Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File:                     6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier:          vfho57LDhcHcvinW5t1Ktubf4GCXl6D20h7uVqE+EHQ=
Subject key identifier:   31:02:B8:B6:D4:F0:F3:0C:38:EB:5D:83:98:FF:27:A4:E6:30:BF:F2
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer:       /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial:       01A0DD606CE201587E126A8BE7C3C5EFE2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number:          1A76
Signing time:             Sat 26 Sep 2026 11:01:19 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:19 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:19 +0000
Files and hashes:         1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: zpQ+sGh3RgVEu5d0uon0jmNfIwX9xlprCOeW++r7Q1k=)
                          2: Ol2LcIckb0JEorAeZ9ZW8Jfsn4Q.roa (hash: wPlF6pF4PXwOQzyCGkjuNlYnp29Vxy6PXU2oWbLVg5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:6c:e2:01:58:7e:12:6a:8b:e7:c3:c5:ef:e2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
        Validity
            Not Before: Sep 26 11:01:19 2026 GMT
            Not After : Sep 27 11:01:19 2026 GMT
        Subject: CN=3102b8b6d4f0f30c38eb5d8398ff27a4e630bff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:63:d4:b0:8e:e0:5d:47:5b:32:70:c4:a7:
                    c5:ce:54:a9:67:63:b8:eb:a2:ce:4f:9b:06:3b:e6:
                    0c:cd:72:4d:6d:a8:5c:37:f7:eb:e7:f7:3f:06:1a:
                    a7:84:3a:d2:51:dc:81:d0:af:cf:c2:a3:90:b6:5f:
                    0c:f3:40:24:e0:7b:42:11:21:81:dd:01:02:c0:8a:
                    c0:e2:14:b1:b2:ba:45:90:60:af:0c:35:f2:3a:b1:
                    7a:3b:c5:f8:1b:e8:07:cd:84:67:57:88:1b:44:bf:
                    04:75:b9:98:7f:02:d1:1e:af:e2:89:85:aa:09:00:
                    d2:3a:af:cf:6b:ab:f8:d6:1b:87:38:91:59:6f:98:
                    8f:ff:5b:b9:64:a8:48:42:03:65:04:03:47:01:6f:
                    f8:3d:bc:37:bb:d2:aa:d3:1e:76:86:b5:63:22:26:
                    40:7a:5c:b4:d9:f8:3c:08:57:a5:ff:e7:10:7a:b2:
                    f7:83:78:b8:2d:69:8c:69:d7:5c:31:4c:a8:b1:3d:
                    e0:36:e6:7a:97:dd:a5:06:94:6a:1a:84:ed:15:8e:
                    e5:56:13:20:c4:6d:8b:a0:62:82:e8:cb:78:c2:e5:
                    c2:d0:79:43:c3:d0:7e:5c:76:00:43:cd:f9:5b:81:
                    fa:e6:76:1d:aa:41:75:d9:24:be:98:04:06:5c:38:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:02:B8:B6:D4:F0:F3:0C:38:EB:5D:83:98:FF:27:A4:E6:30:BF:F2
            X509v3 Authority Key Identifier:
                keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2a:73:d4:cc:ea:0a:46:5a:76:b2:5d:42:cb:5d:a9:8b:03:
         bb:71:1e:cf:e2:8e:10:ad:77:eb:f7:a6:40:e9:01:c2:c7:ff:
         10:19:5f:dc:9f:6c:8e:b0:b2:72:ae:46:f9:b6:3a:ed:04:3a:
         5a:6a:3a:b6:c4:2e:af:a1:c5:7c:f6:5e:fc:8f:ef:c5:7f:3d:
         05:8a:a6:7d:d4:c9:bd:08:f3:91:74:27:b0:25:0f:b7:5f:90:
         f3:52:74:54:8b:8c:8b:53:02:55:6e:8c:8b:46:e5:85:32:8a:
         19:97:d5:0e:d2:a6:87:4c:87:9a:5c:0d:45:fc:4a:c4:ff:6c:
         57:e0:3a:82:5b:7a:09:27:6b:9b:b7:da:81:bc:fb:81:2f:6b:
         cd:72:30:82:2f:d0:fa:e4:b7:d7:06:a4:28:ab:e9:38:26:c8:
         c6:58:0e:4a:70:7a:6c:21:70:5e:d4:4f:4c:8b:31:15:36:36:
         20:90:ae:22:7a:67:6c:4e:57:c5:46:64:2e:0c:f0:c7:14:bb:
         9d:43:be:3b:c0:f0:29:dd:38:7c:74:5b:aa:56:ac:10:98:f0:
         2d:c3:16:23:ac:85:d3:90:77:48:02:f1:b2:50:cf:89:76:b5:
         87:38:f5:e0:7b:0b:ac:ad:8f:d9:0d:94:2f:13:79:71:b8:2f:
         66:c2:3f:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYGziAVh+EmqL58PF7+KkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDJhNDY2NThjMWQwMWJhYzhkNDM5NjFjNmI0OWU3ODhl
M2NjYzMwHhcNMjYwOTI2MTEwMTE5WhcNMjYwOTI3MTEwMTE5WjAzMTEwLwYDVQQD
EygzMTAyYjhiNmQ0ZjBmMzBjMzhlYjVkODM5OGZmMjdhNGU2MzBiZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvtj1LCO4F1HWzJwxKfFzlSpZ2O4
66LOT5sGO+YMzXJNbahcN/fr5/c/BhqnhDrSUdyB0K/PwqOQtl8M80Ak4HtCESGB
3QECwIrA4hSxsrpFkGCvDDXyOrF6O8X4G+gHzYRnV4gbRL8EdbmYfwLRHq/iiYWq
CQDSOq/Pa6v41huHOJFZb5iP/1u5ZKhIQgNlBANHAW/4Pbw3u9Kq0x52hrVjIiZA
ely02fg8CFel/+cQerL3g3i4LWmMaddcMUyosT3gNuZ6l92lBpRqGoTtFY7lVhMg
xG2LoGKC6Mt4wuXC0HlDw9B+XHYAQ835W4H65nYdqkF12SS+mAQGXDhpZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDECuLbU8PMMOOtdg5j/J6TmML/yMB8GA1UdIwQY
MBaAFOhCpGZYwdAbrI1DlhxrSeeI48zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEt
ZmFlOGQ0MmFlNWU1LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEtZmFlOGQ0MmFlNWU1
LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSpz1Mzq
CkZadrJdQstdqYsDu3Eez+KOEK136/emQOkBwsf/EBlf3J9sjrCycq5G+bY67QQ6
Wmo6tsQur6HFfPZe/I/vxX89BYqmfdTJvQjzkXQnsCUPt1+Q81J0VIuMi1MCVW6M
i0blhTKKGZfVDtKmh0yHmlwNRfxKxP9sV+A6glt6CSdrm7fagbz7gS9rzXIwgi/Q
+uS31wakKKvpOCbIxlgOSnB6bCFwXtRPTIsxFTY2IJCuInpnbE5XxUZkLgzwxxS7
nUO+O8DwKd04fHRbqlasEJjwLcMWI6yF05B3SALxslDPiXa1hzj14HsLrK2P2Q2U
LxN5cbgvZsI/Pg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:54:27 2026 by rpki-client