Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/1G6FesgBoTch2Tn0VJkTJJ_OO6g.mft
File:                     1G6FesgBoTch2Tn0VJkTJJ_OO6g.mft (raw, json)
Hash identifier:          GgZSvnFpRF5fVCACFziboCRkW7GfzJp5pu/GU0tnWFQ=
Subject key identifier:   33:06:27:66:04:A7:29:02:20:6D:32:3A:B0:DF:40:5E:B8:A7:DE:94
Authority key identifier: D4:6E:85:7A:C8:01:A1:37:21:D9:39:F4:54:99:13:24:9F:CE:3B:A8
Certificate issuer:       /CN=d46e857ac801a13721d939f4549913249fce3ba8
Certificate serial:       01A0D9BADE8BCBD0899A5CE3E67A757532D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1G6FesgBoTch2Tn0VJkTJJ_OO6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/1G6FesgBoTch2Tn0VJkTJJ_OO6g.mft
Manifest number:          EA
Signing time:             Fri 25 Sep 2026 18:01:37 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:37 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:37 +0000
Files and hashes:         1: 1G6FesgBoTch2Tn0VJkTJJ_OO6g.crl (hash: pzwSnzMEnx8d8ybbAyuTvR7BssLfWzyi5S2emiJU5yU=)
                          2: Z-HYZckxTBhft0WjI6GFQNRlv0o.roa (hash: AcmlbTqx9TkSaOuaSCOvhu3EZ4PBTqXkSV6X981ftd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/1G6FesgBoTch2Tn0VJkTJJ_OO6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/1G6FesgBoTch2Tn0VJkTJJ_OO6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1G6FesgBoTch2Tn0VJkTJJ_OO6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:de:8b:cb:d0:89:9a:5c:e3:e6:7a:75:75:32:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46e857ac801a13721d939f4549913249fce3ba8
        Validity
            Not Before: Sep 25 18:01:37 2026 GMT
            Not After : Sep 26 18:01:37 2026 GMT
        Subject: CN=3306276604a72902206d323ab0df405eb8a7de94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:67:5b:ed:a5:cc:84:79:0b:d2:e3:e7:92:
                    63:3e:f1:74:a5:fb:dd:ed:05:a7:75:af:fd:b4:e9:
                    08:92:77:4b:cb:b0:db:67:1f:aa:32:bf:a2:a4:aa:
                    0d:db:3a:3c:4f:8e:fb:7e:48:2f:80:77:6c:d8:91:
                    75:b6:c3:14:0a:ee:93:79:1d:e8:a6:fa:3a:00:a1:
                    64:b4:cd:09:b0:35:a9:cc:bf:80:e3:71:3f:d8:46:
                    93:c7:9f:1d:83:dc:b0:08:74:63:94:38:5a:2b:b9:
                    e1:ca:c3:00:30:cf:ca:db:d6:81:5d:cb:a3:ec:12:
                    7c:82:4d:9e:a9:9d:06:dd:30:6b:f6:18:6c:20:cf:
                    10:27:8b:b0:d2:2c:d0:62:d0:43:82:78:9e:df:7e:
                    ce:2e:71:b5:71:2c:b8:6f:34:bc:6c:cf:1d:6d:36:
                    1f:6d:9d:0e:10:f2:fc:06:45:78:7a:a9:0a:9f:d1:
                    cf:02:75:c8:70:b2:ac:ea:7c:30:01:9c:c6:d9:c4:
                    cb:a5:d3:f6:15:11:38:fb:b6:8c:c4:12:81:5f:0a:
                    f0:ac:f4:6e:bf:ef:40:eb:4c:a8:c2:cf:39:23:38:
                    e8:9b:30:a0:b0:0b:8d:de:ae:8f:b9:a1:65:dc:b2:
                    65:65:f4:85:91:80:ef:35:b2:f7:ae:42:f6:2c:ce:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:06:27:66:04:A7:29:02:20:6D:32:3A:B0:DF:40:5E:B8:A7:DE:94
            X509v3 Authority Key Identifier:
                keyid:D4:6E:85:7A:C8:01:A1:37:21:D9:39:F4:54:99:13:24:9F:CE:3B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1G6FesgBoTch2Tn0VJkTJJ_OO6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/1G6FesgBoTch2Tn0VJkTJJ_OO6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/1G6FesgBoTch2Tn0VJkTJJ_OO6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:47:b3:6d:be:74:c7:f8:79:20:5d:65:e5:b3:38:d2:66:
         f1:47:ed:ed:fc:27:e2:93:0c:37:79:84:98:4c:17:4a:87:42:
         52:85:48:fb:94:fb:e4:ec:8c:ff:9a:9d:29:1e:d8:ee:8e:2c:
         0d:f5:88:6a:1a:8c:63:cb:e7:c4:b2:25:38:01:2a:9b:b6:2b:
         05:a3:e4:48:c8:62:cf:7b:f4:6a:ea:f1:f8:50:f8:42:9f:5d:
         82:1f:31:8e:e8:a8:1d:96:98:aa:2b:be:8f:4f:95:e1:c0:60:
         60:68:d8:7a:7e:59:95:9a:0d:0c:f9:68:f4:8b:1f:08:ec:28:
         dd:e3:f3:12:e4:85:13:4f:db:9f:c2:bd:ca:01:09:8a:04:cd:
         6e:45:41:fa:13:77:2b:6a:0d:ce:66:92:fa:be:ad:22:b3:a1:
         da:b7:8d:fa:7c:40:3e:e4:eb:94:65:20:f9:67:55:67:0a:55:
         3d:25:c1:14:53:45:c8:a3:b2:d8:04:0f:02:fc:f6:9f:b2:45:
         06:f5:fc:c5:29:c2:92:3a:63:9c:d4:27:8a:80:42:c8:b5:e2:
         0e:84:77:18:83:e1:11:16:3f:2e:38:a7:59:72:21:84:5b:9f:
         b4:4b:83:9c:6e:3c:6f:07:c8:e4:1f:f7:7a:0e:b6:b0:c3:eb:
         49:61:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:26:26 2026 by rpki-client