Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          e9zSzwvKWts+nQhSYzyWn0dGQldAzE5mRefmyy/O2mk=
Subject key identifier:   0C:4C:6F:8C:B8:A9:98:67:C6:96:56:A6:10:35:8C:3D:D5:AA:32:5E
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       01A0D682C3771328507C8267DD898368B025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          0682
Signing time:             Fri 25 Sep 2026 03:01:28 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:28 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:28 +0000
Files and hashes:         1: 0P6vuH7hkdIwIR9PInvR-Cs644U.roa (hash: OZr+B9OcOvVrH/NKnVTHPgP5Ns3nzCsnwCI7oatFz10=)
                          2: 2hUNqAaLAxlTuvxBbQp3Ny8ZRBg.roa (hash: JHzxdaWvVLDKSsd26QrH87bLuJsRLjXCmgemIpABYco=)
                          3: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: CH++1EzYSviAhdMCwymN81VzLG/a3Wuo7eWB2+526AU=)
                          4: 8WcyMQ3lOVTIvSKFas5ExgPsbZU.roa (hash: EjdtSKq3M9+llOwbGunPdh03wK0+aZ0al1pXW1HzzXw=)
                          5: CXZdBW73P1sigZtPmmClSIVanYo.roa (hash: 4v+9CCQ8FNhXj3JWX6pp/XQ9nrD0wz+4HUXlx805a0k=)
                          6: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
                          7: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
                          8: Frt4_waqB7h9y7h03HUd1hb1VLw.roa (hash: T0QirUdAWIQNuXFxpDq5mL/vxg3a4wXdlbXAqkvIb1U=)
                          9: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
                          10: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
                          11: KVTaTVaCviOMdjZzS4Zc0zBw4OM.roa (hash: rWuvCKTHTIyhv2L4Mlx4/iHLNmlWT5ONGdBrJkW48EA=)
                          12: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
                          13: X9PhdYm3cU2xqHBhnAPbju75a5E.roa (hash: t6eqgGoHBtyYMFMOQpDHiu5ZIGINQ/XOCXPww6urBS0=)
                          14: XG45-dkrjZwdFgIEASudJhYYqA8.roa (hash: djWr/s32as+sKlSv5ersJGirbqj8zQDuitFpGIaAl/k=)
                          15: YzoWDviTcBF18c7YY75_s0rgVC8.roa (hash: a+ezIrDuUga0lwuC+JgGZCJue+rFDaLbRWFGCk60R4k=)
                          16: cN4TjAl3meHdzGkGOjGUxxdyto0.roa (hash: KF4CYHM3MslLTwdsfB1zjWIGDa34pn1bkGZHIyfriJk=)
                          17: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
                          18: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
                          19: g2qonlFSaTFnlLgNQc6hp2NNvNQ.roa (hash: p9VO6IlkdKLB8UZin5VIX7axFJ8RMhBVLWx58aqiXPg=)
                          20: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
                          21: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
                          22: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
                          23: neBBgA0odZn9GDyZaXqqlQXbshQ.roa (hash: SS0fdHDxh+zKYI6XDqiq1C8iUD2E0IhJks3vTraThww=)
                          24: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
                          25: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
                          26: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
                          27: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 03:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:c3:77:13:28:50:7c:82:67:dd:89:83:68:b0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Sep 25 03:01:28 2026 GMT
            Not After : Sep 26 03:01:28 2026 GMT
        Subject: CN=0c4c6f8cb8a99867c69656a610358c3dd5aa325e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:32:e3:04:95:14:6b:53:83:bc:cb:bb:62:
                    1b:0a:6e:5a:aa:07:6b:80:fa:53:61:b8:b6:a9:47:
                    62:28:34:79:1a:cf:0b:48:c0:a9:8a:8c:c3:b8:ea:
                    66:d6:e3:e4:2a:40:b9:8b:01:34:b1:91:52:29:03:
                    44:95:07:45:07:9c:6e:81:ff:3f:21:3e:bc:dd:0b:
                    ad:8f:2f:bb:70:84:61:ce:29:7b:c2:81:50:b7:a8:
                    49:06:76:30:d0:78:56:b3:c1:e0:e4:65:be:0d:70:
                    8b:6c:c9:a8:8b:50:16:d3:fe:11:ea:9b:5c:78:81:
                    26:fb:7b:f0:02:dc:42:75:6c:2b:80:aa:99:d4:85:
                    08:e6:8b:a7:7d:b8:e2:1b:0c:e6:05:95:02:8f:ee:
                    79:fd:af:25:54:3c:76:a3:5e:f8:f4:6a:16:a8:fb:
                    6a:69:09:87:f9:e8:5d:83:ff:97:1c:5c:7b:33:f5:
                    8c:13:56:aa:7d:da:4c:bd:09:08:43:93:65:0f:fb:
                    6a:e7:bd:1c:ed:91:3c:80:38:1b:eb:e3:6e:7e:86:
                    69:18:74:1c:4d:a2:22:54:47:dd:de:83:8e:a0:4d:
                    24:31:7d:ac:60:d3:79:25:a1:39:2f:58:81:0a:5d:
                    27:53:03:1b:3f:ea:3c:24:86:7e:e3:86:a2:76:af:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4C:6F:8C:B8:A9:98:67:C6:96:56:A6:10:35:8C:3D:D5:AA:32:5E
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:9a:6c:9b:21:e7:98:05:65:a7:22:02:b1:5c:d4:ae:d6:
         92:a1:fa:75:b7:05:5f:da:fa:3c:af:ea:61:2c:d9:94:b6:9e:
         1b:ad:53:96:06:67:c3:3c:de:3b:6f:b0:12:91:3e:b7:7c:c5:
         c0:13:39:9d:34:a8:21:9e:c3:bd:df:d3:73:9e:f6:33:47:36:
         35:0d:c8:7b:7c:38:53:83:ea:54:12:4d:20:b8:bd:06:22:8e:
         58:6d:86:f7:f5:26:c7:fa:e4:a1:a6:54:ad:aa:0f:36:0c:6b:
         43:51:a3:f5:7d:05:3e:8c:6c:25:72:17:d9:52:5d:df:0f:6b:
         2a:d4:01:50:69:8d:e6:28:fa:c4:3b:55:e9:97:4b:d0:a8:f3:
         92:75:36:79:ee:21:04:83:c4:19:cb:fb:af:32:e9:8c:c6:e5:
         ac:97:cd:9b:fa:15:ec:f1:e8:71:66:a9:e9:ce:05:49:26:6f:
         57:75:25:bb:6c:3d:7c:43:d9:13:65:5a:0d:3a:55:da:03:b9:
         a0:4d:fb:34:80:0f:13:e9:1f:26:97:fe:26:9f:18:42:b7:82:
         36:eb:11:a0:b2:ac:ef:39:a8:ee:5a:d9:20:50:09:9c:17:d2:
         80:bb:d9:18:e7:6d:97:90:3e:11:32:d8:82:bc:ed:70:dc:5c:
         72:d6:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:55 2026 by rpki-client