Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          +bs4JvSFTv0l2tfdYq7ETcyU07iQ1FBe+v0gW96tbNw=
Subject key identifier:   ED:6D:EF:3A:CD:DF:FF:B9:1A:81:4F:25:6A:C7:F5:B3:96:19:B6:72
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       01A0C09F7EB16339C7F278BFEF69BD34CFCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          0BA7
Signing time:             Sun 20 Sep 2026 21:01:12 +0000
Manifest this update:     Sun 20 Sep 2026 21:01:12 +0000
Manifest next update:     Mon 21 Sep 2026 21:01:12 +0000
Files and hashes:         1: 77Pzys8EjCWjn94m5-fvg7JsuLY.roa (hash: Rk/urrdOvsWhN/Fm8DGscorvloC/YwBsF8klanLEJB8=)
                          2: CLI88VHiEhgKE-1aGQUntQikJ5Q.roa (hash: ZVHFqHEU1nz5pNZPpYsPfnWS/ZMoHolHN6V8GvVDEFc=)
                          3: XRNvoKreqEdZEhJbOno-5BqPGEE.roa (hash: z4A5c3Ug9WBluQD4ssGRXcELVIDjB7HhErsV07uP9GQ=)
                          4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: m1NKIQordtTWTey7vNfOxe1PPoQbmxieisMo6RXPI2Y=)
                          5: cMhJe9vMQdQscfbNYoY-RkxcY2s.roa (hash: 93wi+LrRWDjLqjvMhMNKSnr4mEg4br0bsv0cTgfuNiY=)
                          6: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
                          7: r_ZJyy1H5Ytar0NlqRrjDEm17lM.roa (hash: +sYf7FlHcDL4+/H52w762XwNy7Z8plqNAAGvu5Wp3Es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:7e:b1:63:39:c7:f2:78:bf:ef:69:bd:34:cf:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Sep 20 21:01:12 2026 GMT
            Not After : Sep 21 21:01:12 2026 GMT
        Subject: CN=ed6def3acddfffb91a814f256ac7f5b39619b672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:9b:9f:e8:60:2b:b6:e1:7b:ea:61:08:06:
                    87:53:e6:1d:bb:79:c3:2a:ca:46:97:6c:6b:a3:e9:
                    58:7b:ee:43:11:0e:a3:a6:ad:2b:78:2f:83:8b:70:
                    fc:77:96:b7:14:f0:1f:23:27:da:23:32:8d:79:00:
                    20:c4:1a:b8:71:9b:58:75:52:7b:8e:44:76:b0:29:
                    7c:87:6d:3d:d8:02:ec:52:1f:d3:a3:25:6b:52:51:
                    ec:1c:19:17:d4:75:30:68:dd:57:b0:16:e0:9f:75:
                    90:15:cf:af:8b:76:52:24:37:84:51:3c:50:a6:a4:
                    0c:9e:4a:78:23:99:7c:4d:a0:47:e4:a5:0c:29:d6:
                    f7:de:6e:82:6a:dd:3d:7d:51:65:b5:06:9d:ea:d7:
                    c9:3c:2c:4a:e3:19:a9:4f:cb:ce:c1:cb:f5:bc:8a:
                    59:90:cf:fd:c2:c0:d8:75:0a:42:7c:1d:4c:de:7d:
                    39:a0:df:6a:08:ac:ac:df:69:d8:13:a5:5b:36:46:
                    8b:27:27:23:4f:bf:05:74:8b:17:6a:47:69:02:1e:
                    d7:0c:62:71:2f:9f:2d:2c:7e:2e:9c:fe:22:ea:ee:
                    2a:45:ad:94:64:b4:99:d1:7f:06:f1:93:db:82:2b:
                    5f:a3:03:48:be:03:96:e2:a7:da:a9:fc:55:d0:b4:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6D:EF:3A:CD:DF:FF:B9:1A:81:4F:25:6A:C7:F5:B3:96:19:B6:72
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:b0:09:ff:ad:ad:d1:3c:07:a8:b8:1c:6b:66:81:fa:43:
         97:d2:33:3a:71:7b:02:8d:9a:99:a8:e9:50:ea:4e:50:c0:a2:
         a2:5a:48:ca:32:74:b2:ee:c0:c5:d0:d3:45:fe:bc:a7:e5:b2:
         ee:71:de:e3:7e:f3:83:81:b6:a7:7d:40:d5:83:cb:88:de:9e:
         b1:6d:d4:28:77:8a:ea:79:4a:68:ff:d7:ae:05:af:0d:83:14:
         17:29:72:5d:87:df:92:6a:ff:94:e4:a3:29:69:ba:8c:00:2d:
         47:e1:89:62:6a:10:b7:d2:18:aa:c3:67:40:bc:6e:ff:2b:57:
         40:4b:f0:6d:94:ef:37:10:23:db:b5:a9:71:bb:9a:4d:6b:b9:
         67:8c:d3:08:62:de:7e:73:71:41:49:5f:d6:35:f7:1b:b3:5c:
         78:65:59:54:08:8f:17:a7:3c:75:c6:ed:2c:5d:7a:df:97:d5:
         10:99:a1:c5:9c:3f:12:93:90:6f:71:99:39:97:ea:1a:45:49:
         b9:2a:2a:81:84:3e:a3:ab:30:0c:11:7d:d2:74:b0:7a:14:ff:
         f0:73:4a:b6:88:f5:48:25:85:64:95:3b:fb:fe:ee:0c:d4:e0:
         e7:06:bf:38:fd:52:21:c5:8d:e9:c6:17:f0:dd:52:56:31:41:
         65:96:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:44 2026 by rpki-client