Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          EC6jBNXTgg4gX61pJPHzTCmjDdje3SuUSirTyllzfNo=
Subject key identifier:   EC:00:4C:4A:7F:C2:06:B1:31:0B:CC:4D:66:B1:0B:54:15:F6:A2:19
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       01A0C7B4032CF20FDF1827A6CFA3FBDFF5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          0BE1
Signing time:             Tue 22 Sep 2026 06:00:58 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:58 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:58 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: oqgtmHBeqfbeY5/vQgZpUtdB006IvWJTMJrW5y/dxWg=)
                          2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b4:03:2c:f2:0f:df:18:27:a6:cf:a3:fb:df:f5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: Sep 22 06:00:58 2026 GMT
            Not After : Sep 23 06:00:58 2026 GMT
        Subject: CN=ec004c4a7fc206b1310bcc4d66b10b5415f6a219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c8:96:67:f0:da:e0:10:50:d6:a4:eb:c7:c8:
                    ad:96:79:22:b9:6c:fe:2a:2f:83:0a:00:f3:03:ad:
                    03:c9:81:26:4c:a0:a1:2e:69:bf:a9:39:c8:89:81:
                    02:af:ec:58:56:9c:db:ad:ad:a7:a8:83:e7:5d:61:
                    62:4c:f6:e8:1f:1e:c3:ba:44:a3:38:b1:cb:d2:d3:
                    7a:c2:5e:9c:d1:60:8f:c8:83:06:0f:3d:fa:8c:95:
                    be:21:06:57:14:d5:c2:5e:76:64:99:a7:b5:92:e1:
                    7e:29:47:a7:e8:f3:22:e5:b3:95:fd:81:07:61:63:
                    34:33:e3:18:79:9b:06:62:c2:c7:6d:b6:d5:60:d8:
                    b4:dd:8c:26:f0:1d:93:d1:cc:08:89:96:6d:32:a2:
                    f4:48:4c:26:27:f6:bb:1f:c5:06:93:e6:50:cf:47:
                    78:53:8a:f0:e4:0e:39:29:b0:d2:7b:c8:3f:2d:15:
                    30:5c:17:c9:05:45:25:75:cf:7b:cc:e4:97:e5:3a:
                    74:bc:ca:ec:fb:12:90:36:2a:52:84:f0:80:32:11:
                    0a:01:96:d6:5b:dc:67:b0:e7:02:1a:0b:84:22:65:
                    6a:2f:4e:5f:07:0a:55:99:ff:e6:ba:98:26:5e:26:
                    34:bc:27:99:2a:6a:e5:11:21:7f:fc:cb:1d:05:15:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:00:4C:4A:7F:C2:06:B1:31:0B:CC:4D:66:B1:0B:54:15:F6:A2:19
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:e3:97:cc:14:aa:43:77:ee:61:89:88:8a:66:1d:27:e9:41:
         d2:f6:a7:db:4b:a8:c6:5b:a8:69:53:20:ad:50:41:eb:a7:e5:
         8a:47:89:a3:6d:e2:4d:be:74:aa:9b:49:c0:7b:2b:02:ce:19:
         de:3c:85:c9:67:31:2b:2d:e4:b8:8b:84:83:85:b0:41:6d:46:
         76:51:9c:20:fc:62:b0:23:7f:50:25:bd:e7:2e:21:32:1f:dc:
         71:bc:4f:42:9e:32:dc:cd:5b:e4:2a:b6:2a:cc:36:af:d6:ce:
         14:92:99:47:f8:ea:fd:bf:6e:77:5d:78:07:c0:e2:6c:fd:be:
         71:22:e2:bf:3f:7d:2d:1a:30:8d:08:78:e1:a1:00:18:50:02:
         62:94:6c:24:ef:00:2b:74:7a:1e:62:31:53:58:b4:75:11:68:
         bf:a0:e0:91:ec:4c:df:6d:d6:cc:49:47:d3:ca:45:31:81:3b:
         f5:3e:4f:e8:22:e1:f2:e3:8c:b2:f0:e2:40:e5:9b:6d:e4:62:
         7b:2c:05:04:28:84:2f:ee:8c:df:04:d4:5d:bb:7f:cd:e1:38:
         06:24:42:83:9c:f6:6d:dd:d9:7f:97:f3:2a:00:d4:7c:f9:ac:
         90:87:ed:f8:ca:f9:70:64:81:f0:28:57:21:63:cb:ef:a1:ef:
         4d:f2:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:09:29 2026 by rpki-client