Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          M2kyILPbZ1nbUEEQtdD50G0j0tI+Hk3y0ragijPBibY=
Subject key identifier:   4E:47:62:A9:02:BF:2C:21:78:25:CE:74:B8:AF:A4:79:56:E6:58:21
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       01A0DCF26ECF34821920AD8910A3CD5003AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          14D6
Signing time:             Sat 26 Sep 2026 09:01:10 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:10 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:10 +0000
Files and hashes:         1: 0lcAJcxkpyfEG67zvFLpBBWGRlo.roa (hash: D20ksOVfGRUnFokbm6FfRrXfye0JmM7Jy6FfAsNTS7g=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: XB86gOTXEvYQMRY3+UTbwEHku3vBGXsDr/aMNyYViZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:6e:cf:34:82:19:20:ad:89:10:a3:cd:50:03:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: Sep 26 09:01:10 2026 GMT
            Not After : Sep 27 09:01:10 2026 GMT
        Subject: CN=4e4762a902bf2c217825ce74b8afa47956e65821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:37:be:1f:87:60:6b:17:6b:19:52:df:23:
                    b7:fb:07:57:b5:18:b2:89:d8:90:35:0a:cb:73:12:
                    09:3f:af:f1:24:91:7b:91:3a:04:9c:61:e1:8f:04:
                    fd:55:4b:4c:f2:22:b2:32:31:e5:29:ed:6d:44:20:
                    4d:9e:9a:3b:c7:b3:c8:93:5a:eb:84:83:0e:ad:75:
                    90:91:ca:82:55:c2:06:78:4e:fa:26:a0:c8:ee:4a:
                    a6:33:c7:fa:29:29:b0:6e:11:31:12:fa:a3:58:f1:
                    ee:66:ab:48:dd:11:7a:9e:60:da:9f:af:4c:ae:c0:
                    ca:23:e4:52:9c:a6:05:3e:8a:4e:59:32:17:d5:ed:
                    e2:27:03:0e:d8:41:80:39:1c:74:ae:82:7a:95:97:
                    91:a0:6c:1f:8f:30:63:c5:3e:43:c8:b0:54:60:13:
                    1b:1e:bf:67:24:38:d1:79:a6:39:2b:24:4d:b0:a6:
                    22:a4:d3:e2:4e:0e:73:87:b1:b7:92:e4:38:1e:8c:
                    49:1a:f8:dc:76:64:56:86:74:a0:b5:89:9e:6e:16:
                    04:b0:ea:5d:d7:c5:f6:22:c4:7b:ab:57:01:a1:be:
                    68:49:3e:f5:99:3c:e3:d7:1e:4e:6f:1f:49:e6:3f:
                    4a:f3:55:3e:09:ad:ea:55:e0:83:c0:10:b7:54:65:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:47:62:A9:02:BF:2C:21:78:25:CE:74:B8:AF:A4:79:56:E6:58:21
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:8d:15:9f:50:91:8f:a7:e9:0a:32:8d:6d:20:c4:74:03:
         81:80:20:08:46:24:32:0a:42:f3:8c:30:d6:d7:d6:e1:2c:7e:
         47:fb:eb:eb:e8:00:77:83:69:f7:c7:1f:de:28:b9:fb:ef:71:
         49:13:f2:84:6e:aa:bf:2d:4d:a9:27:c5:58:a8:7a:ca:f2:42:
         0b:6a:9b:09:16:7d:9e:02:fd:95:9f:98:fc:f5:95:45:4a:0f:
         32:5f:be:39:19:e2:06:61:c5:09:4e:bb:13:cf:b4:98:32:db:
         76:be:e9:64:f0:a0:bd:d3:81:14:be:36:8f:76:25:ef:0d:af:
         fa:f3:59:19:f2:86:64:35:fa:fc:d5:f8:b2:db:51:62:a6:9f:
         b0:8f:fe:d9:0b:0d:11:12:2c:b8:e1:2d:e7:c7:f0:52:88:6c:
         29:b6:a6:8e:ed:6f:ba:8a:cd:8d:11:eb:fb:6a:f7:75:6c:a9:
         12:d0:d6:09:34:63:55:3c:27:64:b5:3c:89:9d:63:df:93:46:
         4a:0b:de:be:99:b3:03:15:93:b4:8b:63:75:fe:96:7e:fc:d3:
         90:53:a7:9c:0f:f3:64:64:54:b6:96:6a:35:bf:cd:53:63:67:
         77:19:53:e2:b3:d4:70:b1:46:e3:9f:9b:3e:70:d1:15:a3:d6:
         bd:9a:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:44 2026 by rpki-client