Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          XlAPDrqTpsVol4yODpWZlFEgzLbmIkLyeDNrRHg2Y4Y=
Subject key identifier:   26:7C:CE:83:8D:6E:62:00:A0:5F:9A:00:7C:B8:67:17:6D:6B:E0:D5
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       01A0BFC2DCF11A37FCE73DDB4C82BB9FA32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          19EF
Signing time:             Sun 20 Sep 2026 17:00:13 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:13 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:13 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: k60D11357uL+TUPeXuac2D484j51LqgwLGsp/AhlBI8=)
                          2: OEcoV0x2ZiERZGgDrlv6frQzG3o.roa (hash: Fnf+bBSZRAjDDHsRlYG1QWMEEm9hP4YKSKPdjjCMdQc=)
                          3: U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa (hash: ynlZLfA1KKQGA9ays2zyoOPFiR0SmVJSMZZfG1zu6sk=)
                          4: f_5BjnEr80pGWfL1w3q_5fZIFf4.roa (hash: RpdasGSTz3LwfRMX6VuVLK5/qxPoIGc1oN473heL/WE=)
                          5: mtPVSWGGA9av5jGLn16eQn0UQjc.roa (hash: rVQVTg7c8+hdflSpxdf+lr1Hlsinw9GyRMav2V9r1s8=)
                          6: pK6hDJxmfZUaCBepnWZvEBb9jQ8.roa (hash: +OSS7va6u+BokiYgs5Z+5mtwaa42GT6KDBzxwPZg2k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c2:dc:f1:1a:37:fc:e7:3d:db:4c:82:bb:9f:a3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Sep 20 17:00:13 2026 GMT
            Not After : Sep 21 17:00:13 2026 GMT
        Subject: CN=267cce838d6e6200a05f9a007cb867176d6be0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:d2:d4:19:d5:b8:a4:62:43:b1:91:5d:3b:
                    d1:d5:0e:32:93:b6:37:ae:31:84:d5:2b:a1:f1:0f:
                    2c:b1:d2:a4:dd:4e:5c:8d:7e:33:76:0e:d7:d8:72:
                    b6:cd:0f:ea:64:11:9a:1c:0c:76:05:11:75:d7:02:
                    46:8c:f6:cd:ad:4b:b7:31:06:f1:f0:e9:c6:2e:40:
                    dc:6a:49:74:7a:6c:65:a1:31:6e:c8:93:7b:d2:20:
                    2e:84:dc:98:a3:e5:38:3c:30:a9:71:4f:84:bf:e8:
                    9a:57:0d:ea:87:bc:ee:8d:ae:44:d3:f7:f6:dc:54:
                    62:85:33:fd:c8:51:72:f5:47:f0:7e:60:67:1d:f4:
                    ca:51:f9:8d:10:92:27:75:a6:1c:a5:77:a3:5c:a8:
                    e7:33:0e:ff:94:93:89:3a:92:ef:22:75:b7:f8:a5:
                    4b:67:41:21:27:77:64:f3:be:f7:1c:b6:fd:c5:33:
                    1e:36:7a:e5:e2:ef:55:d8:a3:ca:12:49:7d:c5:98:
                    07:58:92:ec:ca:39:cc:68:21:77:c8:3d:ae:2d:36:
                    cf:29:47:73:52:bc:b3:12:65:49:19:e0:e3:aa:4f:
                    ad:20:7d:73:dd:16:35:e1:98:5a:1c:fa:98:d7:d7:
                    f5:1b:cf:70:47:d1:a1:c1:fd:78:48:94:14:ce:bd:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:CE:83:8D:6E:62:00:A0:5F:9A:00:7C:B8:67:17:6D:6B:E0:D5
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:89:35:f8:bb:e5:5f:52:b6:b9:f9:03:63:e1:e8:7c:1c:cd:
         32:15:81:7e:b5:19:70:35:af:8b:6d:4e:4d:73:b1:a9:63:32:
         c4:ea:13:2a:3b:7d:b3:90:dd:69:77:cb:fe:38:8c:ce:9f:42:
         ba:fb:aa:ba:da:3f:d3:e7:19:da:94:63:a6:68:c4:79:80:e7:
         71:16:be:41:cf:ca:1b:30:0d:42:0b:2a:71:76:34:2d:d2:36:
         cc:8c:7e:ad:2d:32:5e:44:eb:97:be:a6:d8:f3:3d:0c:80:dd:
         f5:5e:a8:d5:15:0c:a6:88:b9:3d:c7:78:fa:6c:81:a9:4a:09:
         7f:38:50:77:e4:15:08:8b:2e:58:38:b1:19:35:cb:45:af:25:
         9c:8c:68:4f:1b:fe:0b:43:8f:78:fe:ee:63:95:c4:e4:c0:bb:
         ab:05:f8:f0:f1:77:4b:a4:e7:f4:30:b8:dd:7b:f5:ab:54:d7:
         8f:f0:d5:26:46:3f:e8:d1:bc:89:2c:1d:15:09:f0:09:5a:d3:
         2b:72:2f:e6:88:0f:97:8b:5f:cc:87:18:cf:3b:c2:44:02:6d:
         ef:f9:0a:50:08:61:86:fb:5c:9a:f8:a0:df:f5:7b:0d:f1:6e:
         74:5c:65:13:60:6f:f9:65:9f:eb:51:87:3c:e6:61:12:72:4a:
         d4:06:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:15:44 2026 by rpki-client