Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          yXMOCH3DAwI5HD00anXTD51YUAfYJy5v/v6UTuAzRRY=
Subject key identifier:   6C:1A:CA:64:F3:80:6F:CB:78:8C:8E:69:CF:28:58:39:D1:A5:28:82
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       01A0BFC384AB21C14AF2411C8B886E9C08AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          14C6
Signing time:             Sun 20 Sep 2026 17:00:56 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:56 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:56 +0000
Files and hashes:         1: JMoQAtlSwgIPEDgOxqxN_chfnzU.roa (hash: B9hvkkVw6cavGGlkuEdGYncWF7hdCzROq/BGKrEIOQo=)
                          2: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: fOrG2bGNiN4BbYDTR6ejSenGegW93ry4bgCyRCY1zmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c3:84:ab:21:c1:4a:f2:41:1c:8b:88:6e:9c:08:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Sep 20 17:00:56 2026 GMT
            Not After : Sep 21 17:00:56 2026 GMT
        Subject: CN=6c1aca64f3806fcb788c8e69cf285839d1a52882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:20:33:c2:80:4e:b0:64:e7:7c:8a:3a:9b:
                    c4:a1:f3:4e:fc:b5:e5:3b:46:e8:a8:24:e7:cc:d1:
                    4d:e8:e0:ac:43:86:c3:aa:73:39:26:39:52:b6:20:
                    17:ac:b1:76:94:1c:8f:fe:a0:8c:21:46:ad:32:01:
                    59:6c:60:7c:b7:55:f9:71:1a:24:4a:eb:02:b8:e3:
                    30:5b:76:cc:ab:8a:72:48:1c:39:b0:ee:cc:ec:cd:
                    9d:42:1e:be:4e:a7:bc:b6:06:eb:a0:88:4d:b2:45:
                    f7:1c:fa:e0:41:0a:e2:f8:1c:37:e6:fe:d4:da:c3:
                    c3:23:9d:78:bc:71:65:90:51:ac:b8:67:28:71:94:
                    a1:b4:a6:6f:83:d0:14:dd:5d:5f:e7:14:cb:c2:b7:
                    25:1f:65:df:c2:8e:b1:f6:bd:fd:6b:7c:13:0c:2c:
                    eb:40:73:ed:1f:bf:f7:d3:5d:66:e8:35:07:af:43:
                    48:5b:f7:c4:79:02:e2:2d:c3:ef:94:1e:8c:e5:7a:
                    75:44:58:35:e9:f0:2f:60:fd:f1:ed:07:00:a7:03:
                    f7:c2:81:24:d4:6f:66:03:33:bb:7d:a7:de:b1:ef:
                    47:1f:52:66:76:14:2a:fd:6d:89:84:5c:28:7f:f2:
                    a5:e5:a1:d4:53:7c:5c:22:a5:c4:dc:20:7b:c2:05:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:CA:64:F3:80:6F:CB:78:8C:8E:69:CF:28:58:39:D1:A5:28:82
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:05:b8:89:57:0d:7b:e4:ef:59:ae:d7:d6:f8:a0:39:c4:
         4e:ce:3e:2f:bf:d2:a7:50:5e:48:dc:27:71:91:c0:fd:af:de:
         63:39:af:14:11:60:aa:29:4b:b2:a5:07:0a:16:6f:5e:51:b5:
         23:cd:97:39:2b:49:54:4a:c7:e8:04:64:c2:82:4f:62:61:b8:
         00:27:94:90:4e:e3:3a:18:98:64:74:75:f4:7b:53:d9:3c:3a:
         43:cb:60:ac:20:24:42:9b:bd:a6:1e:6e:c4:fa:23:b4:38:0d:
         d7:c4:d5:40:fd:d4:e8:45:b2:84:fd:01:58:57:45:98:ee:88:
         35:16:17:64:03:29:24:47:a0:b4:a7:0b:04:d8:fe:1c:c0:6e:
         c3:af:4b:93:cb:66:70:92:91:c1:77:64:ab:4e:5b:bb:81:00:
         d1:1e:dc:b8:79:7f:26:34:72:9a:80:58:b3:80:a0:8a:ee:5e:
         24:d3:9f:da:5c:86:50:aa:30:25:72:cd:35:51:c3:d7:52:ed:
         d4:58:eb:04:1c:b3:df:8c:af:3e:94:15:f5:66:f8:72:8f:22:
         61:b1:5a:4d:fa:8a:c0:2b:69:73:5c:9d:8d:d4:f6:51:75:6b:
         0b:5f:5b:81:c7:95:b2:69:81:01:41:88:0d:12:f7:84:93:7a:
         85:b9:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:30:52 2026 by rpki-client