Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          QWqAT/lcqUUJ8GFNuzIL6kaBlCH8tpK7xXG7v37Swgk=
Subject key identifier:   28:42:37:71:AD:47:D5:80:11:EB:31:F2:24:8E:C3:50:76:41:79:75
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       01A0C9A21963383C9824E4D65824C8F98EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0E75
Signing time:             Tue 22 Sep 2026 15:00:38 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:38 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:38 +0000
Files and hashes:         1: 3T7apsoCLIRRuPziIRlUEsN-PHk.roa (hash: l4cLFttiGyOfAyk+8L0CJMAKg8dhT7SWDGcyXhUyR1Y=)
                          2: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: M3JBajNodS1mvOXlnvm8OYC0is2LnthivpQ2lf8Aifw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:19:63:38:3c:98:24:e4:d6:58:24:c8:f9:8e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Sep 22 15:00:38 2026 GMT
            Not After : Sep 23 15:00:38 2026 GMT
        Subject: CN=28423771ad47d58011eb31f2248ec35076417975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:92:bb:ed:7b:5a:0a:79:1d:8b:42:1d:cd:
                    ca:26:8d:d5:bb:ec:f3:4d:fb:bf:90:65:df:a1:44:
                    c3:91:62:d8:10:51:40:f2:6a:bd:d6:7e:20:8f:ec:
                    49:a0:db:79:28:fb:91:0d:31:94:e6:05:be:c9:3c:
                    92:1b:84:6f:7f:c9:01:fd:76:78:2a:d6:9b:c3:59:
                    49:3d:63:a1:18:1f:87:e3:c8:14:05:13:af:3d:eb:
                    e9:08:75:62:ff:cc:bf:d1:1b:ad:df:19:b3:d2:8d:
                    ae:e0:bb:0c:02:0c:7d:a5:8c:10:a2:fc:ca:b8:7f:
                    e3:95:64:17:ab:e6:b2:aa:a7:12:a1:2c:79:39:1d:
                    21:42:d1:b7:77:8f:52:ba:9a:8c:95:58:62:e5:40:
                    83:93:23:15:8e:cc:71:a5:fe:82:74:07:74:13:85:
                    f6:45:31:cf:bb:df:ca:c0:d7:79:01:c1:77:f8:ae:
                    5a:39:c3:1b:92:b8:43:bf:a6:bc:03:d4:58:a3:4e:
                    8e:f4:2e:16:61:69:37:cc:7a:bd:ca:7e:96:29:84:
                    01:38:05:16:59:19:a8:6d:1f:8d:52:dd:9e:8b:14:
                    5c:dc:46:e1:07:f0:99:b6:f4:23:79:df:1b:c1:a8:
                    82:35:14:77:a4:c7:59:b7:7f:d7:43:64:21:01:0a:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:42:37:71:AD:47:D5:80:11:EB:31:F2:24:8E:C3:50:76:41:79:75
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:88:26:f9:f6:1b:55:61:6f:9d:f1:a4:ad:ef:5e:19:6a:
         54:33:4a:4a:c9:c8:d9:2c:3b:a6:65:63:f6:b1:55:f0:7a:af:
         25:17:ce:fb:32:5d:76:5c:6a:cc:58:f3:7e:d0:6b:cd:5f:e1:
         d5:ea:9b:fe:3f:0f:31:78:25:92:80:6b:cb:63:f6:b3:34:d8:
         b8:95:89:97:d3:bc:89:56:04:3a:39:44:e0:05:22:7f:35:a2:
         33:65:ce:a1:e8:ea:e7:82:0f:79:3a:e3:fe:03:47:71:c9:54:
         be:53:09:9d:29:a0:ba:09:2f:e8:80:18:97:cd:5c:8c:83:9e:
         b9:bb:33:11:87:b9:94:47:5a:df:67:b1:a2:cb:0d:8e:18:6d:
         1c:d3:ac:bf:d1:8b:23:84:b6:4e:86:a8:6a:60:9f:fe:b2:7f:
         69:66:39:a5:ab:c5:36:ef:36:1c:00:7f:d8:5a:1b:39:af:d0:
         c4:6f:44:f8:4a:05:1a:de:69:8b:5f:3d:1d:7e:01:4f:b5:9d:
         9c:14:4a:c9:af:6e:73:76:2f:2c:bb:f9:75:d9:6d:79:a6:8c:
         f6:dd:ed:02:32:ea:8b:eb:62:5b:89:c7:48:59:56:2d:c8:5b:
         2d:bf:e7:48:be:24:b7:1c:bd:b4:7c:f8:1a:6f:49:6d:7e:7d:
         46:3b:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:16 2026 by rpki-client