Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File:                     6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier:          WC5Sx6yccW78/I8cUuMwJ6Jmn7IyGsvSY5RMm0FD46M=
Subject key identifier:   AA:57:B6:00:CA:EF:EB:E1:1C:60:43:78:03:66:F0:34:9A:D9:23:92
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer:       /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial:       01A0DC173E2391B8B95D86552A4C611FF4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number:          053A
Signing time:             Sat 26 Sep 2026 05:01:45 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:45 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:45 +0000
Files and hashes:         1: 2lXY_qeZRcpO46ZcHfuQKKoyAn8.roa (hash: Z1X0os2IrvXKJzAG1sBc8JrvoiI8+K00WkhMp4FiuOg=)
                          2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: Nv6jHNTvK9lC3LwFIUl9VFx1PEgrEmHwbWlCIKDDcck=)
                          3: zFObHnSFRVBVKi03HHp_LdnUjHI.roa (hash: VrSh3FAklnFvAI/Em5GvNcJNNwDYjrpoqpMUk6pPMuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:3e:23:91:b8:b9:5d:86:55:2a:4c:61:1f:f4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
        Validity
            Not Before: Sep 26 05:01:45 2026 GMT
            Not After : Sep 27 05:01:45 2026 GMT
        Subject: CN=aa57b600caefebe11c6043780366f0349ad92392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:9c:3a:7a:8f:a3:90:18:0d:3b:6f:9c:ab:
                    bf:45:fc:96:e5:50:39:48:6a:bb:6a:21:47:36:6b:
                    5e:5d:e8:4e:e1:1f:45:c9:d6:66:f8:3a:bc:22:a9:
                    d1:db:29:74:63:64:f8:66:26:d7:29:2d:c1:cb:09:
                    39:b6:ac:5e:dd:f1:f3:9e:79:02:9c:6d:84:b6:c5:
                    75:be:3a:67:d5:09:39:3d:87:58:47:b7:2d:ed:4b:
                    09:1e:a5:d2:62:8f:dc:33:3d:32:d5:da:c7:cf:39:
                    ce:6a:2d:b8:20:46:d7:4f:66:3e:ed:2b:ff:95:3a:
                    82:6c:b8:aa:4f:7d:00:cb:51:91:90:76:6e:16:f1:
                    48:80:32:71:b1:56:71:d5:83:60:9c:54:35:2a:21:
                    aa:e6:e8:1c:03:04:3f:2e:88:2b:4b:09:49:78:6a:
                    53:37:ae:e4:3b:57:d7:11:a5:e5:70:fc:82:6b:96:
                    64:a2:41:3a:f7:d8:bf:8e:fd:d0:10:30:89:24:01:
                    ee:9e:ac:bd:e3:6d:eb:98:62:fe:f8:7e:28:1e:dd:
                    e7:4a:6b:0a:4a:56:c5:b7:18:fb:95:80:cc:45:c4:
                    2e:93:22:27:f8:20:41:62:7b:ab:37:b6:de:a4:43:
                    7f:2d:b5:fc:40:48:8f:c4:1a:6c:c4:20:db:db:27:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:57:B6:00:CA:EF:EB:E1:1C:60:43:78:03:66:F0:34:9A:D9:23:92
            X509v3 Authority Key Identifier:
                keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:4a:65:c3:99:d7:6f:83:3a:47:20:01:25:ba:b0:8b:29:
         6e:9b:69:4b:e6:a4:00:bc:f4:20:62:2a:14:d1:b6:59:d6:5e:
         1e:f9:3f:29:09:01:7f:6c:f4:08:b6:fd:51:f5:bc:a4:84:20:
         58:1f:9f:a3:db:25:92:95:88:c5:54:a5:03:b8:f3:f0:23:26:
         57:87:b4:5e:7b:af:b0:5a:1d:d0:b2:dd:53:eb:b2:e8:f6:f2:
         14:1b:69:de:e1:e2:0f:e4:c4:a8:96:fa:de:f1:2a:0c:67:67:
         d1:c3:02:4c:51:d3:11:ae:90:37:db:e7:53:6f:ae:2e:79:0d:
         5b:43:9e:49:87:c4:11:e3:c5:a7:e3:e9:c7:a0:68:cc:98:a7:
         ba:50:92:99:42:b8:4e:8d:b8:17:41:f4:05:9c:52:33:c8:27:
         e7:fd:ee:b0:51:66:40:f7:fb:89:a7:35:e4:34:ca:8a:16:67:
         bd:35:01:f4:23:5a:4d:a9:3d:99:40:cd:ad:b0:f3:0a:9b:a6:
         ab:2b:08:16:26:94:71:89:08:52:1e:60:9c:3e:81:b2:7e:97:
         f6:8f:79:72:8a:18:6b:87:cb:58:bc:e6:42:28:eb:bc:39:0b:
         f6:39:fc:35:48:48:aa:63:49:1d:13:bd:2b:fb:d4:46:5d:70:
         64:52:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:23:55 2026 by rpki-client