Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File:                     IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier:          kacpHktlWr9GZeMYpj5yR4zGwCd8Gm7epQSN+TBkTsQ=
Subject key identifier:   F6:26:5C:95:05:DA:78:7F:21:9C:AB:CF:0A:0A:D9:0C:4A:84:5F:C2
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer:       /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial:       01A0EE543DF374483FAE21CE684D3C58F204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number:          06BF
Signing time:             Tue 29 Sep 2026 18:01:33 +0000
Manifest this update:     Tue 29 Sep 2026 18:01:33 +0000
Manifest next update:     Wed 30 Sep 2026 18:01:33 +0000
Files and hashes:         1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: P+aj6H2P39J1bsUJNmh55vQp9IpKB0LowIPnM8lRxbM=)
                          2: nZLcR_yXR-0QVOrPZOSeS_-bslo.roa (hash: B2ppS1gw4DWVMWucnYpphzHEsSRmHapQBZqWEMy4B3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:54:3d:f3:74:48:3f:ae:21:ce:68:4d:3c:58:f2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
        Validity
            Not Before: Sep 29 18:01:33 2026 GMT
            Not After : Sep 30 18:01:33 2026 GMT
        Subject: CN=f6265c9505da787f219cabcf0a0ad90c4a845fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:75:5b:3b:f0:a3:3a:d9:bc:a5:f2:ce:b9:
                    0c:66:35:c5:3a:32:f9:f2:ea:0f:7d:40:1d:51:ee:
                    db:cd:26:d1:7b:c0:31:28:60:41:91:f7:4e:46:b5:
                    ff:3a:8b:15:3c:20:f2:5d:fc:92:fa:59:bb:ff:9a:
                    e4:e0:f5:3c:31:22:c3:16:eb:84:05:2d:93:fe:4d:
                    08:14:4f:14:50:0f:25:27:8f:c7:4a:d2:18:3e:20:
                    57:65:9e:76:98:4a:77:c7:ca:ee:4d:41:2d:49:bb:
                    8a:7d:67:34:49:85:f0:9c:ee:4c:50:66:f4:87:c7:
                    a9:cc:1a:80:ae:7e:5b:44:fb:de:2d:8a:b6:3c:14:
                    ba:be:20:57:f8:cf:92:53:30:ab:d8:99:1e:0c:bc:
                    f8:fe:f5:53:f5:e4:66:5c:4d:f9:c9:00:97:c9:b8:
                    7b:28:9f:df:d7:47:0d:7d:a2:55:58:34:2f:16:41:
                    c2:53:4a:87:5a:f3:17:ac:60:2b:38:c7:46:33:d5:
                    49:fc:f7:34:68:cb:b4:1c:e0:9d:64:cf:1d:76:56:
                    5b:1a:ca:41:2c:b0:8a:3f:5e:fc:04:cb:d1:64:e0:
                    95:23:c0:f2:61:a2:15:67:a6:e9:b7:05:fa:9d:e1:
                    92:29:58:5a:50:ed:7b:f9:fb:66:51:80:43:af:48:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:26:5C:95:05:DA:78:7F:21:9C:AB:CF:0A:0A:D9:0C:4A:84:5F:C2
            X509v3 Authority Key Identifier:
                keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:24:82:13:7e:e8:29:23:63:56:2f:f8:bc:f5:ae:0c:89:
         d7:2d:4a:5e:d3:04:b2:7e:81:df:c3:56:f9:b6:a4:9b:03:c8:
         28:f4:ee:1e:cc:b5:0f:f9:78:d3:84:db:46:26:b8:1b:dc:ac:
         9f:f2:13:4e:eb:80:e4:97:61:ef:a2:e6:43:a6:85:6a:43:0e:
         85:e5:f7:8d:5c:0e:cf:ca:4b:b6:ea:37:93:87:93:a8:43:2f:
         7e:c7:89:60:18:f6:72:ce:ee:ab:e6:f1:e0:3a:f0:a1:60:88:
         34:37:d1:a0:d0:d6:fb:f6:b2:61:ec:0a:36:60:7c:84:e2:25:
         87:2d:a2:85:12:ef:f3:5f:5d:6c:73:f3:d6:a7:e3:6d:93:89:
         64:99:25:ce:12:ee:b6:4d:ec:26:4e:32:1c:da:10:a1:60:98:
         93:76:30:72:53:27:cc:dc:77:d5:b6:6b:31:3f:5a:7c:10:7e:
         97:e1:e8:58:ff:23:56:fa:c3:1e:74:bd:69:a6:30:bc:35:06:
         e9:25:fb:6c:df:57:83:be:e0:07:27:b2:34:63:96:82:a0:0b:
         e5:66:95:9f:af:c4:34:ae:8e:62:fc:0b:2b:3b:a1:98:bb:64:
         db:f6:ba:34:39:32:ff:d5:86:eb:8d:a7:cf:34:04:a1:1c:bc:
         0d:c7:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:46:25 2026 by rpki-client