Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File:                     bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier:          CAD97v4M9Mb+n9C1mAIDT5iCu4jnaSRoCKnvl0cHdQY=
Subject key identifier:   06:30:A3:E4:CF:10:43:BC:98:3F:98:36:9C:1A:73:73:FD:DC:08:36
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer:       /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial:       01A0CEC7F83C546238650D52F85F5568B933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number:          04E1
Signing time:             Wed 23 Sep 2026 15:00:06 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:06 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:06 +0000
Files and hashes:         1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
                          2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: 091uGnojB7cXG1Khv8C0m8l9qBs3PUZ+2pAoeNOwAsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c7:f8:3c:54:62:38:65:0d:52:f8:5f:55:68:b9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
        Validity
            Not Before: Sep 23 15:00:06 2026 GMT
            Not After : Sep 24 15:00:06 2026 GMT
        Subject: CN=0630a3e4cf1043bc983f98369c1a7373fddc0836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ed:2c:a1:53:0a:36:44:69:ec:9d:f1:88:8b:
                    a9:ad:a6:9b:45:e6:b5:f0:35:cc:58:e8:02:be:0c:
                    87:23:73:b2:01:2c:32:0f:8b:7f:eb:47:a9:5d:b8:
                    28:83:83:ad:c3:73:f3:3c:9d:6d:c6:5c:d0:f9:d2:
                    e3:d8:a2:19:d5:1b:64:ed:cb:d1:a4:4e:63:69:28:
                    8d:3b:c1:ae:d5:42:71:58:68:77:c9:74:d6:f4:6a:
                    27:f4:9e:04:20:ee:50:82:5a:ab:f4:8d:1b:7f:5e:
                    b3:3c:38:99:a1:cd:47:a9:75:23:39:76:63:46:97:
                    d3:20:4f:dd:f8:de:dc:5d:9c:82:a6:e3:ed:ef:ce:
                    36:6b:34:9d:70:b0:14:34:d1:a0:d1:b9:76:ba:3b:
                    d3:f3:fa:df:35:cc:5b:53:27:3a:4c:5e:96:cc:ad:
                    7a:19:b4:92:db:79:d5:dc:ec:ec:44:c6:ed:e5:0a:
                    bd:f1:c0:f8:68:93:f3:bb:eb:d8:37:b6:2b:5d:19:
                    20:69:6b:c3:68:53:65:38:29:49:1f:06:a6:c2:b1:
                    df:21:fe:36:1f:94:4d:aa:bf:ef:26:0a:37:59:90:
                    da:89:b4:b5:d9:33:03:ac:f1:f9:99:45:6b:b9:ac:
                    10:d3:d1:ad:92:a1:6f:23:2a:40:a0:b9:8f:d6:d5:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:A3:E4:CF:10:43:BC:98:3F:98:36:9C:1A:73:73:FD:DC:08:36
            X509v3 Authority Key Identifier:
                keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:97:ce:48:ae:76:a3:1f:5a:05:ab:3a:2c:12:93:b1:42:03:
         08:0f:3f:46:75:b5:0c:19:df:78:5b:da:fb:a7:14:ac:b8:ea:
         82:74:f3:bf:28:96:71:89:4e:09:03:75:3d:8a:fd:f0:fa:b1:
         f4:3f:00:c5:e5:d1:27:ea:98:bc:01:42:f9:e8:c8:1c:56:07:
         37:e3:25:0b:07:55:a6:ef:52:3a:83:98:08:48:28:e7:0b:62:
         74:f8:10:90:a6:91:21:51:04:46:57:3f:7e:43:e2:e6:1a:ce:
         ee:9f:9d:6e:0e:19:1a:3b:91:5e:bc:fc:6f:62:ae:cf:af:5b:
         f0:da:70:b5:ff:5a:5b:e3:96:44:cc:77:9f:41:28:c5:12:04:
         51:4a:de:da:54:44:b2:86:10:fd:69:ef:40:68:19:24:96:ee:
         d7:eb:5d:71:f2:83:56:6e:c2:65:53:6d:d5:98:72:6b:3f:46:
         af:38:cf:6c:43:3e:67:c8:73:29:d7:1f:ea:2e:13:21:92:a9:
         ae:0e:f3:ca:5b:18:42:18:e6:1a:40:26:87:d9:61:17:a6:2d:
         c3:ba:36:94:c1:f3:a7:17:e2:fe:19:28:28:61:a8:dc:b2:17:
         ba:cc:0c:4b:40:c4:2b:87:40:f8:62:42:e9:00:85:7f:f5:1c:
         74:fa:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:21:21 2026 by rpki-client