Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File:                     6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier:          uFzG0rOCFo7dfim22d/SBbPfwtiIBvmpWnLNuMFbFgA=
Subject key identifier:   0F:60:88:C4:AA:DC:75:49:FD:8F:23:17:02:FF:AE:A4:CE:2A:6F:E6
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer:       /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial:       01A0CB22FB1FC97F023D582708CBFFD1BD4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number:          196F
Signing time:             Tue 22 Sep 2026 22:01:02 +0000
Manifest this update:     Tue 22 Sep 2026 22:01:02 +0000
Manifest next update:     Wed 23 Sep 2026 22:01:02 +0000
Files and hashes:         1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: FCWWQBsVYgwRUzi3Y0jBK/FWAMUYSDYgFHlpo0+3GMc=)
                          2: 6tKCB_wkIxXU6hzE6_HbzbLSnRk.roa (hash: qGVajF5H+47Haw7fSlS2S4yS6iBrCwjpFhlgTElC1Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:fb:1f:c9:7f:02:3d:58:27:08:cb:ff:d1:bd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
        Validity
            Not Before: Sep 22 22:01:02 2026 GMT
            Not After : Sep 23 22:01:02 2026 GMT
        Subject: CN=0f6088c4aadc7549fd8f231702ffaea4ce2a6fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:23:34:39:09:e6:e3:bb:d1:25:07:42:f8:
                    c6:c0:f2:0a:bc:95:54:34:a8:67:81:d9:af:b1:94:
                    8f:89:4c:f8:51:b6:2a:3f:15:9f:bc:3f:3c:29:ab:
                    ae:17:08:60:ad:51:56:4c:9c:06:ea:5e:ea:6d:ee:
                    7f:8f:eb:5e:0e:a2:d7:47:58:48:a8:54:af:bc:ae:
                    c6:a4:70:d2:94:8f:34:16:f5:d2:c3:f9:03:05:5e:
                    a0:c9:b1:0a:89:5f:8f:75:e1:68:53:66:a8:d0:fa:
                    a0:37:b5:d4:d5:ee:96:66:10:25:81:95:8d:2a:26:
                    14:4e:43:25:ad:4d:8d:d4:f1:58:67:89:38:b1:88:
                    df:3d:5b:1f:8e:5f:3f:87:ea:94:f1:df:35:30:2a:
                    6a:ed:a2:a0:77:51:fb:2d:f9:16:20:f8:4e:a9:69:
                    92:c2:97:9c:c7:86:cd:1f:5f:40:7e:44:fd:e5:3d:
                    e6:e4:41:2a:9b:b4:71:a7:c7:cb:b3:0d:7e:df:a3:
                    ba:91:6b:5e:94:3d:f7:55:50:00:2e:77:fb:3c:c2:
                    7a:f8:79:aa:c5:02:dd:73:98:7a:01:7a:de:28:77:
                    93:51:b5:fb:fb:fd:b6:51:90:47:fa:cf:8e:12:ce:
                    f5:20:e6:2c:cf:bc:d4:ce:94:b1:e0:ce:54:5b:18:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:88:C4:AA:DC:75:49:FD:8F:23:17:02:FF:AE:A4:CE:2A:6F:E6
            X509v3 Authority Key Identifier:
                keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:14:6e:f8:da:25:07:36:1f:8b:3c:d7:7e:2a:bb:d2:5e:9d:
         c6:4e:21:8f:15:17:49:97:07:6c:67:b3:a0:90:a3:ad:e8:cc:
         e9:5f:a2:74:5a:78:c6:dd:b7:30:e6:ea:6a:e1:bc:38:88:19:
         96:4c:e3:f6:e8:85:8a:90:44:44:25:fe:16:a8:71:db:26:34:
         8f:cf:c5:2b:c1:fd:81:f4:d0:d4:65:65:15:3b:b6:84:05:81:
         7f:66:a1:6c:f3:62:f1:b9:57:cf:bc:08:9f:b1:91:91:2e:13:
         39:e8:b4:32:2f:13:77:0d:a7:62:5f:e9:48:cb:a0:58:94:8d:
         63:db:17:69:12:2e:f6:66:09:11:bd:a6:d5:35:a1:c7:af:05:
         5c:6c:65:0a:be:e0:ce:29:03:5c:2d:c9:8e:d8:a8:be:42:09:
         a1:15:fb:56:e5:b4:de:bc:3e:dc:46:11:b9:7b:5a:0a:47:9a:
         7b:86:f3:40:8c:cf:4d:7b:56:9f:f0:ef:c9:23:cd:1d:5f:31:
         06:20:db:97:d5:b2:92:11:c6:9b:3a:83:05:4c:f3:d1:b3:22:
         01:3a:9f:34:12:68:34:14:4c:dc:2a:89:e4:fc:61:94:f2:d2:
         29:17:06:b3:7f:c2:3a:55:e1:0a:74:d2:6e:99:90:bf:71:73:
         cb:8e:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:20:46 2026 by rpki-client