Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
File:                     6rQDOf6nhnTLY0k0UbHTGhazOOg.mft (raw, json)
Hash identifier:          phPBnm6vp30Lpy1nO3+zZFyUmI2JFaCg/WMycC/Gma0=
Subject key identifier:   6B:45:24:9D:84:C5:14:06:67:35:B2:E3:78:F7:BA:E9:23:37:4A:1C
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Certificate issuer:       /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial:       01A0CA4737E1EE8BE2DF373498E554A3C2B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
Manifest number:          E2
Signing time:             Tue 22 Sep 2026 18:00:59 +0000
Manifest this update:     Tue 22 Sep 2026 18:00:59 +0000
Manifest next update:     Wed 23 Sep 2026 18:00:59 +0000
Files and hashes:         1: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (hash: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=)
                          2: 6rQDOf6nhnTLY0k0UbHTGhazOOg.crl (hash: WsqTgckg86lY/htRRNLd+9wMzlca4GhsdAHDiMfnicY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:37:e1:ee:8b:e2:df:37:34:98:e5:54:a3:c2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
        Validity
            Not Before: Sep 22 18:00:59 2026 GMT
            Not After : Sep 23 18:00:59 2026 GMT
        Subject: CN=6b45249d84c514066735b2e378f7bae923374a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:40:45:73:99:f4:5d:e7:c4:bc:70:55:39:
                    20:01:50:d9:49:2d:e8:53:12:75:28:f5:cc:6a:78:
                    66:17:fa:ef:b1:4f:73:05:77:9a:d3:7e:c4:8a:6b:
                    88:62:09:e6:d2:e4:9c:9a:de:48:83:c3:e8:32:1f:
                    71:78:c2:8b:7a:3a:c5:ea:92:84:e1:db:2d:a4:25:
                    8f:0d:ec:e6:90:cb:16:a7:c7:07:77:1f:4d:ba:8d:
                    60:90:72:ef:9b:af:96:c5:5c:00:0e:24:a4:37:1f:
                    57:c8:27:61:bf:f4:1d:9d:c4:33:ae:49:ce:ed:fe:
                    45:94:34:3f:f3:c8:c8:f4:fe:17:65:4c:eb:2e:9c:
                    42:3e:fd:84:2c:69:6f:16:f9:a4:fc:e6:15:8a:77:
                    1d:03:ed:a2:a5:39:4d:5e:b3:79:d1:84:0b:ae:3a:
                    4e:10:6d:99:93:86:99:9e:38:3f:46:36:b2:1a:ff:
                    2d:9d:90:ca:49:0f:89:14:ba:9b:dc:f2:ae:b9:5c:
                    af:9e:c9:04:b4:a4:7b:c5:2f:f3:d3:22:a3:02:02:
                    cd:4e:27:c2:4f:01:b3:37:56:31:52:f4:aa:be:43:
                    dd:85:2b:d7:0e:13:39:a8:2c:95:46:f9:12:d8:14:
                    04:ad:30:1b:c1:d9:ee:95:99:52:51:b5:38:48:6e:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:45:24:9D:84:C5:14:06:67:35:B2:E3:78:F7:BA:E9:23:37:4A:1C
            X509v3 Authority Key Identifier:
                keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:e5:b0:7f:57:b0:b3:35:b6:b6:a9:fc:29:81:62:b9:e2:
         cf:d9:42:49:75:62:6d:10:43:9e:27:09:43:d9:b2:7d:7f:04:
         b8:dd:c5:73:49:32:52:59:c2:03:c5:c2:8f:e2:64:5b:03:d5:
         d8:62:9e:e3:41:01:77:e1:ef:9c:ea:6a:9c:c7:27:84:46:63:
         23:40:2e:10:ed:94:9e:6d:0d:bc:9b:ad:3c:ce:ac:fb:9a:8a:
         33:33:f0:07:9a:50:3b:46:51:c2:95:a1:c3:c6:af:89:6f:8b:
         23:0f:36:0f:d4:07:e6:a5:e1:8d:47:f4:28:d6:a0:25:2f:9e:
         e4:5f:bf:84:1b:f2:de:3c:05:83:10:11:ab:48:17:a3:7e:85:
         6a:1c:fd:09:f3:2d:64:f8:25:53:2b:3e:bd:f1:23:f4:fa:8b:
         a2:60:d2:e5:ed:74:34:49:ca:b1:58:3d:44:c7:3d:cd:97:cc:
         99:68:cf:a4:d6:01:79:93:8d:52:58:d9:c3:ab:00:43:20:63:
         0f:2e:1d:bd:06:b0:c2:c7:08:89:70:1c:22:5b:ff:67:c1:b7:
         ca:ab:74:ce:34:c5:55:8c:b0:75:9a:ed:ca:97:e6:f2:18:42:
         e1:af:9c:dc:13:2a:21:91:21:66:28:25:7f:ca:7b:47:7e:eb:
         1d:39:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:26:18 2026 by rpki-client