Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File:                     iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier:          83iphsFYa62cX+MU0fIO07GTfLB7FYbjiESKrrlwE1s=
Subject key identifier:   6B:3F:6D:B3:2E:F0:2D:CC:1B:39:01:6F:D2:44:15:2C:83:CA:3C:81
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer:       /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial:       01A0D83B4175517A5ADDD1C13FC36F3866F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number:          0270
Signing time:             Fri 25 Sep 2026 11:02:37 +0000
Manifest this update:     Fri 25 Sep 2026 11:02:37 +0000
Manifest next update:     Sat 26 Sep 2026 11:02:37 +0000
Files and hashes:         1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
                          2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: lEWuAbCw8L/wPFce9okoETnMoDtH+PBK90HtNao81jU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3b:41:75:51:7a:5a:dd:d1:c1:3f:c3:6f:38:66:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
        Validity
            Not Before: Sep 25 11:02:37 2026 GMT
            Not After : Sep 26 11:02:37 2026 GMT
        Subject: CN=6b3f6db32ef02dcc1b39016fd244152c83ca3c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:29:b0:04:01:2f:32:c8:26:ab:03:2f:8f:
                    06:1f:2a:98:22:3e:f9:b3:9c:32:0c:da:cc:8f:e4:
                    05:74:fc:41:a9:62:28:0b:0c:db:40:ef:72:4e:e2:
                    41:b6:88:fc:06:31:e8:b4:e9:b4:64:0d:e9:7b:4d:
                    38:ae:a8:90:87:a8:5e:1f:fc:ff:c4:11:ff:69:e4:
                    ed:d0:dd:28:b4:43:75:a2:70:c3:34:bc:af:07:9d:
                    15:c9:93:02:ad:b9:9f:2c:0f:02:1a:31:fb:0a:8e:
                    16:f2:1d:17:aa:96:31:17:48:58:a5:28:16:56:66:
                    16:96:88:4a:2e:fb:3a:ca:8a:87:ca:d6:fa:e8:5b:
                    ad:45:b4:c0:fb:e9:59:ea:2e:2c:a6:b2:dc:c8:6a:
                    92:42:4d:b5:0f:0c:07:94:5b:d7:66:ed:ef:5e:53:
                    d8:14:24:9f:7e:29:e3:ab:76:b1:10:03:40:85:53:
                    50:c0:cd:5c:0f:d2:af:c1:65:9d:00:f3:d1:16:07:
                    7a:52:71:7d:be:88:96:99:58:d8:64:6e:01:a5:ba:
                    3a:23:4d:92:3f:5e:30:6e:9b:51:f0:f9:cd:b4:43:
                    72:f7:3a:9c:1a:16:11:66:ae:f8:12:13:8d:f4:dc:
                    db:2e:60:a3:51:64:a9:f2:32:cd:51:cf:5f:9d:be:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3F:6D:B3:2E:F0:2D:CC:1B:39:01:6F:D2:44:15:2C:83:CA:3C:81
            X509v3 Authority Key Identifier:
                keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:84:56:9a:5c:f7:f9:87:c2:21:47:f6:28:25:2b:c3:91:8e:
         bc:4c:a9:14:5b:7e:2f:12:0d:4b:1b:74:fb:15:e6:af:61:0a:
         42:42:51:fc:34:a0:c8:58:8e:46:f8:d6:45:9d:34:e6:ce:af:
         4c:f5:3c:f2:1b:53:cc:2b:1b:6f:a2:d9:83:0c:09:39:36:4e:
         7f:ce:97:8a:05:af:1d:3a:b8:cb:68:2d:59:09:f0:7b:77:f4:
         88:55:5c:21:cc:20:e5:9d:56:08:48:24:e0:c8:7b:cd:92:a6:
         07:5d:c9:fe:b2:51:09:65:e5:95:f7:1e:ec:f6:57:71:5b:a7:
         5b:4f:1b:74:7d:88:bd:a5:15:c1:9d:4e:92:f6:5c:44:b7:b6:
         cb:e3:17:26:1f:85:e3:f2:bc:6d:17:9c:e4:bb:c0:5f:87:16:
         42:31:4b:a3:c7:0f:f5:5b:bd:35:f7:33:15:31:b2:6a:d5:30:
         75:b1:46:90:50:ea:12:75:2e:9e:b7:49:29:0d:b0:66:58:31:
         90:ef:db:8f:19:9b:a9:64:f6:fb:1c:26:7b:29:f4:da:cc:14:
         f6:7c:71:cc:a0:5b:ce:7f:ce:19:59:a6:68:de:4e:80:11:5b:
         f8:6e:21:0e:f8:6c:a2:fb:c9:34:c6:63:2a:68:ab:53:82:74:
         33:65:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:34:20 2026 by rpki-client