Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
File:                     r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft (raw, json)
Hash identifier:          au3YTVg/+5vHgenXbuByqMVnnMgfBfLmtj6MvcWDRHY=
Subject key identifier:   37:12:3C:4C:6A:37:AC:62:99:EC:D0:B4:D0:E4:42:74:CE:52:DE:4E
Authority key identifier: AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A
Certificate issuer:       /CN=afac83e5677b11050dcecbc27730831c5e6f9c6a
Certificate serial:       01A14015E12E7E65164E0ECEFE15BFFDF8B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
Manifest number:          0393
Signing time:             Thu 15 Oct 2026 15:02:18 +0000
Manifest this update:     Thu 15 Oct 2026 15:02:18 +0000
Manifest next update:     Fri 16 Oct 2026 15:02:18 +0000
Files and hashes:         1: 3FyU0x36g_92xZo6PjoVQ0pSzlY.roa (hash: N60hitRZnBFmF80ThdHlQ4FJpZTJ3gpcVo3+jeaVQ1E=)
                          2: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl (hash: 5x1VHSPqbxiq9VSGAjC0BuMZiw5wE9p6H4j224qPZUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:e1:2e:7e:65:16:4e:0e:ce:fe:15:bf:fd:f8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afac83e5677b11050dcecbc27730831c5e6f9c6a
        Validity
            Not Before: Oct 15 15:02:18 2026 GMT
            Not After : Oct 16 15:02:18 2026 GMT
        Subject: CN=37123c4c6a37ac6299ecd0b4d0e44274ce52de4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:61:86:a9:3b:21:c1:3e:e1:70:7b:8a:81:
                    df:55:7e:70:6f:29:2a:c5:28:73:e9:e6:79:d7:5d:
                    57:86:9c:85:42:d9:05:b9:6f:ed:cd:7b:38:ca:a3:
                    1d:bd:bd:05:75:95:f8:a8:09:8f:90:48:37:de:1e:
                    eb:2b:f0:8e:d5:81:f2:a0:a0:f2:ab:38:09:f5:fd:
                    df:aa:0c:81:55:75:00:34:1e:2e:bd:42:23:6e:43:
                    be:5d:96:c8:3c:c4:e8:2a:be:cf:5f:43:a5:19:36:
                    c9:bb:a6:69:47:1c:11:07:c5:71:45:5e:41:88:6e:
                    90:dc:cd:8a:76:c2:fe:12:4d:c9:9f:e6:82:dd:2e:
                    fa:5f:a3:09:4f:ec:2b:53:74:c5:6c:92:5b:a4:fa:
                    02:c7:aa:43:12:47:70:c1:78:f6:30:16:c9:1e:51:
                    21:ac:20:fc:c1:a4:dc:b5:26:75:5d:f5:2b:04:b1:
                    ea:44:bb:02:ab:4d:a0:67:f3:23:e4:ed:b3:5b:e9:
                    98:ce:25:22:6f:f5:58:b5:6c:ac:dd:69:66:59:fd:
                    a2:92:7b:6d:71:eb:d5:ad:00:95:c9:36:d4:9b:9c:
                    37:dd:58:dd:37:bb:f1:b2:40:14:fc:fc:dd:02:e1:
                    9c:ae:0f:ea:87:f5:f9:36:d5:b7:a5:ef:e9:a1:d5:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:12:3C:4C:6A:37:AC:62:99:EC:D0:B4:D0:E4:42:74:CE:52:DE:4E
            X509v3 Authority Key Identifier:
                keyid:AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:62:8c:c4:20:20:5a:97:bf:cc:a6:6b:61:6e:a8:f8:80:
         e6:e3:bd:c1:f4:96:6c:d6:c9:72:b1:7c:4b:80:36:7d:a4:0c:
         cd:59:1e:64:86:d8:34:b7:ea:1f:07:30:28:2a:a2:e4:65:63:
         b5:2f:b0:31:cb:29:64:39:3f:8e:67:c6:26:39:ad:ec:0f:80:
         9e:a3:55:38:94:2d:1d:79:9b:58:b0:2c:69:f0:42:07:d4:a4:
         60:c0:7b:3e:10:8b:cd:dc:e3:72:dc:14:c1:b1:9b:0d:b1:70:
         8a:71:3f:28:d2:70:44:7a:f5:d0:44:65:50:37:5c:b2:53:30:
         10:cc:8c:19:c5:e0:15:ac:f8:08:2d:6a:bb:4f:35:a8:a5:8b:
         b0:5d:12:b4:a4:ac:51:a1:9c:33:3f:8f:26:20:bb:98:6b:1c:
         56:24:d1:9d:d1:ea:e3:d3:e6:a6:7f:dd:d5:ba:a2:5a:d8:b5:
         01:62:ba:22:b7:f2:a5:b2:7b:9a:78:70:ac:a8:43:04:cc:71:
         13:a0:a0:8a:46:78:c9:68:e3:52:42:82:e9:2b:44:d6:f4:c7:
         04:82:f7:1a:40:c9:ab:47:20:64:b1:85:f6:00:ad:d3:5c:49:
         1e:ed:a6:53:4d:f8:8f:5c:f3:4d:2b:b6:6f:3c:26:62:2d:fd:
         b7:1b:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:09:57 2026 by rpki-client