Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          8kgijG81xGgW7ZBy1jJN5vXZRoRjVtL+O47pH2YwPUY=
Subject key identifier:   00:56:71:1A:BC:93:05:9A:CB:74:66:A4:F5:78:63:16:5B:E2:2C:7D
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       01A0DC170B901922068F44EAEF4995448AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 05:01:32 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:32 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:32 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: ArrlsZxWGYdRNUOPeUnr0xQI4Po+gFVowOlIgr3oBLU=)
                          2: HICvEHKXiwO8tUnXw2THhezIHTg.roa (hash: m259oPsH+iF/F010gAj+3VHPjH7EbopMEIXrwuwaC7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:0b:90:19:22:06:8f:44:ea:ef:49:95:44:8a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Sep 26 05:01:32 2026 GMT
            Not After : Sep 27 05:01:32 2026 GMT
        Subject: CN=0056711abc93059acb7466a4f57863165be22c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:f6:ab:b8:2c:1b:fa:30:b6:bf:8e:2a:6b:
                    a1:ef:74:53:34:73:04:0f:12:a0:c0:20:30:df:dc:
                    c1:2f:84:5a:f7:6a:74:cd:e9:9a:34:e2:c9:30:c8:
                    22:b3:d7:12:28:e4:a3:3a:19:89:10:eb:b8:01:d8:
                    9a:e7:39:09:be:3a:95:84:25:35:eb:b6:74:c3:94:
                    cf:21:a5:bf:4c:27:f3:d8:a5:71:66:ea:cc:5b:01:
                    73:fb:62:ef:a9:b4:09:ef:17:79:45:89:55:62:15:
                    1b:0a:e6:d7:c6:15:e9:eb:14:c6:af:43:f3:4d:0d:
                    dc:19:7d:40:f3:67:f6:f4:25:fd:c1:4b:76:93:e6:
                    df:5a:c7:87:2a:47:b3:96:00:18:8b:6c:b8:54:9e:
                    c9:32:c6:cd:fd:70:44:38:5c:ca:83:a7:d6:65:b2:
                    3b:9c:1e:d9:ea:da:71:a0:77:64:05:4e:c9:e6:bd:
                    86:71:b0:55:8e:91:e7:00:51:d5:05:15:70:70:39:
                    54:12:b1:c3:31:fc:bd:5d:ba:64:6c:cf:94:53:ad:
                    2a:62:9c:24:0f:af:cf:a8:36:4c:8f:64:91:26:c8:
                    8b:97:d6:cc:8a:d2:99:db:01:1c:96:02:aa:2b:d3:
                    ea:ee:3f:30:db:cb:ca:03:30:eb:55:12:56:ce:f8:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:56:71:1A:BC:93:05:9A:CB:74:66:A4:F5:78:63:16:5B:E2:2C:7D
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:75:3c:e2:8f:76:7b:4b:a3:8e:05:be:72:17:d1:bb:db:f9:
         0d:6b:c8:23:f8:44:3a:2f:ba:31:97:e0:bb:93:5c:3e:22:aa:
         7f:b1:65:6a:37:4b:bf:ba:72:1e:11:cc:3b:d4:31:68:47:62:
         26:51:91:61:ea:74:fc:f8:d6:5f:11:54:6f:11:d2:35:77:a9:
         9c:98:8d:9e:fb:3f:d8:dc:36:c8:42:c7:de:dd:f6:c1:f1:ad:
         32:75:4d:34:30:ab:ca:0b:49:e1:6a:f6:9c:45:4a:61:6b:47:
         0e:e5:a3:8b:23:a1:c2:b8:99:5d:d6:93:a1:de:38:25:36:63:
         14:96:18:2a:5a:e0:3f:9d:47:51:00:a9:dd:d2:ba:ca:7a:95:
         0f:5e:45:4c:aa:2f:fc:29:d5:ce:51:47:19:0d:c5:db:ad:dd:
         2a:fc:65:cc:ab:ed:17:f6:65:96:fa:88:d9:7e:6a:e3:82:73:
         fc:6f:17:59:3d:e3:e5:25:7a:a8:d3:71:f2:12:06:7b:55:89:
         ba:73:27:83:a3:13:a4:eb:fc:a9:3e:b9:53:28:7a:58:3f:28:
         7e:7f:27:a7:d5:7f:ce:87:eb:0e:d7:8a:3e:b5:78:0c:a5:f2:
         06:6e:25:93:28:f7:45:26:06:7e:62:92:a8:92:c2:8a:be:93:
         72:c6:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:38:16 2026 by rpki-client