Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          fNIgquqbM2XdFbAjaMqHMmnKb6yYMbC0i6P8Tfx6tEU=
Subject key identifier:   7C:3B:EA:A3:12:7B:54:F7:35:F3:0A:CE:6D:CE:D1:09:B5:CA:61:C2
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       01A1DD5E090FF4332ACEFD1DE1628D0D0CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          0775
Signing time:             Sun 15 Nov 2026 04:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:29 +0000
Files and hashes:         1: 1-l1XYb54g6dJ2IJlw79HqDOL1T8.roa (hash: 4KNw2FZJhBfZz/48eB8kUaq/nOVXJqe8YKN+AfMvBMc=)
                          2: 6Rv-YhkvK1GX0Te8-Dludeyqizk.roa (hash: UKGgcZcFKJuJZXLZiTLAH1hiVg42URiO+gpL2ayx09I=)
                          3: M63i7t4WYWQQDzdvsxsD0FnhDM0.roa (hash: /hhr1Y2Fr2l9zEhKAXJKXJb3IP8nSXMJwlawHmCx9tk=)
                          4: NKFYjT8NOU2nNm75iC1mMdUvWRg.roa (hash: T+3lCMY+jPZeKCOFr2ByuWF+cVwT3gGdpsce+k/SCB4=)
                          5: O92NJ5Awv2BDng61oOd15HuLqPA.roa (hash: X8BuUjbEcw4gYt0kVOFHS871nwSuI6STGkEuR3rs+f4=)
                          6: TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa (hash: 3A8wQr5AdN0RkrLyZ9wt0wnQNwX319OG4uYDw/IVg1U=)
                          7: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: 2u2Z8p1vnEkzZ8tawT1FjeL0p2mxaf2OJesYwTQZkDo=)
                          8: kSe32ld6D3y8ZGSUCU3Nuw3483g.roa (hash: ibN4bInbBvAjLJ4kDOjWiNxovvHCVDwVdOJCJprQRIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:09:0f:f4:33:2a:ce:fd:1d:e1:62:8d:0d:0c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Nov 15 04:01:29 2026 GMT
            Not After : Nov 16 04:01:29 2026 GMT
        Subject: CN=7c3beaa3127b54f735f30ace6dced109b5ca61c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:7a:a2:56:bd:fc:35:f4:0a:63:1b:84:81:
                    bc:e6:8a:51:59:f8:de:64:f5:ff:78:cb:41:f4:cc:
                    18:83:53:8a:cf:9f:f7:47:0b:1d:15:fe:7a:d7:01:
                    0b:d8:c9:00:73:b7:a9:a0:77:71:45:84:5a:d4:6a:
                    c7:41:d6:d8:c5:1e:4a:3c:49:a7:34:95:ca:c9:4b:
                    07:c4:26:3f:3c:06:41:d9:16:c2:b0:b4:a3:a6:24:
                    01:5c:a3:9f:bb:4e:7e:81:87:a8:fc:a8:f6:5c:11:
                    a0:c8:f7:05:33:97:15:e9:c4:c7:bb:d6:9e:c8:bc:
                    4d:bc:f7:e1:39:af:2e:f1:1d:05:ae:f9:c0:c9:87:
                    4b:1d:44:06:ae:42:14:13:f0:89:60:f8:45:f2:51:
                    ef:81:38:6c:67:ed:28:dd:39:eb:6d:88:ad:7d:e1:
                    41:85:07:14:6a:81:37:2c:93:a0:89:e7:88:16:e7:
                    35:a8:3d:27:b1:ab:f5:28:71:11:4c:8a:c1:24:ea:
                    2d:44:c9:33:30:16:35:8a:2f:aa:5e:60:66:38:a1:
                    6a:b2:71:6e:5b:fe:ad:2b:25:b1:b9:d0:25:95:95:
                    88:02:3f:82:81:79:8b:56:06:c6:1e:5b:ae:1e:78:
                    a0:51:8e:43:90:b5:3b:7f:2d:15:0e:f6:d9:a6:64:
                    ca:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:EA:A3:12:7B:54:F7:35:F3:0A:CE:6D:CE:D1:09:B5:CA:61:C2
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:56:5c:89:93:b5:e2:48:0f:35:b5:a9:46:46:18:e5:54:05:
         42:fa:37:42:7a:9a:6e:46:3b:b3:13:b5:9c:dc:23:ae:22:3e:
         4b:a7:b3:a0:40:45:38:69:bb:77:12:d9:b9:3c:61:1b:18:c6:
         96:82:73:d6:74:ac:f3:9e:0f:b0:3c:4b:bd:cf:10:8a:07:62:
         f8:e8:ad:e8:4c:db:ba:df:11:c6:f9:12:ad:2a:b0:75:b9:53:
         f4:15:65:a4:ff:e5:d0:b8:92:e2:2c:5b:59:53:f6:a5:16:fd:
         99:85:80:23:23:4b:09:df:1d:93:2f:ba:78:ce:fc:7f:3f:47:
         c5:0c:f4:7a:bf:18:5a:4b:23:b2:ec:46:f9:9e:f5:69:5e:16:
         9c:dd:f8:77:4e:2b:7e:07:df:86:cb:39:df:2c:65:ce:84:a9:
         ce:d4:f9:51:13:5f:46:55:5f:bc:29:a1:b3:2d:aa:8c:bd:a8:
         d6:bb:7a:95:28:0c:31:08:e0:60:28:e3:c5:a1:0c:b3:91:c8:
         15:1c:1f:a2:ae:5b:aa:14:61:83:ae:b6:f0:f4:9b:6b:f7:9d:
         3d:f8:23:28:f0:ff:55:1f:5c:c5:b7:bf:ee:1a:ab:91:25:65:
         ae:2b:e9:cc:8c:6b:aa:33:d8:21:84:8d:2b:7c:72:4b:94:cb:
         35:54:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:23:32 2026 by rpki-client