Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          +qao6E3A6WvNhVqmNXfCt5pR5D8ej1xucdj7UO52o7M=
Subject key identifier:   82:CC:D9:33:89:6A:F8:6E:99:6A:D8:86:CD:80:08:B6:67:71:46:CC
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       01A0D83C300A08A37D0DAA2F7ADADFE61F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 11:03:38 +0000
Manifest this update:     Fri 25 Sep 2026 11:03:38 +0000
Manifest next update:     Sat 26 Sep 2026 11:03:38 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: 6y/ZvxP5Lys+pU9iTCewdhwT30JFdaYGrspg8yweX4k=)
                          2: HICvEHKXiwO8tUnXw2THhezIHTg.roa (hash: m259oPsH+iF/F010gAj+3VHPjH7EbopMEIXrwuwaC7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3c:30:0a:08:a3:7d:0d:aa:2f:7a:da:df:e6:1f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Sep 25 11:03:38 2026 GMT
            Not After : Sep 26 11:03:38 2026 GMT
        Subject: CN=82ccd933896af86e996ad886cd8008b6677146cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:b6:62:65:11:f1:6f:87:2e:59:96:a2:db:
                    bc:f7:9a:b4:61:60:cd:b9:b2:81:55:c2:5d:7d:8c:
                    18:7d:96:f4:0a:32:e6:13:e3:a0:1f:f2:03:60:8b:
                    42:87:4a:ce:29:e2:c6:5a:7a:d5:c9:9e:0f:8e:6b:
                    4f:84:f6:10:87:95:c5:49:64:4f:f6:97:c8:f4:cc:
                    d0:40:d2:05:0a:43:5b:e8:f0:a6:97:63:0e:9d:58:
                    e5:5d:f8:fe:32:f9:be:41:45:f3:82:3f:d7:26:63:
                    cb:d6:5f:f1:0b:3e:04:d4:19:4c:4b:59:be:21:91:
                    3c:e7:cc:db:29:b3:dd:27:fc:62:0e:6e:74:6a:42:
                    22:da:e8:46:71:13:da:88:90:c5:d3:16:81:76:b4:
                    aa:37:39:7c:3c:66:29:af:ab:34:26:cd:87:5c:ea:
                    73:e9:3c:32:e4:ba:09:53:14:e2:de:e6:13:1f:82:
                    8b:89:57:a5:de:ba:15:80:a0:25:b1:1f:f5:55:f8:
                    bc:3d:54:0d:8c:4d:0f:4e:8d:5d:14:78:a2:2b:2c:
                    ab:10:bd:a8:1b:f1:96:56:0d:4a:90:24:13:2f:71:
                    97:36:29:d4:ff:41:d6:f6:b6:21:4c:e1:1b:46:65:
                    59:99:0d:88:20:d3:79:68:73:42:54:b9:83:75:3b:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:D9:33:89:6A:F8:6E:99:6A:D8:86:CD:80:08:B6:67:71:46:CC
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:64:67:b7:1a:3d:1f:b7:cd:40:fe:e3:aa:0b:dd:eb:99:87:
         ea:9c:ce:f6:4d:87:91:53:b7:1d:a0:18:f9:71:55:e0:7d:1c:
         1b:df:35:36:f3:53:c3:25:de:43:2d:3d:c9:eb:57:f8:00:d9:
         f1:f5:88:3e:c9:4d:a5:0c:b8:56:63:14:72:98:8c:ec:a8:92:
         5b:04:bc:96:9b:19:93:50:ac:d1:07:ba:db:34:09:53:2d:25:
         cd:12:cc:7d:80:ab:69:d5:97:38:b7:6d:b2:f9:55:be:cb:9e:
         86:9b:96:5a:a4:c2:25:53:5f:5c:16:6c:dc:76:f3:2f:3c:0d:
         57:ad:db:7c:03:7e:f3:31:c5:0d:f4:0e:1b:a7:e0:f3:22:96:
         ba:ee:41:a5:d3:09:df:b8:20:f7:13:85:3a:6f:8d:da:16:5b:
         bd:f4:b8:dd:ad:8b:f4:ec:b8:f2:42:ce:33:67:89:14:67:19:
         fd:15:3c:f0:3f:5f:03:b0:b4:44:38:ba:56:15:44:b1:08:e1:
         40:ce:64:82:a0:dc:d0:ca:1b:6a:25:d6:07:ee:ae:5c:c4:48:
         b7:15:9d:8f:1a:47:02:f8:da:41:54:01:3a:b8:db:73:cc:21:
         c5:f5:8e:4d:fc:61:fa:75:0f:c3:db:3a:88:bc:1d:1c:57:3f:
         af:b9:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:41:28 2026 by rpki-client