Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File:                     6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier:          /KohF6DuRMi7oBUhhoCnFMSxuBgypptkl7KfQqDvySU=
Subject key identifier:   DA:64:0C:A0:C3:FE:17:7D:15:3F:4D:BA:A1:F4:48:4D:F4:8C:1D:64
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer:       /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial:       01A0CF6D5E92E5F56494B383D43E4E00531B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number:          09B6
Signing time:             Wed 23 Sep 2026 18:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:46 +0000
Files and hashes:         1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: A19x53hWUvE1p3GCR1nwTO2+HjhZydQi9JPtSdCgd+w=)
                          2: hElyins30a6CcTsBId_5i9QZESM.roa (hash: XTxIIPJV+tyv9VF/zIfOPYzhtJazNs7LRzbWZlggukw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:5e:92:e5:f5:64:94:b3:83:d4:3e:4e:00:53:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
        Validity
            Not Before: Sep 23 18:00:46 2026 GMT
            Not After : Sep 24 18:00:46 2026 GMT
        Subject: CN=da640ca0c3fe177d153f4dbaa1f4484df48c1d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:a3:1d:25:2d:27:27:ba:44:c6:ed:15:59:
                    fb:b2:74:e0:8d:dc:6e:c9:34:d2:f8:64:7c:8d:7c:
                    11:27:50:73:32:eb:45:da:ba:21:4e:4f:1e:86:00:
                    69:a5:c0:b1:45:fe:7a:06:16:4d:c2:31:0b:fd:7d:
                    63:e6:92:35:10:40:0f:e2:2a:69:50:b7:f4:0a:02:
                    1d:f5:7f:e3:61:24:ea:67:14:6d:1b:00:49:c0:79:
                    86:4e:f6:f1:a4:1e:a4:d0:8f:0f:62:0a:78:c9:58:
                    6a:06:2f:79:21:85:2d:0e:1a:2f:50:a0:8a:88:81:
                    d6:2e:cf:cd:d3:75:17:f1:9a:05:d3:d6:ff:82:f1:
                    4d:8b:4b:84:1a:96:00:a8:f9:4b:66:a4:14:42:33:
                    70:36:69:dd:03:ea:a5:fa:63:9c:23:0e:32:7b:75:
                    9d:54:7f:55:67:f9:67:1f:da:07:dc:6e:66:7f:2f:
                    86:32:3a:f7:79:2d:73:ba:06:14:c7:6a:ea:96:1b:
                    62:60:64:a0:c0:d8:bf:e8:65:be:6b:c1:e1:f6:de:
                    2a:58:31:6a:08:a1:67:5b:33:48:f8:0c:65:ec:94:
                    66:0e:5e:ca:47:9c:9c:b5:ce:cb:ad:a0:5c:89:83:
                    2d:b8:3e:d9:40:bc:f4:f5:14:93:28:be:2f:f5:91:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:0C:A0:C3:FE:17:7D:15:3F:4D:BA:A1:F4:48:4D:F4:8C:1D:64
            X509v3 Authority Key Identifier:
                keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:46:db:f1:e3:32:f0:a2:87:a0:4e:10:2e:0e:40:23:1c:
         e9:d6:e1:e6:d9:b5:15:6a:98:35:30:9e:af:50:69:d0:5d:8f:
         c3:bd:d1:4e:e8:ed:b2:c2:fd:dd:d5:13:c6:49:4f:14:9f:e9:
         7a:43:17:7a:76:8f:1f:90:e9:e3:98:0b:13:f2:ca:7e:2f:91:
         cd:94:90:b0:0a:27:fc:32:4f:6f:c5:0e:50:7d:71:26:b9:d9:
         c8:d1:7f:e2:c3:80:96:4a:49:83:f7:da:64:12:53:08:70:da:
         54:cc:4b:78:da:a6:32:5b:ad:b0:29:67:a9:6b:e6:ba:80:6a:
         19:6d:3c:88:92:c8:00:13:f5:0d:8f:7d:43:91:b3:e5:28:aa:
         11:fc:a9:51:c5:0a:da:d1:1d:18:4e:c1:2a:9f:44:ce:0e:20:
         22:a9:47:f9:c1:88:97:ca:f9:33:41:45:28:40:a4:35:a6:de:
         56:37:5b:99:5a:fc:37:ab:30:29:25:8b:9f:fd:a5:ad:a1:84:
         80:fd:9a:c5:f3:26:27:7e:3e:28:42:6d:a7:74:76:04:94:68:
         1c:15:0e:90:63:a2:a1:88:02:fa:42:5e:29:6b:9e:37:d5:6e:
         ff:04:9d:4a:ab:03:2d:5c:99:5d:9c:ea:40:dc:bc:3a:7f:ad:
         75:d6:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:44:05 2026 by rpki-client