Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
File:                     A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json)
Hash identifier:          +vPdLAhG9JzBXBgmKGncNN5e8zlJjmHZ6xmS4CieqRc=
Subject key identifier:   E4:B4:EB:56:FF:85:D8:36:7E:48:21:67:3E:83:19:2F:70:9D:C4:F1
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Certificate issuer:       /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial:       01A0C255F92D3FF0B4CBA7F3B07716935740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 05:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:09 +0000
Files and hashes:         1: 0jj85-oYukZPfmdDqoWSsZvTa3s.roa (hash: 9CTe2BfWzoRqe7mB+Ls1PH8RMNgBpSi/kK2iHWVfBTg=)
                          2: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: 9v8BXKftOE+oQA7+pcR+nuV5EWQlvNbE3H5tzt+fnmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:55:f9:2d:3f:f0:b4:cb:a7:f3:b0:77:16:93:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
        Validity
            Not Before: Sep 21 05:00:09 2026 GMT
            Not After : Sep 22 05:00:09 2026 GMT
        Subject: CN=e4b4eb56ff85d8367e4821673e83192f709dc4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:88:c8:d2:e3:2a:7d:1e:0b:e2:70:0f:49:
                    a7:a2:38:63:6c:e7:d3:a4:6a:44:59:34:fc:aa:36:
                    3f:00:e1:1e:cf:bb:fa:47:e1:f3:3b:91:72:9f:89:
                    39:6e:00:b8:d1:4b:ae:ed:e7:f2:54:24:6f:59:b3:
                    fd:d3:29:15:c5:55:ab:f0:b3:f7:e6:d1:d1:5c:56:
                    44:3e:d6:9c:bf:1c:1c:e4:8c:c5:43:8e:7c:d1:e3:
                    1d:55:d0:5b:55:2a:6f:8f:d9:ca:43:75:32:57:52:
                    63:31:3c:ea:6d:e2:07:a6:a6:74:03:40:1b:8f:39:
                    80:d5:2b:82:92:ef:47:49:9b:ee:95:a9:51:81:5e:
                    22:e5:98:57:cd:4b:8c:5d:cf:c7:cf:07:a0:98:80:
                    10:6b:ba:86:d6:04:57:de:10:62:ed:b3:cd:1a:92:
                    79:c9:21:ea:08:da:ed:dd:2e:b7:1a:40:4e:ac:1f:
                    2b:ff:69:07:d4:43:85:ee:54:36:2e:8a:8b:d9:66:
                    87:28:e1:b6:67:be:5e:b9:35:9e:be:ca:f3:09:fd:
                    ee:69:13:6c:2b:62:50:dd:6e:ac:48:85:10:c0:39:
                    43:7e:7e:95:9b:57:9a:58:e3:95:10:ab:e1:eb:b1:
                    9d:a0:44:ff:11:e2:d5:78:fe:d9:30:af:81:0f:31:
                    38:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B4:EB:56:FF:85:D8:36:7E:48:21:67:3E:83:19:2F:70:9D:C4:F1
            X509v3 Authority Key Identifier:
                keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:be:0a:4c:a3:f3:ab:bf:52:31:52:c0:c2:7a:03:47:ee:ac:
         14:81:01:76:17:5e:10:87:1f:ad:b0:4a:10:5c:b7:70:e9:80:
         1b:72:dc:6d:c1:56:29:04:94:e6:d6:b4:7b:c6:46:81:e3:73:
         3e:77:95:c9:bd:34:6b:bb:19:9e:8c:9e:06:f4:08:73:9a:61:
         be:8f:83:6c:8d:83:9a:08:b4:be:53:1e:c8:3f:09:21:92:12:
         ad:65:65:fa:ed:94:39:61:43:84:59:98:f4:62:2f:74:6c:c5:
         33:9e:02:b5:7f:41:c1:cd:fa:38:0c:69:c8:9b:cf:e6:c4:3f:
         84:c8:ad:74:7c:1d:8e:19:6c:16:df:34:70:9e:93:6c:ac:69:
         d6:9d:de:96:5f:7d:cc:23:13:23:0f:9e:05:97:0e:40:31:cf:
         ec:a7:4e:5b:d6:2c:f5:1e:0d:98:66:00:09:b1:af:44:e0:2f:
         94:eb:99:d2:0d:a0:83:05:84:0c:04:1f:c4:85:ea:70:27:c1:
         9e:98:23:d1:59:75:a6:20:fe:5a:f9:f6:99:4c:16:18:5d:ed:
         4e:de:97:b8:e1:e7:6a:c4:bc:4c:c4:f9:a1:56:20:66:b1:2f:
         f6:f8:51:d0:cb:bd:0c:77:c5:2b:45:ac:c4:1b:81:23:65:6a:
         ca:21:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:43:34 2026 by rpki-client