Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          bToqCm0SwlzMpGCPQiuvBuAYKpU26cCwaZPI9AeZ+/U=
Subject key identifier:   B9:25:F6:43:FF:70:0C:2C:37:EE:CD:02:D6:07:10:3F:76:85:FA:0E
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       01A0D45E08FC4B9B88905D165AA519B656EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          09F4
Signing time:             Thu 24 Sep 2026 17:02:07 +0000
Manifest this update:     Thu 24 Sep 2026 17:02:07 +0000
Manifest next update:     Fri 25 Sep 2026 17:02:07 +0000
Files and hashes:         1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: 5xuMVEYM+sfFkvCmxVDv+heOps+c36nk17Fd8JkLUtU=)
                          2: ET0FEwtBWcNF1w6-haZ741PxhEE.roa (hash: ewl+EUT/eRs8CzyYcj651WLEqPS9XoO9of4XQBHw70I=)
                          3: fiv0OI-AqtRVVrzWS5rFRgZaVys.roa (hash: oh8Kp8XMS/i+hHdda1I22uBBGuzEAYFA2en/nHrlnSs=)
                          4: t8aFQS7lWhuM_-J21qq8wpHr948.asa (hash: IcDTJWBpBF8MZ144faOgduVI2vqGFOUYWFm0kF+tK60=)
                          5: uWhFb1HwZvJ_IfY-iiz9y_hTepY.roa (hash: 7jH7FBgqrDkvhTn6gZysjOdIXNNg1HK77FI6FjOJlP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5e:08:fc:4b:9b:88:90:5d:16:5a:a5:19:b6:56:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Sep 24 17:02:07 2026 GMT
            Not After : Sep 25 17:02:07 2026 GMT
        Subject: CN=b925f643ff700c2c37eecd02d607103f7685fa0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:d3:d0:64:4a:f1:b3:b7:11:94:61:5f:70:
                    92:bd:2d:d7:e6:9a:1f:97:f2:3b:b0:db:cf:91:e8:
                    79:c6:4e:d9:a4:8d:c9:f0:0a:d9:c6:bc:d7:04:0f:
                    d4:c1:e7:21:0b:ba:c9:bb:2d:f4:7b:d7:e8:81:eb:
                    fe:a8:d9:dd:70:f6:fa:88:2a:14:22:1d:df:c3:24:
                    a2:a3:4e:bf:a8:df:e3:20:9c:8d:d1:5f:d1:d3:95:
                    3c:e6:ac:ed:22:fd:3d:f3:d1:7e:f5:5f:ec:9d:45:
                    3e:d9:b2:43:85:eb:a9:ab:40:59:1e:1c:a7:46:54:
                    de:a5:bc:af:b7:ec:58:69:63:0c:c2:c0:78:57:b9:
                    e1:2d:4a:aa:bf:47:aa:7b:39:21:11:1f:9d:e0:1c:
                    67:ee:07:30:98:d8:02:83:8a:71:34:33:8f:ac:65:
                    07:4f:43:9b:98:da:f7:37:64:dc:3a:8d:51:32:54:
                    8c:94:52:e9:8d:d6:ac:86:7f:99:e0:3c:8f:d9:0b:
                    69:7c:58:b6:f3:63:6b:b4:d1:e5:23:6f:e5:1f:0f:
                    17:4e:8b:19:ab:5a:56:79:7f:8f:7b:52:43:33:a3:
                    62:d8:12:a8:44:cb:46:29:bd:76:7e:50:83:78:35:
                    0e:55:a1:bc:6d:ff:69:00:c8:d5:63:5d:75:1d:b9:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:25:F6:43:FF:70:0C:2C:37:EE:CD:02:D6:07:10:3F:76:85:FA:0E
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:44:74:94:b7:d0:45:cf:99:04:76:32:b8:33:74:c6:20:
         90:c7:02:93:7e:46:b1:a1:87:31:6a:25:b8:ac:92:bd:b9:3b:
         a3:f7:e9:68:7b:e5:05:f0:15:fe:22:71:6e:ee:25:70:d6:35:
         bc:93:63:17:1f:27:72:6b:1f:12:a7:b2:10:95:ab:ce:25:ae:
         b6:bc:23:57:e9:d9:50:84:61:3a:2a:ad:1a:78:7c:88:57:c1:
         65:e0:ec:b4:05:ab:f3:e6:49:8d:24:6c:07:9e:b5:92:e4:5a:
         75:e7:42:49:c3:f5:da:e9:65:a5:df:e5:90:b2:05:b1:c2:61:
         70:a3:46:8d:13:a1:16:24:15:53:26:c4:e8:30:d3:59:8f:3a:
         ef:9e:55:74:3e:f5:a6:ef:7b:5c:02:75:0b:82:c8:ea:cf:ed:
         0a:fa:ae:f2:43:c7:05:e2:81:03:65:3e:54:f5:3b:0f:f5:14:
         b3:5e:fe:07:58:8d:74:7b:a6:1e:ea:29:58:d8:11:cb:63:db:
         72:8d:34:24:4b:9f:d9:f6:8f:94:1a:9b:61:bb:f8:9a:a6:27:
         b6:21:2f:a5:b3:b4:aa:d3:46:b9:08:65:8d:e6:0b:3c:a8:11:
         62:2f:62:23:24:85:f1:63:00:6c:ff:5e:5a:de:ee:2d:66:cd:
         73:ee:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:44:09 2026 by rpki-client