Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File:                     06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier:          QZz8jw2lLhybXr0E9rxLfr1Wc0Ob5Hy7otH19S3wvAA=
Subject key identifier:   7E:4E:DA:75:FE:1B:F0:5B:1D:31:B2:17:57:3F:B4:19:EF:1E:18:44
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer:       /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial:       01A0D012E4A00F2586BBABFE9B2A38F811AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number:          0271
Signing time:             Wed 23 Sep 2026 21:01:34 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:34 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:34 +0000
Files and hashes:         1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: ZXyrEPU0zqdGSIqRSwyz3x7wH3vw+Z/aDgbmEYrCjAY=)
                          2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:e4:a0:0f:25:86:bb:ab:fe:9b:2a:38:f8:11:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
        Validity
            Not Before: Sep 23 21:01:34 2026 GMT
            Not After : Sep 24 21:01:34 2026 GMT
        Subject: CN=7e4eda75fe1bf05b1d31b217573fb419ef1e1844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:31:96:34:e9:e9:e7:34:81:a4:d3:f0:05:
                    fd:43:55:ca:32:83:9a:ed:31:9e:c5:b0:c5:b3:fb:
                    c9:6c:0c:9c:0c:a8:9f:2a:88:84:90:7b:b5:7e:9f:
                    ec:fc:f1:ec:42:20:94:d8:d9:08:a2:e6:ac:56:ec:
                    2f:fc:60:89:38:9b:7b:4c:db:f5:c1:aa:34:9f:da:
                    52:37:e9:98:68:de:6c:ea:6a:b6:ae:64:5e:be:ab:
                    b7:9c:23:1f:01:ae:be:a4:6c:7d:4b:b5:d2:16:1f:
                    77:c1:30:2d:fd:19:9d:8e:e4:79:15:0d:10:9b:1d:
                    22:f4:7a:4f:fe:58:f2:f6:f2:7c:93:d7:57:e7:71:
                    ac:80:45:f7:a2:2e:56:ef:c8:67:30:6a:d2:5c:45:
                    1b:65:b1:d1:26:ce:4e:f2:7b:f4:3e:67:9a:96:2d:
                    92:40:17:9e:a7:07:3e:15:2d:e0:d5:44:ab:3c:5c:
                    d0:a4:93:fb:c5:67:5c:58:a3:8f:da:6d:7e:7f:9a:
                    a6:16:0c:01:73:fd:40:e8:e6:12:b4:0b:aa:21:a4:
                    39:ea:fc:92:a5:03:0f:d7:c9:4b:80:ab:16:be:5d:
                    ee:b1:31:dc:b1:3b:e0:4d:73:0f:d3:3a:c4:12:dc:
                    1e:c9:ba:c9:a9:8e:2f:ef:4d:9f:4d:a9:e7:19:dd:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4E:DA:75:FE:1B:F0:5B:1D:31:B2:17:57:3F:B4:19:EF:1E:18:44
            X509v3 Authority Key Identifier:
                keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:30:f8:a8:95:81:15:f5:80:ea:d3:1b:59:a2:30:59:1a:36:
         29:3c:75:ca:f7:e3:dd:b6:bb:8e:e4:bb:d9:41:b7:13:ef:c5:
         18:c1:67:9f:a3:27:f2:10:f7:7a:d7:3d:2d:90:7c:5f:7a:ff:
         b0:c4:34:dc:ad:3c:d7:d0:1c:d0:a2:0b:99:84:af:84:1b:53:
         2c:25:ad:74:9a:23:1f:2d:0a:aa:17:b3:f4:40:c2:40:10:50:
         a4:09:ad:3f:db:6d:b1:71:d9:25:64:20:e4:78:42:91:62:79:
         33:f5:3b:ff:e3:e1:72:06:47:00:e5:2d:45:f3:fb:31:42:11:
         d8:27:1e:db:1f:6e:84:c5:0a:cb:f8:87:54:1f:40:d1:5d:4f:
         dc:0c:7c:43:52:cc:d1:3e:57:05:c9:5b:e1:d0:48:28:68:b0:
         06:97:ca:52:d8:1f:f0:cf:93:20:c3:2d:0e:29:1a:95:2c:0b:
         b5:93:0f:a9:87:16:68:33:c3:0e:ce:1b:9d:01:e0:94:c3:73:
         30:d0:f6:59:28:08:49:57:ac:21:89:8c:ee:8a:2a:fe:87:f1:
         f4:a1:32:84:e6:c4:ae:54:7e:de:60:07:f7:c0:5d:7c:d8:c9:
         f4:ac:b5:2b:2c:64:66:0e:6d:ff:f0:0f:be:17:48:47:33:89:
         a2:8d:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:32:49 2026 by rpki-client