Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          N71Gu9ikZjIkeGN7TF1QD2YidGpjQ4igwabG+PDSOYE=
Subject key identifier:   C8:E6:3C:3B:92:DA:69:5B:7E:0F:D8:68:FD:E9:74:E1:81:4E:2C:33
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       01A0D5A6E2C4D841ED71DF3A47263E470B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          14BD
Signing time:             Thu 24 Sep 2026 23:01:18 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:18 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:18 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: 8IOWFtYwTWwJzvGIQLIAW8r6x5gCQJSp+SylhScftgo=)
                          2: VpbFmIH_t2IDnvNYTapdzjWFcyE.roa (hash: 9IQmiSUsGUEZsHUkFt7WwKB9UL9B6Sz69TEmpP9Pvqs=)
                          3: YFwbXAYbEeUxLStNYafLIFJsS38.roa (hash: sUmz+cW6Scb+RnqNk0SFjxB6/xFoGdQ3f2Qyme1WsKw=)
                          4: fVYSa0NF0rKJfH6lUMHroXq_h6I.roa (hash: LEn9pcZ1Tk/Gy+BsS9Rmr/QbWePO9YwcAnrS3Z8AYqs=)
                          5: kp_9DUhsk33ywFawYnPkFP584I8.roa (hash: RzOfnm+0AOUaUVxteYQHxfR18hPLFgs1Xun4HHqrE44=)
                          6: ugs2M1uh509Uqt85UEznBX3H5IE.roa (hash: SsFiVPzpCb6vKpY5OVRkgDrN06tsNk5q7un2OgWWteU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:e2:c4:d8:41:ed:71:df:3a:47:26:3e:47:0b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Sep 24 23:01:18 2026 GMT
            Not After : Sep 25 23:01:18 2026 GMT
        Subject: CN=c8e63c3b92da695b7e0fd868fde974e1814e2c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:41:bc:c6:31:8d:a8:05:6c:b0:c9:e9:7e:
                    aa:d1:0e:1c:98:de:68:37:8c:1f:90:b5:ea:97:0f:
                    74:f3:4b:f3:01:71:d2:5e:4f:f8:f3:96:5c:c4:e0:
                    99:d0:d0:59:22:a7:b5:0d:b8:8b:7d:fa:0f:fe:3c:
                    b2:7d:51:5f:dd:1a:60:f0:b0:0b:74:61:3b:67:a5:
                    15:78:ea:99:0c:6f:5b:71:ee:a3:cb:94:33:8f:55:
                    d4:87:68:a3:13:e5:39:c7:55:0d:73:94:b1:b6:04:
                    d3:e1:c2:69:49:34:31:6c:cd:79:59:2c:76:ce:38:
                    cf:8f:af:73:03:58:b9:6f:83:fa:f6:32:19:9a:20:
                    67:30:31:ed:7c:27:50:d9:8b:ac:1c:f5:bf:a5:8d:
                    2c:a1:46:5d:39:61:1a:3b:e7:c5:f7:6a:ab:dd:54:
                    e7:7c:96:05:97:44:48:bb:05:d3:02:20:d2:1a:87:
                    75:dd:e5:0f:9c:df:52:5c:04:c2:9e:2f:64:6a:0a:
                    a8:2c:78:58:9b:68:9c:0b:4c:d3:1e:00:d4:55:f2:
                    80:c1:29:66:aa:9b:09:84:0b:07:47:e2:f7:c9:40:
                    a5:1d:0e:7f:8a:fc:dc:6a:dc:a2:5e:f2:cf:4d:58:
                    30:5e:52:a1:c8:c3:31:ca:6a:d4:82:94:ad:f5:95:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E6:3C:3B:92:DA:69:5B:7E:0F:D8:68:FD:E9:74:E1:81:4E:2C:33
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:13:a0:ae:e2:eb:b4:0b:39:b0:91:2a:2c:a7:92:ff:3c:dc:
         03:44:c1:7d:6f:83:e8:81:43:00:ab:eb:55:a3:cf:a5:c0:6a:
         2c:b2:bf:64:64:f0:1b:75:17:8d:ae:90:43:78:7b:29:e6:52:
         1c:49:88:9c:10:31:cb:55:1e:bf:22:9e:aa:0e:17:c0:9f:b5:
         40:af:94:fe:a0:08:f4:7c:6a:06:7d:ad:e9:43:98:39:b1:04:
         43:63:73:9f:19:2a:b7:5f:4a:08:7d:f9:2b:4d:01:a2:4a:36:
         81:4f:ac:96:c5:61:85:f4:88:ad:6e:00:53:10:05:39:b2:a6:
         5c:3c:d3:d7:06:72:ed:fa:b8:64:38:10:9c:b6:eb:72:90:dd:
         96:b9:b5:26:22:1a:19:c5:98:f9:ed:58:ab:1c:2f:d8:a5:18:
         ef:f8:a0:e7:6c:42:df:eb:b7:4d:e2:76:ee:2a:4b:c8:f6:fa:
         4c:fc:94:b8:d6:77:eb:bb:d7:3b:df:85:82:a8:97:a4:c4:d8:
         46:84:41:88:c9:38:62:87:f5:f7:a2:5e:bc:4b:31:2f:e5:de:
         b8:c0:6b:a9:3d:96:98:62:27:2d:7e:66:a2:a2:25:04:0a:ea:
         90:29:58:5a:44:6a:c3:9c:49:e0:ae:ec:3f:2f:da:29:b1:7b:
         fb:70:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:57:43 2026 by rpki-client