Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File:                     6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier:          HFbSc92ljfim3Amk99Dll2eWPy/BaKaPdtGSo5fi0UA=
Subject key identifier:   94:B7:F7:B0:5B:A8:8C:24:81:61:F8:6A:57:1F:5C:C3:1E:AB:A7:3F
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer:       /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial:       01A0CEFFBFFAA5965D331FA9E34760D62F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number:          11C5
Signing time:             Wed 23 Sep 2026 16:01:02 +0000
Manifest this update:     Wed 23 Sep 2026 16:01:02 +0000
Manifest next update:     Thu 24 Sep 2026 16:01:02 +0000
Files and hashes:         1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: Xk3L61BHTShuEuCdKjL/WUMafzAWMZgDT6O5xFOeXY8=)
                          2: CdMLNjkWN_LbBmbtyqVRIvBxVHQ.roa (hash: 86QotpjDcKjFxnBx3ug0BvDhMYnHrgdBwrKCM9Nq8eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:bf:fa:a5:96:5d:33:1f:a9:e3:47:60:d6:2f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f4510444a17add7327146152943495ababb968
        Validity
            Not Before: Sep 23 16:01:02 2026 GMT
            Not After : Sep 24 16:01:02 2026 GMT
        Subject: CN=94b7f7b05ba88c248161f86a571f5cc31eaba73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:71:3e:ae:f7:10:c7:45:b5:a6:31:ca:7a:
                    c0:91:e8:69:8d:85:a1:56:34:5e:b1:0d:ba:c8:d0:
                    90:13:8c:1a:12:13:61:3d:5d:cd:09:26:75:35:c9:
                    bd:fa:ce:0c:33:64:5b:4b:03:86:7a:4d:d7:64:fd:
                    56:47:55:5d:c1:49:52:09:96:16:04:0e:00:0a:9b:
                    79:8f:e2:0c:25:b1:a0:0b:18:6e:a2:d3:ed:1b:66:
                    7a:bd:84:29:d7:91:80:20:a9:66:28:0c:a4:a6:40:
                    9b:f2:b1:b9:97:93:7f:28:90:a1:a6:62:87:72:a0:
                    56:8c:55:ff:3a:19:c7:fb:80:c1:bb:0e:10:f6:3b:
                    50:f5:4c:6d:6b:b9:2b:f7:d5:f6:98:77:ca:39:74:
                    09:07:fe:5e:ee:04:2c:63:a9:c1:7a:ce:8f:00:ad:
                    11:bf:c4:46:dc:77:3e:fc:7e:a9:89:0e:94:ab:03:
                    87:de:d1:e9:34:49:6f:f1:a8:f0:d2:08:b3:cf:d5:
                    c5:59:4c:e9:53:b2:45:00:91:51:87:bd:78:3f:6b:
                    4c:ad:25:30:d7:73:49:9e:0f:86:ef:5d:08:2d:be:
                    26:e9:b3:85:cf:55:70:84:0a:1f:4d:10:70:a4:45:
                    c5:d3:22:cc:1d:49:69:eb:c2:b8:17:a1:1a:aa:5d:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:F7:B0:5B:A8:8C:24:81:61:F8:6A:57:1F:5C:C3:1E:AB:A7:3F
            X509v3 Authority Key Identifier:
                keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:13:ea:fb:4d:f8:9c:ac:11:84:df:25:ca:f8:25:08:1a:f3:
         43:9b:d2:57:e2:f1:a1:72:99:24:14:b8:b3:0a:41:57:da:52:
         f6:23:5f:40:12:10:8f:f3:fc:16:c4:3e:29:b6:4c:a5:a1:5c:
         39:40:78:73:21:a8:ff:de:c7:aa:7a:a8:5e:30:07:a1:af:2c:
         b6:e0:43:a3:30:87:77:7a:4d:2e:7a:37:62:9b:fd:a9:c0:6f:
         1c:6f:55:29:04:20:3f:53:d3:94:64:cf:d5:b8:f7:0a:51:41:
         d7:35:6d:c0:16:5d:d8:2f:20:51:de:6e:de:63:7e:8f:4c:e2:
         74:b1:1d:ac:fd:dd:0a:87:18:94:bb:89:82:de:25:cc:eb:3b:
         3b:59:e9:4e:24:e4:a2:b5:24:28:26:2e:5e:e7:5d:03:1e:69:
         d2:68:4b:ba:a0:22:f6:05:91:73:83:d8:a5:61:1a:32:b6:35:
         0e:d5:63:10:78:d2:95:ae:93:02:04:1a:7c:77:56:cf:e0:9a:
         e8:47:73:e4:cb:30:82:82:1e:52:86:74:5c:c8:c8:9e:c9:64:
         da:6e:26:42:eb:0d:68:27:7f:bb:d1:71:43:ab:08:d0:67:2d:
         68:38:61:e0:11:eb:b2:5b:40:c0:b5:20:93:5b:07:e8:33:b3:
         c1:21:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:04:23 2026 by rpki-client