Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft
File:                     6B2ZuoeSKLH-N9In78u1EA0mnB0.mft (raw, json)
Hash identifier:          CZFDVNzq8F7ocVs7vF/rzL/ZnadkcGh8FwniGZLWnbk=
Subject key identifier:   F9:F2:66:2E:FA:EF:CA:03:AB:20:3B:FE:BC:AF:0F:16:13:7A:96:AF
Authority key identifier: E8:1D:99:BA:87:92:28:B1:FE:37:D2:27:EF:CB:B5:10:0D:26:9C:1D
Certificate issuer:       /CN=e81d99ba879228b1fe37d227efcbb5100d269c1d
Certificate serial:       01A0C5C57ABA048C129E2315DFE035832ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft
Manifest number:          F4
Signing time:             Mon 21 Sep 2026 21:00:48 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:48 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:48 +0000
Files and hashes:         1: 6B2ZuoeSKLH-N9In78u1EA0mnB0.crl (hash: d595dbT5OSdde8X4KRwOzzmHMZ55TQjqijJpJGemXSc=)
                          2: rdBZpzVHc6sLCkt5q9g7isJN69s.asa (hash: df15E74ZEK87PYtJKxjLK9h7KqcYvQDc52uFCsOePEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:7a:ba:04:8c:12:9e:23:15:df:e0:35:83:2a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d99ba879228b1fe37d227efcbb5100d269c1d
        Validity
            Not Before: Sep 21 21:00:48 2026 GMT
            Not After : Sep 22 21:00:48 2026 GMT
        Subject: CN=f9f2662efaefca03ab203bfebcaf0f16137a96af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:75:30:b8:74:fd:64:c1:66:ba:d0:30:3a:
                    c7:f0:19:62:30:2c:63:06:f9:35:89:8c:89:7a:1e:
                    d6:20:0b:2b:69:2f:e6:23:36:18:5b:0c:86:43:79:
                    67:12:a7:f4:58:bd:90:af:df:32:98:bf:e4:62:3e:
                    21:b4:a6:e6:af:42:73:ef:f4:4d:9b:00:7d:fc:74:
                    b6:17:21:ba:4a:b1:73:77:64:52:54:2b:e0:f2:0f:
                    b8:b5:66:02:c3:9e:8d:20:0e:34:6c:9b:46:17:7c:
                    e7:6b:36:b0:4e:4d:29:c9:92:7e:86:2d:06:6f:32:
                    4c:e1:4a:c6:d8:94:f0:8d:c5:d0:65:38:68:3e:64:
                    c1:41:fd:10:5e:06:e1:74:92:5f:2a:ee:53:d0:b5:
                    11:5d:5d:11:6f:9b:88:19:a4:ee:67:82:8d:76:3c:
                    8d:c3:4f:78:cb:bb:84:cb:4d:6e:e9:52:af:ca:2c:
                    ac:85:8f:02:70:06:7c:3a:4f:7e:e9:81:c8:64:cc:
                    4e:74:36:c3:f4:c1:8c:cb:dd:36:12:08:38:9f:cf:
                    1d:2d:e4:34:6d:1b:a3:59:bf:1f:be:1d:a1:f8:28:
                    03:ea:dc:b9:08:9f:0f:93:10:33:60:46:ea:d1:53:
                    85:81:72:59:be:fa:e3:f5:d0:34:11:97:c5:94:47:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:66:2E:FA:EF:CA:03:AB:20:3B:FE:BC:AF:0F:16:13:7A:96:AF
            X509v3 Authority Key Identifier:
                keyid:E8:1D:99:BA:87:92:28:B1:FE:37:D2:27:EF:CB:B5:10:0D:26:9C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:35:fb:04:73:aa:b6:8a:45:4a:29:80:34:81:4b:91:56:0e:
         01:23:ba:0e:f3:46:35:04:2b:93:3c:2f:fe:5d:d5:07:02:27:
         6b:d7:ca:1a:5f:c8:27:9a:b0:ad:30:d2:e4:31:0b:d6:9f:0a:
         91:ef:53:2d:89:44:b2:fc:2c:5c:e0:4d:63:db:39:84:69:f1:
         94:c0:e9:84:5b:41:62:2f:25:28:d7:9b:33:bb:78:8f:1d:c8:
         c0:03:e5:b4:e7:13:f3:fb:ae:7e:05:8c:e4:dc:d2:bf:6a:f7:
         4d:b3:15:d6:d9:35:0d:0a:60:61:4f:f9:44:31:d5:8e:b4:ec:
         98:db:cb:2c:ef:83:49:4d:7e:1d:86:cf:47:33:9e:48:43:5b:
         41:dc:08:77:c0:44:f3:25:5a:3a:46:c0:9d:c7:d7:45:64:38:
         ac:1d:75:83:18:0c:8b:98:6a:cb:af:77:cf:1c:6a:07:ac:78:
         b4:56:ae:4b:d4:fc:e0:47:2f:3a:1c:f8:22:61:1d:a7:34:5a:
         87:b3:fe:63:3e:34:7b:93:10:04:b6:7f:58:a4:b0:2a:39:5f:
         d5:ef:d8:5a:b4:8c:1a:2c:d0:ab:bb:8e:0c:48:22:e5:43:a4:
         e7:df:ab:cd:31:8f:07:1e:98:ea:45:c1:ce:9c:f9:90:50:5a:
         87:18:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:24:23 2026 by rpki-client