Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File:                     _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier:          5qbPNZIdcVpYotFPfftp79hcUs5wunSqcxfuoPjzQUs=
Subject key identifier:   56:EF:D5:EC:5C:FF:A4:24:85:8C:CE:65:83:ED:61:BA:AD:7B:25:7C
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer:       /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial:       01A0D45D2EB8A53783AE8359AD3BA2063FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number:          031E
Signing time:             Thu 24 Sep 2026 17:01:11 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:11 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:11 +0000
Files and hashes:         1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
                          2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: 2IXXdVPh9As1H5TtxqCFablZBdr/vt+HR3RJitYRQHU=)
                          3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:2e:b8:a5:37:83:ae:83:59:ad:3b:a2:06:3f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
        Validity
            Not Before: Sep 24 17:01:11 2026 GMT
            Not After : Sep 25 17:01:11 2026 GMT
        Subject: CN=56efd5ec5cffa424858cce6583ed61baad7b257c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:b3:22:b7:d7:71:f0:19:39:ba:3e:ec:4d:
                    42:e9:24:b8:35:26:73:3c:e1:e1:10:5b:51:8e:49:
                    ba:39:48:44:40:1a:28:d8:66:66:7e:5d:45:ad:fb:
                    40:48:b6:30:6b:ec:16:59:e2:45:06:53:27:ce:27:
                    ec:9d:8c:47:24:6e:20:88:8b:b5:7a:5a:09:7a:63:
                    d8:bd:e5:b8:5d:be:01:7d:44:2c:f6:e7:33:11:76:
                    f3:e5:ee:44:bd:c7:69:65:00:62:6b:54:58:98:a5:
                    fa:7c:8e:6a:5e:aa:6c:db:ff:d7:ef:ad:a7:e0:a0:
                    42:7d:5f:0b:fe:a2:67:24:fb:08:4e:b9:bd:01:ea:
                    70:08:82:d5:98:a0:95:f9:2f:2c:98:73:8b:af:a6:
                    bd:14:be:08:ea:1a:a3:2c:47:10:93:dc:f0:25:d5:
                    6a:05:fd:21:6d:c3:91:3d:2d:12:b5:25:47:40:36:
                    75:4b:a3:23:c1:f3:40:c7:5e:c8:f0:1d:2d:28:59:
                    61:67:a0:b9:37:b7:2d:0e:dc:6d:e0:fd:ef:f2:ce:
                    c8:3c:a2:2f:f7:e2:a6:64:40:27:1b:0b:a8:29:d6:
                    e9:62:29:73:ba:82:ad:1d:c0:5c:e1:1c:21:95:ff:
                    c7:26:f1:87:08:57:c1:9a:d6:93:96:49:0c:af:d4:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EF:D5:EC:5C:FF:A4:24:85:8C:CE:65:83:ED:61:BA:AD:7B:25:7C
            X509v3 Authority Key Identifier:
                keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:d5:a9:f6:8a:5e:80:f8:74:fe:da:6e:7c:46:e5:88:37:
         7d:86:91:a4:83:bb:75:65:bc:23:5f:df:ea:2b:9e:73:36:93:
         da:1f:8e:68:fa:c8:93:22:5f:80:67:f4:cb:84:39:ac:2a:f1:
         fa:63:38:b8:4d:28:e4:f0:ba:1b:21:d5:41:e1:98:b6:22:e6:
         ce:f4:5e:2d:84:6a:0e:46:37:88:63:4d:06:86:41:45:91:ff:
         89:40:3c:a1:5a:dd:50:92:ff:b1:31:ce:a6:ac:43:f0:1f:6d:
         a3:96:f6:dd:10:88:ef:c1:8c:ac:94:b9:a0:3b:0a:14:d4:c2:
         04:0b:31:a2:fe:bd:a3:c4:4d:e7:08:45:e0:d3:eb:af:14:42:
         33:2d:22:a5:22:35:37:ee:2c:3a:e9:ed:d1:73:8f:85:64:08:
         22:27:f8:cb:7d:d3:07:ae:ef:67:45:c7:5a:dc:92:84:f3:f7:
         b2:07:76:a3:22:24:0d:f7:64:a7:d9:e2:77:de:1e:d0:6d:4a:
         aa:b9:4f:55:59:3f:76:c3:c2:ec:ad:fd:dc:2e:30:76:61:1a:
         a3:d2:e1:ba:b4:8e:de:8d:72:b1:72:83:49:86:41:56:d8:2e:
         53:2f:07:49:90:ab:0b:85:6b:99:02:c8:64:21:d1:18:53:f0:
         fc:e2:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:50:49 2026 by rpki-client