Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          6JePJn5Hrd24JBQwOM7GtC5PaDLPqkYq508m3sQtSKI=
Subject key identifier:   7B:E3:F6:D7:AB:2A:A3:28:17:10:7B:C3:F7:01:D9:16:A1:FB:B8:0F
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       01A0D42620746D98C6ACCDC709207190CBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          1904
Signing time:             Thu 24 Sep 2026 16:01:03 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:03 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:03 +0000
Files and hashes:         1: 1llWNK65NedtiWi8qyia848ELaA.roa (hash: 0oTSLbXlh3Ln2/Z2bu7ijN1NRwtM3qIsyO0kzqAkxPw=)
                          2: 8SP8wrXr1dy02TJk430AwSvMFTE.roa (hash: /PIJ3E7I+I9m0ncOt8+A4jxLk/g73oMVaRRE/eZXcGo=)
                          3: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (hash: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0=)
                          4: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: 1SbFD9MeSVWMB6t0Pg06tBIW9Nxamh1JIWVDIPW8Ud8=)
                          5: lWNFxd1Gj0MT4veUOTu-eVVA-80.roa (hash: 85lL7kKUinH67VqupmaYwZZaBJjLm6Q1ocKj+e+bV0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:20:74:6d:98:c6:ac:cd:c7:09:20:71:90:cb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: Sep 24 16:01:03 2026 GMT
            Not After : Sep 25 16:01:03 2026 GMT
        Subject: CN=7be3f6d7ab2aa32817107bc3f701d916a1fbb80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:94:34:ee:68:64:a8:8d:ca:4a:e7:34:8a:
                    45:80:3a:89:0a:cd:ea:49:1a:cf:fc:be:84:61:78:
                    e2:fd:bd:25:69:f7:4f:f7:d9:2e:68:86:6c:bc:12:
                    6e:82:42:cb:f9:3d:92:51:38:fc:f6:68:a0:d6:64:
                    3e:09:23:7a:1c:1f:d1:bb:55:4f:0b:02:c1:12:cc:
                    c4:41:a2:d8:46:0c:3d:56:d1:57:99:8c:7b:b7:2e:
                    57:54:2f:b1:b3:25:46:85:68:2c:e9:db:60:62:27:
                    d0:89:b7:33:fd:99:44:f1:80:81:68:c6:9b:27:cf:
                    20:7f:40:60:47:1d:96:32:72:6c:88:f0:b7:2e:86:
                    6a:6c:77:11:74:48:fa:c7:ca:d8:47:f9:bf:09:c3:
                    33:50:04:2c:7d:f7:a1:26:41:a6:7a:e0:e0:44:d2:
                    22:65:84:df:6e:64:55:0a:b3:d2:dc:5d:38:1f:e3:
                    0c:af:9e:cb:d9:c1:58:bf:9d:1a:5d:24:4a:cc:f7:
                    45:a8:9d:9e:9a:29:15:65:27:9a:2b:88:b2:bc:3b:
                    9d:81:a7:8d:ff:ba:76:d6:63:36:b8:3c:b2:eb:08:
                    34:36:e9:72:f2:9c:27:34:30:9a:5c:c4:c8:b0:77:
                    c1:5d:f3:36:36:8e:5e:c8:99:6e:da:73:97:9a:5b:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E3:F6:D7:AB:2A:A3:28:17:10:7B:C3:F7:01:D9:16:A1:FB:B8:0F
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:d2:ac:16:21:1a:71:09:ec:e6:e6:a6:20:38:a6:3f:a8:
         b1:bd:6c:3c:77:b0:8c:04:d2:ed:42:5b:c1:fe:d1:a1:9a:65:
         8d:a2:f1:73:5d:8e:92:3f:9d:3d:e2:3d:5b:2d:2c:08:ae:ae:
         82:75:31:c0:3a:2e:1a:24:7e:d6:25:c5:13:ae:d5:8d:6a:fb:
         78:ec:7c:cd:66:85:c3:69:16:96:4a:17:f6:e5:e4:73:83:bf:
         96:ff:ca:f6:c0:2b:06:ab:e1:57:b3:45:44:4e:cc:6f:c2:a2:
         3d:9b:43:60:fe:cd:a2:f2:8a:f9:8e:bf:9a:69:ca:18:65:3f:
         4a:d8:4c:59:e6:a2:ab:8e:d4:d3:74:13:e3:c8:59:51:62:93:
         ef:a2:5a:0b:1c:dc:1a:4d:7f:3c:1d:91:1a:26:4f:a1:26:7e:
         fe:cd:db:51:e3:90:4e:71:2c:ba:1f:b7:c6:15:64:6f:48:70:
         e7:e3:53:72:67:9a:e8:46:71:26:c1:51:2a:c1:ed:cd:ae:f7:
         8d:8f:b4:8f:7c:a9:b2:22:45:6e:34:38:a4:dd:31:f3:2b:bd:
         65:1f:8d:95:75:22:a3:79:15:84:00:ed:7f:b8:b3:11:6f:ad:
         d5:2c:46:15:bf:cf:5d:5f:07:05:7d:11:f0:aa:72:57:b5:8e:
         77:c5:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:07:13 2026 by rpki-client