Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          b7FntZ/e08XDYZrSNJtpFHWr6YzYj4tNoP6WE0e4++A=
Subject key identifier:   9F:CF:61:A5:DA:C1:16:B8:B8:EF:E4:9E:BE:21:5E:C3:5A:A6:A3:81
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       01A0E407B32CBB038914C0505A684EFC2084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          1A81
Signing time:             Sun 27 Sep 2026 18:01:44 +0000
Manifest this update:     Sun 27 Sep 2026 18:01:44 +0000
Manifest next update:     Mon 28 Sep 2026 18:01:44 +0000
Files and hashes:         1: 1sZcd1tzDnfBO7H0zC0MHfPctz8.roa (hash: QGxYJT3nkBpWjK3CNe4elV7r+TMzHWhmpzIEj94vs3c=)
                          2: 54sLosdN-3E7M3xXYL9Sj8R-JFA.roa (hash: YOEtT3WDb6q1KIYxMWD9C0mL5TEs7xv26wN9VzwyZz0=)
                          3: 6Gtxp8Qdby2A47LT_KYiakuDrtE.roa (hash: BA8nh9grEBQ7UWUuUef5NazdmOCM03HbfFpXWfVVGx8=)
                          4: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: hjihRI5led0a5wd2xy5vG8C5cNXNWgDXk1Y0t2jQRnM=)
                          5: 95I5kKDngJoeemazNmLfxx-xsMc.roa (hash: 065L1fud09uTnT5KcltoPCtY3EeXJM9Wrb5i9Pok3ps=)
                          6: Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa (hash: 01fMcqnBkdQNXIGFfqpx1E0l1qguhB0pAhcOj3jJeNI=)
                          7: F02EU11_7xVfFjx-pCbSkWfBrg8.roa (hash: DUZIPK/4jtz1rxvakhmYqy+xcU6jj18QDH1Ql1+dRcs=)
                          8: F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa (hash: n0E0JoegNTDFrRD6xDuHJFvI1HNuGNwn2VnWlNNc7R8=)
                          9: JolCrPCyt6FQAjQdkxeUkG5hr_c.roa (hash: tR07fd6qiP9t7/rCVkFLRiRbNcRHO1l6JwkPDCkWrQw=)
                          10: NPH-fpbfT4l7tqIfzpWpmBL612E.roa (hash: usDB/lMLbqs1qEd8MJSCM8v9kpKJXr8T1CUNQ60yINA=)
                          11: SrRwCgzFOC1drONrVTaISNVrqgA.roa (hash: HK/1AO6XtRFFu0tl8QX3gVgCZfrsH1GVM2AzeVHcMns=)
                          12: dCf1-4ZtnEs1hhS0WpTGObxa7Ng.roa (hash: 6OBl94EqhunP39tyGGpYvE0DCjwIvRqo82T/Ck00I4Y=)
                          13: hKABsk9R3ual0SAgA_RoQAJK-Ss.roa (hash: LPGqLFiU6Q6gycTMXFmkeg9Hl/W1u11tyU44+pVVPT0=)
                          14: k7j6q1-pw3Iaxb9nrG2BMp2wduU.roa (hash: xqHAe/RA0XRCRSuPeTv3PfTrsCgVTADjTCxtxlrYH9c=)
                          15: tLZAPbek2ouyTp4yevQZizAET8s.roa (hash: tADyVnGgx5bMdr4dmJRvuG7KHkNYQR4uWTbCCyaMg+Y=)
                          16: toIwvzDtnMcr8Vr654lueB2nW5c.roa (hash: L7+3Y6vOhJhPEyX8n5fzWSUXTONaoyZXyjV+eIZHIak=)
                          17: uX8Zs5ulhqDalBSN3K4xPZW9tXY.roa (hash: 6HcSVHLDdw2ylb62hc/7yVqnNyshgu1qSWPjdsbZqqY=)
                          18: wGWva6DlhR1xhUCt4j4w0NB931w.roa (hash: GSuxwm3owrdlcnA22w3R59fDYZXJvPJoNhLNbwJTGD8=)
                          19: yd640iyO5e1rxw39pTARVi4BhTo.roa (hash: amnrnRntcrBttX4vOm5cGFFnnGSWzHrsdN8eo5YqUec=)
                          20: zeEPpitSOzyXHndgpLbTNYerulw.roa (hash: oTCVEfUpyQEEQ/RQUBU/rrU5tazeZweEU7eMxBkYLIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:07:b3:2c:bb:03:89:14:c0:50:5a:68:4e:fc:20:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Sep 27 18:01:44 2026 GMT
            Not After : Sep 28 18:01:44 2026 GMT
        Subject: CN=9fcf61a5dac116b8b8efe49ebe215ec35aa6a381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:bb:41:aa:97:05:98:64:f6:f3:c7:0d:bc:61:
                    d0:02:74:89:96:64:c1:bb:51:13:97:cc:ae:3c:bc:
                    ce:6e:20:c5:09:e0:1f:fe:29:08:bd:c7:2e:10:3b:
                    1f:9d:14:37:bc:1d:2a:ce:b1:17:ad:83:e5:29:7b:
                    4b:cf:42:c2:64:0a:c5:9c:ab:22:6e:9b:96:87:2d:
                    5e:41:99:6f:a8:77:f1:cc:10:ee:57:1e:bd:67:fa:
                    b3:d6:48:45:4c:01:c4:b6:fb:fc:f6:4a:45:56:2a:
                    f6:9a:2c:0e:1d:cd:f9:f6:35:05:d0:09:d5:6e:6a:
                    1e:75:82:f0:b9:81:4b:82:99:f3:df:97:75:8d:6b:
                    29:5f:bd:25:46:e9:2e:b8:4a:8a:a2:9d:2d:2d:3a:
                    d8:1d:23:08:49:b3:df:d1:f0:40:47:1d:95:f1:47:
                    e7:a3:c5:a7:54:77:be:d4:96:6b:65:f6:22:15:d5:
                    8c:93:c8:04:78:ea:39:7e:a2:f0:67:28:7a:47:41:
                    f8:80:c6:98:f9:9a:be:7f:c6:97:a4:ac:d1:b9:f8:
                    c2:23:75:42:14:e1:9e:fa:e1:f7:07:e6:b2:93:b0:
                    96:ea:c6:f0:b8:6f:9e:97:b5:11:76:ab:fa:fa:18:
                    6e:6a:ea:e0:0d:05:de:30:f7:68:18:42:c4:d2:3e:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CF:61:A5:DA:C1:16:B8:B8:EF:E4:9E:BE:21:5E:C3:5A:A6:A3:81
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:58:21:a5:a6:2f:c0:c7:c2:cf:82:37:34:46:72:85:c5:
         68:12:c6:59:e2:52:37:8f:d5:22:58:b4:ac:a5:8c:dc:23:e6:
         a2:c3:41:2b:fd:a2:1c:64:24:cb:ab:d2:c7:64:f9:a5:ba:ea:
         05:1f:44:7e:78:e8:db:3e:8f:1e:09:0e:93:0b:aa:ac:2c:32:
         6d:72:23:d8:1e:f2:c8:fe:41:e0:b5:87:53:d2:ea:07:4d:c7:
         20:e3:73:13:07:5b:86:47:10:eb:bc:d8:6c:99:d5:d2:48:ed:
         83:dd:b0:26:89:62:f7:ee:05:40:80:ac:ae:5b:ea:7e:f2:32:
         3a:3a:c1:72:c2:e1:c5:8d:ad:e1:7a:35:e3:42:c0:94:32:44:
         c8:eb:d4:d0:4d:4b:ee:57:01:ee:c4:28:ae:e2:9b:d7:40:7d:
         d3:96:34:33:f2:3f:d3:38:88:9a:2f:ba:9a:09:8f:8b:a2:6e:
         26:3a:65:0b:84:57:6a:56:db:00:90:39:9e:6e:6d:46:20:59:
         b4:ce:22:15:38:23:4f:16:f0:1a:7b:e8:b1:9b:38:ac:ef:b2:
         95:95:bf:0b:e8:89:e7:75:56:50:a4:3a:33:b2:80:bb:33:f6:
         94:41:c8:13:4a:5f:ef:b1:09:67:96:03:36:b7:66:09:c2:81:
         c9:ef:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:29:49 2026 by rpki-client