)
                          2: AUFsMm-NGs1yxNBgw6rr1pZcQ-c.roa (hash: 4iBvcmN7U/XeqdrUYWh/5pPTsC0ExDr/UBaq8SA+90o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:3c:ca:ff:9f:9d:b6:e0:40:bb:8f:ef:31:0f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833
        Validity
            Not Before: Sep 25 18:02:01 2026 GMT
            Not After : Sep 26 18:02:01 2026 GMT
        Subject: CN=a2465388e29dcc8090263ec929e16589e8886e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:54:e0:40:14:75:85:91:da:3c:23:8b:05:
                    7b:f5:9f:c9:4f:14:87:6f:c0:c1:b2:26:28:c9:b7:
                    4b:26:0f:95:c6:56:cb:dc:56:b4:ae:3b:e2:d2:4f:
                    97:7e:2c:5a:12:01:28:d5:99:ed:75:ea:f3:89:dc:
                    77:ed:34:d5:03:22:bd:a6:37:10:e6:2b:4a:dd:c6:
                    5d:c3:ff:69:17:ef:dc:4c:54:df:83:86:de:f0:9a:
                    50:e5:20:5c:a5:d7:90:6d:79:4f:5e:3e:da:9f:b2:
                    bf:fa:b9:b6:b3:39:4a:a7:48:2f:ee:02:6d:74:a8:
                    ab:96:21:32:d6:4d:bd:cb:3f:f3:30:8f:78:38:b3:
                    39:15:5d:72:4c:f5:d8:32:6b:13:91:be:13:99:63:
                    77:11:69:11:b2:92:83:da:88:68:27:45:74:7f:bb:
                    30:7c:74:15:51:ea:37:8d:23:42:c5:eb:49:e5:60:
                    3a:7d:2d:cc:be:d0:a4:9c:77:37:b1:25:70:01:d4:
                    39:3a:2c:d1:55:14:40:cf:f3:23:ad:95:04:32:94:
                    5f:75:00:18:65:80:b2:f5:93:2c:be:3a:e0:6b:a2:
                    58:7f:91:bb:b7:b7:a2:3f:9c:d9:2e:b6:03:c6:52:
                    f9:aa:25:57:b7:de:3c:78:36:61:4b:8a:50:b2:f3:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:46:53:88:E2:9D:CC:80:90:26:3E:C9:29:E1:65:89:E8:88:6E:46
            X509v3 Authority Key Identifier:
                keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:24:d9:3d:df:d1:ea:3c:8c:be:11:09:b3:a9:aa:0e:b9:
         35:97:30:bd:4f:9f:a8:6f:25:8d:7f:d0:c9:1e:89:a8:a8:af:
         79:0c:82:ca:1a:e3:5b:fc:64:1b:9f:92:d4:94:fe:1f:f6:51:
         c9:17:94:a6:e2:0a:f4:ce:92:00:ff:78:27:82:ba:0d:11:b1:
         67:ba:fa:fa:b7:56:bd:67:fa:d6:7f:72:72:17:9f:0d:52:c8:
         de:6a:f0:1d:9d:60:dd:a0:ed:28:c0:d1:59:02:b6:69:ff:1b:
         ae:40:25:bb:4f:b0:8d:0b:df:14:e6:73:14:b6:fa:dd:94:a3:
         8a:64:03:34:68:ef:57:2c:76:f7:ab:0d:b5:77:cd:8a:d9:93:
         ed:d8:1d:76:b7:3b:a0:ae:7b:d6:a9:56:8d:82:8b:3b:97:fa:
         43:b5:f3:2a:4d:59:fa:54:ae:6f:f5:a0:af:5b:c3:da:9c:2a:
         99:83:60:e7:36:bb:f6:5c:02:04:b2:43:62:eb:a8:7d:83:b2:
         99:91:04:a2:74:b6:67:2b:36:69:42:25:8a:d6:7c:c6:f5:03:
         a9:03:b7:2a:a9:19:58:ab:57:27:98:e3:94:f8:d0:a3:e8:d4:
         e8:35:c8:71:46:79:09:d1:0d:07:51:03:60:7f:e0:e8:21:59:
         0c:18:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:16 2026 by rpki-client