Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          U3mkvycQmTXC5EXyFhxnoy+YSI+sg6Xz8P1HsHT2iVk=
Subject key identifier:   8C:2A:CB:09:36:A6:B5:AC:B9:22:33:5E:80:33:4E:ED:98:26:C2:BE
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       01A0DD973CD52CFAA872CF06D6104ECFF427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          0A40
Signing time:             Sat 26 Sep 2026 12:01:11 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:11 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:11 +0000
Files and hashes:         1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: JC2xmWx0NUkJifkUjwm558ioR87K7MlMw0PD/PzPa8g=)
                          2: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (hash: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:3c:d5:2c:fa:a8:72:cf:06:d6:10:4e:cf:f4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: Sep 26 12:01:11 2026 GMT
            Not After : Sep 27 12:01:11 2026 GMT
        Subject: CN=8c2acb0936a6b5acb922335e80334eed9826c2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:ce:b0:b5:34:aa:2a:86:c6:e2:c9:42:61:
                    db:1c:52:37:c5:84:4e:0f:36:8e:ec:0f:e1:49:7e:
                    75:65:c9:2e:64:7f:29:ee:af:9b:e1:c0:27:05:e6:
                    2c:eb:28:2f:6f:39:98:aa:ef:cb:73:da:ba:bc:24:
                    86:8a:97:03:c0:67:83:60:bd:55:51:f0:17:0c:44:
                    0f:30:db:f2:6f:8e:2a:e4:52:16:84:f9:c4:5b:b7:
                    74:5f:fb:6d:68:d4:ed:54:2d:4c:1f:45:36:7b:77:
                    99:e9:93:52:2c:7a:d1:21:70:22:23:04:81:58:25:
                    9b:21:e9:b5:1e:90:2e:88:67:80:bc:2f:65:6f:20:
                    d3:b6:45:02:2e:7a:53:39:d8:1b:05:ed:26:f6:5c:
                    f5:c0:75:0d:11:c8:e8:02:03:9b:e6:4a:ec:2c:96:
                    5b:33:05:2f:61:ac:7d:6a:cb:23:29:85:54:33:ab:
                    11:2e:c3:c6:bd:d1:2f:2b:91:94:33:f5:8e:c1:a7:
                    5c:0c:3c:1b:be:c3:6e:08:af:ce:61:49:36:73:01:
                    15:b1:b5:fa:b2:98:51:6b:33:b4:07:f8:2a:8a:c9:
                    d6:02:c8:ed:df:db:da:f4:61:51:dd:23:0b:44:e5:
                    b3:0c:3b:63:51:0f:b0:67:da:0f:27:ac:f1:b5:8c:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:CB:09:36:A6:B5:AC:B9:22:33:5E:80:33:4E:ED:98:26:C2:BE
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:79:a4:a5:4d:3f:9e:5a:b0:bc:3f:35:7d:ac:f2:62:8e:
         a8:a2:c9:08:f3:b9:cf:89:9f:dc:d5:b5:d4:a9:01:46:dc:20:
         f2:03:91:65:1e:8c:45:7d:e2:fc:7a:d3:c9:3d:ff:08:69:5f:
         90:96:5f:1d:6e:44:d4:d0:06:9d:ce:e7:0d:a5:0d:ff:fa:39:
         82:ba:aa:65:44:5e:b1:80:1b:84:d3:aa:0b:d9:49:cd:ad:0d:
         41:9c:22:c4:e7:2e:81:1f:1b:7b:8b:95:70:f8:70:51:07:88:
         b5:de:e7:1c:30:18:55:bc:c7:94:55:c5:d6:f2:d6:f8:3c:3e:
         c7:e1:1a:07:cc:5e:66:10:a5:5d:03:bc:88:0f:a6:7c:ea:0b:
         19:b7:95:09:49:09:ae:b1:c9:f3:40:e4:03:87:2e:0c:b6:d0:
         08:58:12:98:c2:69:b7:75:f4:03:65:bb:76:6e:ff:fe:2a:a2:
         f8:51:6f:21:0f:5e:92:0c:8a:73:d7:a7:33:27:22:90:d0:f5:
         de:41:04:d6:94:e5:5f:89:e7:68:f7:a1:7a:1e:8a:1f:df:61:
         d4:4b:96:ac:b1:96:f2:93:a4:86:fa:97:26:1a:30:f3:e4:0c:
         91:1d:54:9f:5f:77:12:b0:bb:09:fc:50:94:a2:c9:7b:34:31:
         18:a9:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:26 2026 by rpki-client