Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File:                     6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier:          JbBOPBAzom70YXS8AJULWg6BJahzZRh0MGXisUBJ+2g=
Subject key identifier:   A5:8D:25:F9:22:FF:0B:F4:D0:D9:A1:8E:DD:CF:2D:71:FC:BE:9F:48
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer:       /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial:       01A0D8A8AD762A84C1962271104692FEA810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number:          1577
Signing time:             Fri 25 Sep 2026 13:02:08 +0000
Manifest this update:     Fri 25 Sep 2026 13:02:08 +0000
Manifest next update:     Sat 26 Sep 2026 13:02:08 +0000
Files and hashes:         1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: CmlxQrqQDSiI9uRRkgV2yIMsQ+zDYRXW2mfv4UwL3sk=)
                          2: l_-ms9_QDftLZCKN9_q-vLa8Z1g.roa (hash: zRFmfmk1D1sRun+Y9I4hMktcVuNfXiGOIRhzxPU2++g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:ad:76:2a:84:c1:96:22:71:10:46:92:fe:a8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
        Validity
            Not Before: Sep 25 13:02:08 2026 GMT
            Not After : Sep 26 13:02:08 2026 GMT
        Subject: CN=a58d25f922ff0bf4d0d9a18eddcf2d71fcbe9f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:18:c7:8c:7d:fc:f5:81:14:61:07:19:8b:
                    79:39:b4:e3:ab:46:3b:54:36:7f:25:78:ef:4a:46:
                    b3:7f:fe:aa:46:2e:82:60:9b:d0:ec:3f:d9:e9:78:
                    12:e5:c3:c5:ec:ad:30:22:75:32:c7:ae:c4:42:8c:
                    97:4b:71:57:0f:c2:2e:c6:2b:f6:5e:18:92:73:54:
                    cb:16:58:51:a3:fe:af:89:8c:b1:20:95:08:4d:10:
                    97:51:f2:af:ec:c0:f7:b3:76:a7:0e:63:93:83:3c:
                    0a:1f:84:51:46:03:5d:22:eb:bb:a0:df:51:eb:f8:
                    ff:fc:c0:a7:17:c7:6c:24:03:f1:05:f9:94:bb:c3:
                    d2:01:32:1e:d9:41:7a:b9:32:da:c9:01:f7:2a:3d:
                    0e:f7:24:60:4a:ff:04:1e:42:6e:e6:d7:41:bc:33:
                    07:75:f5:fc:78:04:d0:f7:fe:18:ed:7b:d7:65:b8:
                    22:e8:58:f0:a6:65:c2:b2:df:95:ed:85:87:10:32:
                    c2:54:ce:ab:52:48:b8:ba:ad:10:81:8d:5d:1c:d0:
                    5e:90:42:2b:4c:72:3d:d7:b7:20:79:de:2f:8c:d8:
                    5b:e9:ae:0d:20:5e:c7:01:8a:9a:1c:57:23:d7:fc:
                    f3:69:61:40:99:3f:4d:cd:65:de:43:bf:88:1c:9b:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8D:25:F9:22:FF:0B:F4:D0:D9:A1:8E:DD:CF:2D:71:FC:BE:9F:48
            X509v3 Authority Key Identifier:
                keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:f3:58:42:6b:9d:ec:d8:79:2b:ab:ec:4d:b3:61:5a:8d:
         cd:24:1a:47:41:a1:f4:c7:5f:3a:6f:2c:2b:79:2c:4d:5e:3f:
         61:f8:6d:b3:fb:6e:28:d0:69:cb:b2:05:f0:c4:44:77:43:8a:
         28:96:ea:79:ef:1b:15:4b:1b:2a:72:d3:2b:f6:c8:b6:82:c6:
         35:a9:77:d9:f8:c8:fa:ba:30:c6:5f:a2:70:26:45:8c:78:37:
         82:62:5a:21:12:78:6f:51:1b:ea:e2:9b:72:c6:b2:60:69:b5:
         9f:52:5d:6f:a0:4d:cc:51:98:00:49:8d:ba:70:92:1a:c3:e0:
         95:88:4c:58:db:d1:6c:b1:f9:fc:7b:b5:b9:13:b2:59:3a:13:
         ac:44:59:29:2e:c3:c6:92:10:74:0c:1b:ab:c6:63:11:8f:fc:
         38:98:7c:f7:b4:f1:80:77:e4:70:62:3a:57:7a:6f:f5:d4:c8:
         cc:b9:2a:ba:7c:2f:8f:aa:2d:5b:66:4e:b0:e9:2b:93:88:33:
         0d:d6:5f:72:74:e5:a2:d6:10:44:40:62:f3:31:64:06:50:92:
         3d:ed:19:13:a2:a4:fb:9e:b9:75:0b:43:15:6f:a7:db:6a:6b:
         e1:40:9a:a1:7c:4c:6e:02:69:09:55:93:ce:12:9c:8f:7e:af:
         05:83:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:44:29 2026 by rpki-client