Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
File:                     6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json)
Hash identifier:          tGiwvbPjMJoRufrXgCmJnx4h0yZnmRx0uSNhP/FOuWY=
Subject key identifier:   8F:5B:5B:11:C0:72:A4:38:47:23:B6:C4:A6:CB:44:99:78:B1:85:F4
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Certificate issuer:       /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial:       01A0D98402B25B367983147AD8940C0F5E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
Manifest number:          1248
Signing time:             Fri 25 Sep 2026 17:01:42 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:42 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:42 +0000
Files and hashes:         1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: EEHGA9Y9Mzfuj8Fs8rDp5mh8hr/ZVEPz0X1AEn+l3zk=)
                          2: j8NRcneTJ0erjUoC8sEq4kTQQnI.roa (hash: jexHV1h3hwT59/VOtHkOcyrNIXBETEJ/OwCKAiLIB9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:84:02:b2:5b:36:79:83:14:7a:d8:94:0c:0f:5e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
        Validity
            Not Before: Sep 25 17:01:42 2026 GMT
            Not After : Sep 26 17:01:42 2026 GMT
        Subject: CN=8f5b5b11c072a4384723b6c4a6cb449978b185f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:51:a0:41:1b:9c:83:f6:1c:35:3b:27:2e:
                    3d:bf:98:c9:8a:8b:de:6f:e9:c3:36:e8:01:c1:ff:
                    38:a7:71:80:47:af:8f:ea:38:c7:82:64:26:47:5a:
                    80:5a:3c:d3:d0:18:71:78:a0:bc:62:81:e9:d8:2f:
                    00:66:52:f8:bf:70:53:52:37:6d:13:bb:26:e9:7e:
                    7c:b9:ac:d3:ba:fa:0e:a4:61:87:b3:db:6a:7a:42:
                    ee:0e:03:f9:27:d1:88:6b:27:92:ab:d6:62:c8:c1:
                    8c:5b:ff:16:93:04:f8:5e:07:a5:5a:49:f0:41:a1:
                    91:31:dc:de:bc:03:dc:f9:fb:3b:6a:71:96:03:2a:
                    48:06:83:0b:a0:f2:4c:85:90:44:d6:6a:19:72:3a:
                    19:f4:44:1d:36:fb:de:29:56:34:63:5e:ed:9b:b6:
                    57:ec:5d:c4:8b:c2:68:75:9d:4b:20:2b:a1:6c:48:
                    41:14:91:0c:7a:7c:3f:b9:00:12:7c:1d:13:37:74:
                    49:45:b9:38:98:e9:a2:91:21:84:cc:2d:80:c2:b8:
                    c5:da:fd:79:db:17:8a:13:3c:85:b7:9e:a5:4e:b8:
                    95:e2:68:36:9f:35:9c:a4:8e:b3:db:1b:02:4b:6d:
                    c2:38:04:eb:67:da:ad:e1:fb:a5:3b:6d:78:e9:f2:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:5B:11:C0:72:A4:38:47:23:B6:C4:A6:CB:44:99:78:B1:85:F4
            X509v3 Authority Key Identifier:
                keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:04:8b:de:3d:4a:19:30:17:8c:0d:98:26:55:a3:d9:d9:50:
         11:96:13:5b:db:23:df:a8:91:df:37:d9:a4:49:11:2a:9d:d9:
         86:d9:fa:d0:2b:a5:86:97:dd:c6:da:ff:ec:89:00:d9:46:01:
         12:82:9f:55:3f:f7:ed:fe:48:b2:24:75:a7:cd:bb:3d:64:ad:
         b8:b7:bb:59:fe:87:a1:18:05:3f:93:7f:a0:fc:59:7a:5e:75:
         0e:b8:e9:26:8a:7c:4b:b3:3c:3e:b8:00:4b:30:21:17:38:53:
         d2:84:93:8b:9a:52:2a:65:a6:86:96:2f:43:db:c0:4d:41:be:
         6f:04:90:e4:04:d7:f9:a5:1f:18:0d:19:b1:91:ca:a5:6a:e0:
         14:77:46:69:d4:fc:5a:ef:6f:74:43:6b:c1:e2:e0:fc:e0:5f:
         80:83:89:22:5e:69:13:af:18:8a:43:89:d4:53:d0:4a:0d:28:
         ed:06:68:a6:53:e5:15:15:4d:62:eb:ff:51:c4:54:5c:53:e0:
         a8:26:2e:d1:5b:95:8c:61:19:d3:17:98:81:c8:d4:6f:af:55:
         1f:25:e1:23:98:8a:a1:a3:15:4a:80:29:97:fa:c4:51:71:32:
         ae:6e:52:4d:a7:1d:b2:c7:fc:7d:bd:a2:c9:6f:aa:07:fe:cb:
         35:a3:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:44 2026 by rpki-client