Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          vXRmhdalwQiSf47rpXd3jxT1qUsxVyFO+sEH1FDfhsc=
Subject key identifier:   BC:B5:78:83:90:C7:7D:7B:70:A4:50:6B:6D:19:C4:77:67:9A:26:5C
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       01A0CF362F86E62DF025D7C79500A7083AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          1A6F
Signing time:             Wed 23 Sep 2026 17:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:29 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: cokWw6RjaGNkZSu9NkKfL5REhDNRAoqpdbzfYT5u4Xc=)
                          2: 7BfkeHY1c9ITTq9g1k9WZ_nopSA.asa (hash: WmBn1Lg+ApCIR17z2ta7o3ItFSZqllaqVi6a0oV3jKE=)
                          3: EQUgl00EZFitLJ6oysydLWzSpDI.roa (hash: YdDTBE8waxg/izLbB0CYt1PqKhzSZ1hn6bGE3MrL1iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:2f:86:e6:2d:f0:25:d7:c7:95:00:a7:08:3a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Sep 23 17:00:29 2026 GMT
            Not After : Sep 24 17:00:29 2026 GMT
        Subject: CN=bcb5788390c77d7b70a4506b6d19c477679a265c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:1d:73:97:da:17:7b:2d:57:7c:29:76:18:
                    45:fd:21:7b:c4:28:65:c6:92:21:8f:1c:33:42:fb:
                    61:12:5a:06:b1:b2:11:9c:3e:b6:b8:25:fd:9a:00:
                    b2:51:da:5b:ee:23:cd:d1:1e:6b:52:51:53:86:3f:
                    80:8b:5f:16:7b:4d:33:bf:18:03:7b:ba:11:bc:93:
                    95:69:47:ec:02:ef:2b:39:74:02:9a:7b:af:0a:d9:
                    0d:7b:7b:ec:3a:ca:e4:26:aa:6b:6d:f0:77:af:ee:
                    6d:0b:ba:59:d9:94:b8:a5:ef:64:10:46:34:da:75:
                    43:3c:a2:92:ae:9c:07:d3:80:9d:ac:56:6e:ae:3d:
                    65:88:1f:88:b0:5a:57:35:a0:df:1a:42:0e:27:9e:
                    32:a1:04:33:cf:30:cc:c9:9f:c9:eb:74:e7:57:42:
                    bf:76:04:09:df:08:f2:d4:bb:70:96:8a:3a:46:0c:
                    0d:38:d9:5b:e5:84:be:9b:0d:22:ce:27:24:1c:eb:
                    2a:fe:ed:eb:5e:60:5f:9b:06:be:a6:7d:48:d8:50:
                    63:b1:93:d6:e3:bd:3f:d8:c4:72:b7:c8:34:db:9c:
                    78:a6:63:ad:f5:1a:71:26:63:1e:f2:58:c7:e3:75:
                    3c:fc:5d:29:a0:51:e4:fe:6e:8d:99:41:0e:74:3f:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B5:78:83:90:C7:7D:7B:70:A4:50:6B:6D:19:C4:77:67:9A:26:5C
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:40:de:87:3e:89:af:e1:03:6b:53:3c:f0:c8:44:85:dd:ed:
         f8:8f:ce:e8:1d:c6:eb:e1:3c:b4:38:b4:f6:58:70:88:64:86:
         9b:97:6d:05:cc:87:c7:99:42:86:7c:f8:de:a5:60:3c:60:22:
         9d:d8:b2:e3:6d:84:bc:ee:33:6c:93:f8:0e:e7:84:83:34:8c:
         86:17:e2:b9:c2:9b:38:26:5a:02:67:1c:4d:c9:7b:de:2e:69:
         a6:3a:34:04:af:b7:da:fa:e8:d9:02:e3:86:d2:36:80:4e:d6:
         90:40:5a:da:73:46:b5:de:ae:7f:44:e3:1a:02:30:10:fb:31:
         c4:28:0b:13:b7:ec:f3:04:b1:c9:90:98:18:48:94:7d:8b:b9:
         6e:a5:85:45:c6:49:14:a8:a3:a6:f4:1b:be:2c:fe:64:44:fa:
         a3:5a:40:17:87:55:3a:5c:db:f3:9b:9c:1a:33:e0:48:13:ec:
         d3:97:f1:80:58:c7:fb:d8:25:f4:3c:a4:a9:a1:c9:d5:2d:64:
         ab:c5:d2:e0:59:c4:17:15:9d:06:0e:5e:c2:53:a0:b5:5b:10:
         62:b4:e5:ab:5e:ac:91:e5:04:09:8e:5d:d7:78:31:68:f9:42:
         6e:56:d2:27:74:db:be:11:b1:1b:1a:b7:15:b3:28:ef:06:8c:
         40:3b:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:10:15 2026 by rpki-client