Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
File:                     6R7yKtqhbVPc9jfFafQTHyYhW5E.mft (raw, json)
Hash identifier:          dIZ+36AnR9oADlzCIZnL+KIZkRml14tmluGN0X2bZmM=
Subject key identifier:   54:70:57:96:5B:56:0D:D3:57:59:62:7F:B3:0E:31:FB:F0:84:A9:3E
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Certificate issuer:       /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial:       01A0D916E17ACAA63EFB3E4514A96E779B32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
Manifest number:          08AF
Signing time:             Fri 25 Sep 2026 15:02:30 +0000
Manifest this update:     Fri 25 Sep 2026 15:02:30 +0000
Manifest next update:     Sat 26 Sep 2026 15:02:30 +0000
Files and hashes:         1: 6R7yKtqhbVPc9jfFafQTHyYhW5E.crl (hash: WjOrCfz8t/wvL1BK8NTyYCd6uWTj5mz25JgqUUT4Ndw=)
                          2: Xsw6u2NpyOA4Uhb6gf6FLBFCjyA.roa (hash: aYe/DyjAhtmHLFtm+CL3nAuzPuexlmj48Rq0XUQoAOI=)
                          3: YzVPBOj4oRBmxckuX-Zvgqs0Leo.roa (hash: lr/0YuAq1URHW8+4zqFhbsMmRz7j7xx2Oqrz3s9t7EI=)
                          4: fFd2LBiaW7H_EGPQWuI6Nq3_T0w.roa (hash: QmJe0crn0h392EdrFdP000rEqCGn3F7wVmTWIBGURfI=)
                          5: vbX9076Frxcx_plLCOCB5SOvIQE.roa (hash: Q9JN1yMr+vGLfO3kp9olxJthLjI2hUrFMH1jj0oA/QM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:16:e1:7a:ca:a6:3e:fb:3e:45:14:a9:6e:77:9b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
        Validity
            Not Before: Sep 25 15:02:30 2026 GMT
            Not After : Sep 26 15:02:30 2026 GMT
        Subject: CN=547057965b560dd35759627fb30e31fbf084a93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:c6:e8:e5:1e:06:4e:11:00:34:da:c1:fa:
                    5f:d1:01:12:24:a2:fc:cb:19:a1:28:c4:0a:dc:86:
                    4c:8c:1b:74:6a:29:21:5a:c6:d6:4e:fb:89:d3:f7:
                    b0:a5:a8:57:2f:67:0b:b6:07:e8:30:89:7e:1d:03:
                    20:27:f4:50:4d:c6:19:ea:ff:08:87:83:60:68:d7:
                    25:87:45:2a:44:16:73:b0:79:96:c8:3c:42:00:87:
                    5b:9c:a0:41:30:b0:03:32:5c:53:18:11:fb:2a:bc:
                    01:7b:3d:19:9c:30:3b:e5:95:8f:6d:fa:9e:6d:a5:
                    2d:1b:a1:02:36:17:9f:e5:c4:db:a6:ee:40:15:db:
                    73:bd:3b:48:b9:8b:5f:a4:75:15:c8:3f:36:dd:30:
                    bd:81:59:df:fe:67:51:47:76:e9:75:ad:e3:95:8e:
                    e2:a2:71:08:72:9d:d9:0d:ef:98:76:e2:47:77:74:
                    7d:49:a2:5a:58:19:cb:c6:23:cd:4e:65:90:9b:8b:
                    3a:0f:bc:22:09:85:ac:41:f9:97:d8:e8:4d:bd:24:
                    75:ca:c8:50:ba:93:41:9f:16:b5:33:2c:11:e9:36:
                    e8:5a:1d:34:31:aa:40:41:5d:62:11:a2:c5:59:9e:
                    bb:47:6b:55:21:fc:27:c3:35:34:8f:fa:54:ea:a5:
                    ec:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:57:96:5B:56:0D:D3:57:59:62:7F:B3:0E:31:FB:F0:84:A9:3E
            X509v3 Authority Key Identifier:
                keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:c7:ad:be:b2:31:a1:45:48:22:09:99:cd:fc:99:43:82:
         d1:7c:c4:b9:17:f4:c1:71:7d:9a:3c:d8:97:0c:11:3f:c6:6c:
         fd:37:b4:aa:d4:68:d2:d6:0c:77:68:3a:a6:13:ed:ee:2b:ce:
         4c:c0:57:0b:48:2e:14:b1:92:0d:13:02:74:ee:d6:f1:b1:8d:
         3b:c9:28:6f:56:4a:06:28:b4:51:d0:3b:54:4d:a9:4a:11:70:
         54:6e:83:8b:64:ea:12:60:50:d5:b7:05:fd:c9:e8:d5:6c:a2:
         5b:de:b1:16:bf:31:fd:61:8b:5d:02:8b:df:fc:cd:db:59:af:
         b4:1b:6c:bd:13:b3:29:50:90:d2:d6:21:a5:6f:f3:63:39:46:
         67:b4:5d:ab:83:c7:3c:45:c6:29:01:bb:e7:1c:11:24:d3:34:
         2d:86:43:5c:ac:75:39:f3:3a:81:1e:82:bd:88:9e:2f:c0:ef:
         d6:43:85:6f:ac:d4:82:0f:ba:a5:b7:51:81:3d:b9:9c:b3:e7:
         7c:9c:a3:69:6d:e2:96:98:28:03:95:c0:46:2a:2e:cf:34:b0:
         e3:2b:7f:43:3d:dd:db:c7:87:d2:9a:de:b2:81:6c:82:dd:50:
         f7:53:9d:42:9e:73:4c:02:5a:dc:d2:b0:de:7e:c3:48:19:91:
         f7:77:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:55:02 2026 by rpki-client