Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
File:                     91anOU_9JyHWClrS6Saj0OHIu3k.mft (raw, json)
Hash identifier:          ozDb52MDexo912QSrKxOV6F4bvLJCyD21aReaAetZaE=
Subject key identifier:   CE:11:81:9E:70:47:85:65:47:76:44:53:17:E3:F5:F9:67:B9:6F:38
Authority key identifier: F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
Certificate issuer:       /CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Certificate serial:       01A0D200EDE4E4C43D196D8A43728D9D7210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:01:11 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:11 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:11 +0000
Files and hashes:         1: 91anOU_9JyHWClrS6Saj0OHIu3k.crl (hash: hPuTtWE6PksQZJu9NhUb9xLYN0p2aSr6phh3VBrmI1Y=)
                          2: UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa (hash: xmWFoDrPk0aUWmQMRX8ayV7sBUWalQjY9fCBxeyV5bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:ed:e4:e4:c4:3d:19:6d:8a:43:72:8d:9d:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
        Validity
            Not Before: Sep 24 06:01:11 2026 GMT
            Not After : Sep 25 06:01:11 2026 GMT
        Subject: CN=ce11819e704785654776445317e3f5f967b96f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:02:60:fc:d3:07:2e:43:3f:60:8b:12:87:
                    c0:c3:9f:5c:08:69:55:a6:65:a3:64:8d:32:80:6b:
                    99:04:73:52:42:1c:ad:dd:f0:00:2c:bc:44:ce:80:
                    cd:4a:23:3f:07:27:a5:c5:4f:5a:66:28:8d:af:d1:
                    09:4f:b2:c2:9e:49:87:b3:dc:a1:f4:72:eb:33:9c:
                    4f:a5:2f:c2:67:da:f2:1e:8b:ca:39:2d:e5:a7:c9:
                    aa:6c:af:8b:06:d3:6a:df:62:26:87:82:ab:f2:38:
                    cf:8f:70:ef:99:ed:ac:eb:13:46:e5:66:bd:65:a6:
                    02:66:26:c8:8b:cb:a9:80:3e:91:0d:a8:ff:b2:c8:
                    77:34:9e:9e:5c:51:3f:6f:8d:95:c6:0d:07:97:22:
                    06:20:35:01:1f:2a:15:c5:ae:27:61:01:7c:30:00:
                    f0:d7:10:2c:5a:0e:13:8f:a7:23:f7:a5:cc:95:cc:
                    fd:64:35:f0:30:21:59:eb:9b:cc:3b:00:50:fb:5a:
                    b5:24:38:79:82:d0:a5:f9:1e:26:9b:71:d9:7b:34:
                    6b:c8:b4:03:64:a6:52:d5:37:8f:c8:79:4d:cc:7c:
                    17:77:53:1a:1b:e4:b8:2c:9e:e7:8e:6e:8d:05:56:
                    45:29:df:6c:04:5f:e5:07:a0:1e:c1:d2:0b:77:fc:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:81:9E:70:47:85:65:47:76:44:53:17:E3:F5:F9:67:B9:6F:38
            X509v3 Authority Key Identifier:
                keyid:F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:7a:7b:23:bb:c0:c9:6f:b5:60:75:d3:12:c8:6e:8d:ce:
         15:cd:25:b5:bd:68:1a:e5:24:44:8f:0f:35:c2:ed:0e:02:bd:
         ba:03:fc:30:fa:4a:05:6a:a0:03:dd:e5:bd:88:90:fe:55:47:
         a0:94:d9:0c:8e:41:3c:dd:7f:91:c1:6c:c1:88:22:a3:39:6c:
         d9:d0:3b:65:f4:1e:a0:16:0a:5f:12:21:61:68:c6:f5:0e:fd:
         4f:03:4c:ce:3c:1b:c8:5e:85:da:6f:fc:d2:25:8e:4e:b6:6f:
         c7:cb:eb:b5:0c:85:52:7f:32:27:02:d5:3f:57:f7:15:8b:25:
         e4:10:7a:08:bb:87:2a:1d:21:d7:0c:a0:c7:a7:72:19:8c:5e:
         b7:09:f4:5e:c7:d6:3a:c2:eb:a8:c2:99:43:bf:63:13:2e:90:
         9c:1c:b9:e9:a8:68:7a:da:c0:99:cc:d8:d5:f7:a4:94:c7:22:
         02:f3:9e:ba:68:8f:86:f8:41:2f:74:ba:5b:6e:c0:54:f6:05:
         64:53:68:ca:0c:70:bd:22:21:bb:8c:01:60:d9:a2:33:03:c4:
         dc:4d:6c:5f:f9:eb:0f:57:cf:28:61:5d:b9:61:11:90:90:b0:
         d0:7a:37:22:c5:be:5d:84:d9:00:f6:c3:24:27:ae:d8:bf:ed:
         c4:2c:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:47:16 2026 by rpki-client