Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          +R9uf1wLJT8UlgXva2RXV2bMLelEm5IDEUAaV6pi4Ek=
Subject key identifier:   A9:16:82:DB:D0:FF:05:0B:FE:11:97:F2:24:9D:34:3D:6A:A5:60:4A
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       01A0D0494377A52E1EC92DADB005AC7EC1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          14E2
Signing time:             Wed 23 Sep 2026 22:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:57 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: HHx2qV2AfVgCrg1i3bnGE32ZeYLa0b/Pvack6MyU/3A=)
                          2: UpgEGqcu1GJuaf10KzAyz7aDr-8.roa (hash: FafcYCab2MaXN/I3JHkDEUMkIjEyTMvrCthzIZARBZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:43:77:a5:2e:1e:c9:2d:ad:b0:05:ac:7e:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Sep 23 22:00:57 2026 GMT
            Not After : Sep 24 22:00:57 2026 GMT
        Subject: CN=a91682dbd0ff050bfe1197f2249d343d6aa5604a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:31:69:58:48:e6:85:90:af:b1:0e:64:51:
                    68:c4:7f:d4:45:24:a6:45:e1:26:e7:b7:2d:8a:49:
                    d2:82:45:47:87:f9:02:83:4e:45:c8:c7:4b:ee:6d:
                    50:65:6b:b5:ca:f2:b6:cd:65:ad:3b:0f:ae:88:2f:
                    cf:d0:be:58:02:e4:c7:10:79:30:ad:77:91:54:ad:
                    a1:72:1a:be:0e:01:3a:aa:73:47:41:04:98:fd:e5:
                    48:a1:12:40:88:0e:ae:5b:89:70:6e:fe:3d:79:5a:
                    16:66:98:dd:d1:4e:52:18:bb:e4:4e:3f:72:64:df:
                    08:37:56:55:68:4b:f9:90:46:fe:c9:29:ce:bc:ca:
                    8d:f3:42:16:48:52:20:12:36:fb:a0:39:01:a3:32:
                    f7:f6:08:b7:14:4e:41:5a:5f:0d:da:d0:0f:8e:af:
                    fe:2f:7c:6a:80:19:5e:50:81:3e:14:ae:89:e0:69:
                    98:cf:16:a2:e4:56:95:84:cf:05:bb:ab:6f:84:93:
                    d6:9c:a4:4c:62:a5:61:0a:93:97:fa:83:c4:2e:7a:
                    63:6c:02:a5:60:b3:dc:f2:eb:6f:4a:6d:6a:bb:6d:
                    0f:c1:b0:bf:5f:3f:13:8c:db:b1:e9:f5:41:d3:c0:
                    72:78:d5:4d:f9:0a:fc:e8:65:d4:5f:9b:0c:ce:52:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:16:82:DB:D0:FF:05:0B:FE:11:97:F2:24:9D:34:3D:6A:A5:60:4A
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:9e:b0:75:91:e9:60:95:07:fa:0e:7f:a4:3a:a2:b9:89:
         03:9c:19:bc:ef:fe:d8:6c:b0:bd:6e:b0:ce:92:38:6a:73:2d:
         c2:77:cf:25:2d:a4:67:75:3a:e3:a7:7f:1f:69:60:2d:94:c3:
         82:06:a0:41:74:11:8b:aa:ee:74:96:f0:84:ec:a7:e0:f8:f9:
         89:df:bd:34:09:8f:43:99:2b:1b:1e:62:b6:8f:a0:f7:e5:08:
         13:cc:46:55:32:ed:af:5d:6f:1e:59:ac:a0:58:36:2d:b7:28:
         58:75:c6:3b:b1:76:5f:dc:3d:19:2c:a0:0e:fe:ec:63:b3:04:
         28:46:8b:a8:f0:c2:3f:0a:bb:5e:a6:f1:95:9a:2c:d3:72:2f:
         50:72:ae:38:9a:42:3f:78:ca:c7:e0:d8:2b:11:bd:09:c6:f0:
         77:87:7d:4c:04:36:33:6b:f3:e5:e1:b1:36:7e:57:38:4c:94:
         65:e8:77:54:c0:d3:7d:d4:09:aa:12:d1:5e:71:37:5c:0a:77:
         f7:8b:30:39:bb:7a:22:a8:54:4c:44:6f:d8:5a:e3:ba:68:cc:
         27:93:4d:43:1d:9a:72:a9:70:98:a7:6d:88:19:14:44:03:73:
         ed:3b:ff:bf:91:f3:53:f6:2c:1c:23:e2:52:df:dc:80:6f:1d:
         da:ea:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:00:31 2026 by rpki-client