Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
File:                     lICKbds0DQqKISfGTaKNdw7t3pM.mft (raw, json)
Hash identifier:          YJk1nCOGoE/1ZJmn3CC+hVN1dTjL1hE9tkCRBvt9W3U=
Subject key identifier:   28:30:56:3F:B3:B8:D7:3D:62:67:44:A1:E7:6E:ED:14:9B:A9:AB:E5
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Certificate issuer:       /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial:       01A0EF2FCCAD4E137A8F5FAD12039948F296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
Manifest number:          F6
Signing time:             Tue 29 Sep 2026 22:01:22 +0000
Manifest this update:     Tue 29 Sep 2026 22:01:22 +0000
Manifest next update:     Wed 30 Sep 2026 22:01:22 +0000
Files and hashes:         1: 0_aFekBMdFqNOphj1MEzPKVtmT0.roa (hash: YB/bN3AAooYOfmHTAnQ/FECmO0TWzvsn8QhVsoUQzUY=)
                          2: 64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa (hash: BeGDi5VESth0C9pJC6qZlN6Zb8k5M9gWJV+LnTk4B3Y=)
                          3: Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa (hash: jyeskLTbwVPBESh5W51wXjNVOuucTxX63WTMSQq/zQk=)
                          4: PdHeaDywJi7J-a3zuc6-1mdUfSM.roa (hash: l+ho2GKXOZvF0KZ6/PCYPC090Oshz6jifmJBVRB6i5c=)
                          5: VGNTVsc9nejbVwiuI2nbOHrhT4A.roa (hash: wG2E1ysGhVBc57CqY90n2KOFbOVGCHFK1WJuuKwNSso=)
                          6: lICKbds0DQqKISfGTaKNdw7t3pM.crl (hash: /eor5I9kHc+84ShpP/UOGn1iEd8d9xN6pMp/rVlJePA=)
                          7: oThXb4QmTGdzVtthRGYRVzspjNY.roa (hash: vrCmZWsAWrsHQ4ME8ZX38nmpmr/rd33lideKndjp8sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:2f:cc:ad:4e:13:7a:8f:5f:ad:12:03:99:48:f2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
        Validity
            Not Before: Sep 29 22:01:22 2026 GMT
            Not After : Sep 30 22:01:22 2026 GMT
        Subject: CN=2830563fb3b8d73d626744a1e76eed149ba9abe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:85:88:13:df:a1:2b:a5:77:f5:08:45:3a:
                    df:ce:d4:d7:1d:5f:b3:7a:56:08:34:3c:37:8e:f3:
                    fa:3c:49:e8:f1:2c:5b:83:fd:7e:ee:68:ba:56:65:
                    59:46:91:6c:f6:63:7e:be:0b:30:96:01:8f:c8:84:
                    9c:40:a5:7b:f6:fc:8c:a5:e0:2b:72:a9:9d:f9:85:
                    71:7e:e6:ba:52:e8:c5:e4:4e:e5:d2:73:30:b2:62:
                    d0:81:1c:d4:4f:8f:75:51:cf:59:c3:47:7b:1b:c9:
                    7d:64:2a:93:68:86:10:1d:12:c1:cc:49:65:f7:12:
                    84:7d:a8:52:7a:b5:31:9d:ad:12:0a:dc:91:12:87:
                    71:65:7b:a5:04:1d:a8:be:a1:b6:56:97:bd:0d:e2:
                    03:31:50:02:d2:15:25:fa:9f:0d:58:16:f8:2c:64:
                    de:0d:a6:a3:f8:fa:91:7b:5e:5b:b1:11:d3:4d:c6:
                    51:5a:d4:f6:40:4c:14:11:ee:ad:15:cb:f9:8d:40:
                    98:3b:b0:3e:6a:8d:f7:73:e7:76:d8:69:0d:0d:c4:
                    33:a7:d9:bf:46:80:8e:c4:02:5d:01:30:c0:38:1c:
                    bc:43:fd:b4:a1:bc:49:c0:0c:87:cb:2e:94:5c:98:
                    c7:f7:7c:c8:4a:2c:b8:28:93:9f:90:b6:25:e3:91:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:30:56:3F:B3:B8:D7:3D:62:67:44:A1:E7:6E:ED:14:9B:A9:AB:E5
            X509v3 Authority Key Identifier:
                keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:2f:64:0a:b0:ec:2e:b1:6d:37:8f:dc:c5:62:03:b8:43:
         01:7e:e5:e8:ae:50:c4:9a:56:69:59:37:aa:f1:2f:4e:57:3c:
         d3:73:09:16:ea:ea:d4:83:17:a2:bc:97:09:7b:60:c3:34:da:
         16:40:01:69:ba:e9:19:41:89:fc:a0:3d:6e:4f:a1:0d:16:d1:
         65:1e:cd:71:38:07:bb:9c:d2:ca:7d:45:56:fc:0a:e5:9c:dc:
         07:7f:e4:31:26:7e:b0:d5:59:6e:00:96:3c:61:81:43:26:12:
         0d:7e:9b:b8:3a:5e:b2:8f:5e:be:33:83:db:d2:61:77:77:22:
         d2:09:1c:e2:b7:06:cd:73:e6:e6:0c:d0:e4:e5:27:e2:34:8d:
         6f:4a:3a:12:18:6c:78:f7:8e:3a:92:36:27:6f:69:22:33:81:
         c5:3b:ae:6c:6d:a9:73:8c:ec:4b:23:2b:64:bc:73:df:17:06:
         b6:e1:18:2c:4b:76:8d:7e:14:9f:67:f1:ff:d8:c5:a9:27:2e:
         c5:dc:29:0c:d4:31:27:ed:1e:c7:0d:9e:fd:74:0e:1d:e5:2d:
         a8:20:e5:9a:1f:1b:cb:16:f6:d4:7b:d1:63:63:95:93:01:bf:
         a7:bd:86:95:e6:5d:b8:4b:ec:a8:41:f1:36:29:de:5d:04:4c:
         f7:11:8e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:02:06 2026 by rpki-client