Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.mft
File:                     6uHixU3TgZoOjJuhEksBwKDPoo4.mft (raw, json)
Hash identifier:          naJdhl+DY7+Qfp8+pOgp4T+fBnkT1aQ9trymARYBf2s=
Subject key identifier:   C2:9E:D4:55:AB:4C:FA:06:52:57:45:10:13:48:EB:BA:33:49:6F:AE
Authority key identifier: EA:E1:E2:C5:4D:D3:81:9A:0E:8C:9B:A1:12:4B:01:C0:A0:CF:A2:8E
Certificate issuer:       /CN=eae1e2c54dd3819a0e8c9ba1124b01c0a0cfa28e
Certificate serial:       01A0D7CCA86C717460081E579515101A61FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uHixU3TgZoOjJuhEksBwKDPoo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.mft
Manifest number:          E9
Signing time:             Fri 25 Sep 2026 09:01:48 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:48 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:48 +0000
Files and hashes:         1: 6uHixU3TgZoOjJuhEksBwKDPoo4.crl (hash: Pa5UJtvHBsEBZ98ilHu8VH+VzV6CI2n6YA9riLrATes=)
                          2: tNIqzvrr7L2fB3Bu-Ndqg_rAVUA.roa (hash: D9+GLgc4wf8AxXWfoZfpS7osQNrs9pjfmQOGTayaDkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uHixU3TgZoOjJuhEksBwKDPoo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:a8:6c:71:74:60:08:1e:57:95:15:10:1a:61:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae1e2c54dd3819a0e8c9ba1124b01c0a0cfa28e
        Validity
            Not Before: Sep 25 09:01:48 2026 GMT
            Not After : Sep 26 09:01:48 2026 GMT
        Subject: CN=c29ed455ab4cfa06525745101348ebba33496fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:7c:0c:e0:85:c5:44:f5:e7:af:6f:40:0f:
                    7c:83:e2:45:e1:65:c5:6d:03:47:e4:71:80:de:6e:
                    28:c7:71:67:9b:76:c5:7d:dc:dd:89:71:c5:9e:3e:
                    0d:78:16:5e:60:f6:16:3d:af:23:7e:bc:8c:69:ba:
                    07:ec:7e:02:25:d0:a9:68:6c:11:e1:75:d0:68:e5:
                    db:9d:1c:97:df:94:82:6a:6e:52:44:af:42:aa:39:
                    d6:ac:76:d9:db:1d:ba:1a:21:6f:c8:04:a0:07:69:
                    af:d8:cf:53:a4:37:9e:87:79:2b:c9:42:75:1f:dc:
                    c2:0c:88:28:1c:a8:96:0e:61:5c:0c:b2:e0:fc:b7:
                    09:2a:b8:59:37:e2:ad:ef:79:f1:bc:58:d3:8f:1e:
                    9a:66:d0:93:28:49:80:19:37:ed:17:06:a3:ba:0d:
                    ea:1f:f7:8f:ec:48:0a:e1:60:71:35:1d:c6:27:d9:
                    4d:0d:9c:4c:74:19:ff:27:de:ff:69:f2:67:89:77:
                    4c:05:ee:6d:9e:ef:d1:44:fe:b7:11:1c:72:40:53:
                    c9:74:d1:e5:b6:b5:32:f1:9e:09:f0:55:54:55:0c:
                    77:dd:44:80:a5:ad:96:99:07:5a:fd:ed:e1:63:8e:
                    24:e7:8f:72:de:27:3a:25:ca:94:7b:1e:ff:d9:3f:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9E:D4:55:AB:4C:FA:06:52:57:45:10:13:48:EB:BA:33:49:6F:AE
            X509v3 Authority Key Identifier:
                keyid:EA:E1:E2:C5:4D:D3:81:9A:0E:8C:9B:A1:12:4B:01:C0:A0:CF:A2:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uHixU3TgZoOjJuhEksBwKDPoo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:20:d6:5d:fd:ea:52:dd:04:9b:2d:37:7c:2f:d2:94:34:4d:
         5b:16:b9:2c:8f:f2:37:d5:61:53:f9:6c:95:13:2c:eb:2a:d2:
         8b:9c:9d:12:41:c4:b3:a4:44:b8:6c:cb:fe:3f:01:2b:f4:3e:
         f8:f5:a1:dc:21:85:9c:ce:6e:2c:a2:d3:87:44:20:74:9f:0c:
         2c:f1:3d:76:f2:1f:0d:37:8f:e0:7e:bf:cd:17:f0:26:59:42:
         a9:6a:e9:0f:df:da:21:21:56:55:82:dd:25:8e:dc:86:d5:2c:
         bc:8d:b2:bb:5d:7b:f9:b1:0c:95:06:b3:03:cc:86:ee:56:7e:
         0b:89:ff:38:70:55:9e:21:1c:04:0d:54:34:64:1c:06:cc:b0:
         75:c1:15:37:07:6c:f0:1f:7b:e7:3f:3a:24:78:91:e0:28:1a:
         4d:bf:ee:bb:d8:70:d1:ad:91:a7:7f:80:94:89:a9:7b:8d:c8:
         19:a2:db:ed:39:16:df:af:5e:6d:94:90:22:3a:0b:f0:1b:f4:
         00:51:5c:91:f5:a2:a6:fa:c2:53:ba:bb:3c:9f:6a:5a:97:64:
         97:36:80:14:7b:43:6b:ba:0c:05:ad:17:7e:15:83:8c:1e:d0:
         00:09:90:2a:64:8c:64:24:b5:3a:89:d8:5f:9b:12:0c:d5:f9:
         bb:2a:e4:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzKhscXRgCB5XlRUQGmH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTFlMmM1NGRkMzgxOWEwZThjOWJhMTEyNGIwMWMwYTBj
ZmEyOGUwHhcNMjYwOTI1MDkwMTQ4WhcNMjYwOTI2MDkwMTQ4WjAzMTEwLwYDVQQD
EyhjMjllZDQ1NWFiNGNmYTA2NTI1NzQ1MTAxMzQ4ZWJiYTMzNDk2ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAN8DOCFxUT1569vQA98g+JF4WXF
bQNH5HGA3m4ox3Fnm3bFfdzdiXHFnj4NeBZeYPYWPa8jfryMaboH7H4CJdCpaGwR
4XXQaOXbnRyX35SCam5SRK9CqjnWrHbZ2x26GiFvyASgB2mv2M9TpDeeh3kryUJ1
H9zCDIgoHKiWDmFcDLLg/LcJKrhZN+Kt73nxvFjTjx6aZtCTKEmAGTftFwajug3q
H/eP7EgK4WBxNR3GJ9lNDZxMdBn/J97/afJniXdMBe5tnu/RRP63ERxyQFPJdNHl
trUy8Z4J8FVUVQx33USApa2WmQda/e3hY44k549y3ic6JcqUex7/2T/FKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKe1FWrTPoGUldFEBNI67ozSW+uMB8GA1UdIwQY
MBaAFOrh4sVN04GaDoyboRJLAcCgz6KOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVIaXhVM1RnWm9Pakp1aEVrc0J3S0RQb280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt
ZWFjYjQ5NjVmZTM4LzEvNnVIaXhVM1RnWm9Pakp1aEVrc0J3S0RQb280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4
LzEvNnVIaXhVM1RnWm9Pakp1aEVrc0J3S0RQb280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICDWXf3q
Ut0Emy03fC/SlDRNWxa5LI/yN9VhU/lslRMs6yrSi5ydEkHEs6REuGzL/j8BK/Q+
+PWh3CGFnM5uLKLTh0QgdJ8MLPE9dvIfDTeP4H6/zRfwJllCqWrpD9/aISFWVYLd
JY7chtUsvI2yu117+bEMlQazA8yG7lZ+C4n/OHBVniEcBA1UNGQcBsywdcEVNwds
8B975z86JHiR4CgaTb/uu9hw0a2Rp3+AlImpe43IGaLb7TkW369ebZSQIjoL8Bv0
AFFckfWipvrCU7q7PJ9qWpdklzaAFHtDa7oMBa0XfhWDjB7QAAmQKmSMZCS1OonY
X5sSDNX5uyrkCA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:16:39 2026 by rpki-client