Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          LYic0QZ8EvcFpwu8TNr3yFWWriDXsSe7vX9M9GuK/vc=
Subject key identifier:   D6:A2:41:98:CD:C3:33:A3:D0:D6:7E:28:29:55:A8:73:C1:7A:01:A8
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       01A0D2379394EBD2476D44143724F0F3DA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 07:00:52 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:52 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:52 +0000
Files and hashes:         1: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: nezmorACjANjtl0EHOX49P6iR3IaibVkO3pXdetZCQQ=)
                          2: 9uLCR93AsvcbHhfo_LRBoViZJEw.roa (hash: 6EciUB7X3+hHMgVRkJbEMXyOPOOet2xSMxTp/Z+84Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:93:94:eb:d2:47:6d:44:14:37:24:f0:f3:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Sep 24 07:00:52 2026 GMT
            Not After : Sep 25 07:00:52 2026 GMT
        Subject: CN=d6a24198cdc333a3d0d67e282955a873c17a01a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:5d:eb:e2:99:e3:f7:dd:cc:18:6b:ce:43:
                    f8:1d:46:88:4b:d6:69:ef:0d:11:b0:35:c9:e5:5f:
                    73:4c:8e:f4:3a:45:c7:db:cf:25:64:79:8d:e0:1f:
                    2a:76:29:df:0e:16:fe:81:0e:2c:a8:ff:16:ba:a7:
                    a3:54:79:c7:06:c5:88:b2:dc:06:60:57:85:9d:a4:
                    b7:45:80:76:7a:d8:8d:e8:8b:1d:08:cb:54:c0:74:
                    1b:2a:4d:a4:49:8d:ae:d4:0c:ee:3a:db:d8:fb:9c:
                    ef:1f:48:a7:54:40:4d:24:61:aa:4f:75:97:84:a1:
                    f0:46:f0:df:84:9e:e0:c5:de:f6:a3:08:db:eb:20:
                    fa:ce:ab:ac:40:6b:33:64:12:e6:7e:b9:37:df:8b:
                    a5:b2:01:e9:e0:f4:b7:6f:d1:5c:c1:b8:ef:21:11:
                    f3:8f:53:ec:b6:05:9e:25:21:c1:66:f7:1a:31:f3:
                    de:de:24:af:67:31:62:45:99:31:a2:db:fa:6b:94:
                    86:91:96:ff:aa:01:ed:e5:c6:b1:a9:45:fd:1e:84:
                    6e:fa:62:1a:fd:d3:bc:96:d3:74:84:5f:7d:b2:0a:
                    b9:4c:32:ed:c4:b7:23:99:e0:27:62:7c:f2:0f:1c:
                    c1:dd:d7:61:7c:f2:cc:c1:b7:1d:f9:2e:3a:97:05:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A2:41:98:CD:C3:33:A3:D0:D6:7E:28:29:55:A8:73:C1:7A:01:A8
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:e7:dc:d3:ee:ac:98:dd:bc:79:56:aa:da:ba:be:3f:7b:
         b5:22:7a:09:7e:2f:db:1a:f4:47:fb:62:38:b1:dd:f2:26:66:
         be:3d:d5:5e:c6:56:d2:af:47:89:23:f9:ae:fb:19:e7:5c:83:
         d5:b9:a5:16:43:5c:da:bf:6b:5c:e9:af:56:d9:6d:8c:d3:ea:
         4c:fa:e5:5b:b1:29:25:1e:f8:df:0a:cc:c2:37:db:94:b3:09:
         05:54:ae:e0:06:0a:90:36:a9:75:3e:24:99:2e:db:2c:e6:9c:
         a3:c0:e7:5b:32:2e:ae:d3:21:9d:60:a2:fb:eb:d0:29:f6:f0:
         ba:e2:12:e9:97:f3:41:7b:22:71:25:27:26:a0:c7:8f:92:92:
         ff:5b:cb:dc:03:b2:66:93:c9:68:a3:76:2e:6b:1c:c9:c6:ac:
         a2:16:47:23:d7:f1:cc:60:ac:f3:17:e3:36:bf:62:64:6d:7a:
         0c:99:1a:e4:55:6e:50:f1:9b:34:fd:52:69:e7:a9:b2:8f:d9:
         ad:32:4a:0c:c4:0d:5d:2f:71:f7:57:9e:cf:23:85:7f:a4:98:
         36:09:2e:4e:2e:db:98:93:b1:2a:15:fe:96:83:e5:0c:74:98:
         7b:03:b4:76:f5:6f:da:ff:e3:8a:da:fb:1c:b6:08:d4:38:6c:
         a0:6f:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:35:22 2026 by rpki-client