Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
File:                     ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft (raw, json)
Hash identifier:          FvTGCO3ep5+kaAEsPDkMoSVEE5uQnpI1oyL00eOULCk=
Subject key identifier:   70:7E:AE:E0:8A:83:03:6F:39:60:0B:AF:6E:03:9A:DA:60:FF:19:0F
Authority key identifier: 92:EE:D6:0B:11:9C:26:3D:D0:D4:0C:EF:E9:FB:D6:54:89:35:AE:5F
Certificate issuer:       /CN=92eed60b119c263dd0d40cefe9fbd6548935ae5f
Certificate serial:       01A0F0E77CC974F233E105A22D36628C0ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
Manifest number:          F6
Signing time:             Wed 30 Sep 2026 06:01:37 +0000
Manifest this update:     Wed 30 Sep 2026 06:01:37 +0000
Manifest next update:     Thu 01 Oct 2026 06:01:37 +0000
Files and hashes:         1: ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl (hash: 9vpaC3fzi8pquovjf3I5Y2l7FCtrYexFun/oBxkQuik=)
                          2: xlhY8tX9lBwHVp8VuomicH6lW4o.roa (hash: aR0n4UA9z3cBX9/a0HFsNmvZi8ea7RGY46C+J9dNC0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:e7:7c:c9:74:f2:33:e1:05:a2:2d:36:62:8c:0a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92eed60b119c263dd0d40cefe9fbd6548935ae5f
        Validity
            Not Before: Sep 30 06:01:37 2026 GMT
            Not After : Oct  1 06:01:37 2026 GMT
        Subject: CN=707eaee08a83036f39600baf6e039ada60ff190f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:19:58:5b:56:a4:4e:3a:8a:7d:80:ec:bb:
                    16:c6:e9:7a:3c:09:23:93:90:de:cd:89:df:60:15:
                    3e:23:8f:ff:bc:85:a5:f8:43:f8:5d:31:6e:77:14:
                    d3:ad:45:dc:ef:ff:2e:6f:1c:df:f3:c2:fb:f7:19:
                    79:ba:0c:70:d9:58:1a:04:70:4a:ef:11:b6:73:51:
                    1e:9d:ac:00:36:b4:8e:70:1f:07:35:f1:4e:b0:69:
                    b5:87:e7:7b:52:69:bf:a1:47:74:49:ff:80:8e:b6:
                    a9:d4:14:22:9f:f7:1e:8f:be:f4:23:b8:57:d7:e1:
                    11:7c:c9:2f:a7:2e:09:45:d5:98:18:38:f1:b1:f8:
                    4a:c4:d2:93:ea:ff:ab:9f:54:91:40:0c:e4:cf:f7:
                    a7:ed:79:38:e0:25:b9:07:4f:84:87:4c:32:10:15:
                    85:9f:11:be:4c:40:fa:60:41:c1:4b:0e:cd:5a:00:
                    f7:27:61:3a:02:4c:cc:21:58:18:6e:7b:89:b1:a8:
                    67:a1:30:09:7c:5e:1b:3c:7b:18:d6:5e:44:fd:90:
                    a4:14:fd:ed:74:3e:15:df:63:a4:e4:40:dd:ad:94:
                    90:1c:1c:5b:37:20:91:bf:74:9f:77:37:60:d1:7b:
                    6a:80:56:87:0c:0c:2c:5f:89:88:44:d0:c5:cc:22:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:AE:E0:8A:83:03:6F:39:60:0B:AF:6E:03:9A:DA:60:FF:19:0F
            X509v3 Authority Key Identifier:
                keyid:92:EE:D6:0B:11:9C:26:3D:D0:D4:0C:EF:E9:FB:D6:54:89:35:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:be:26:45:af:9b:6e:ab:29:b4:1e:09:cc:ed:79:51:56:
         e5:bc:bd:8c:5c:3a:f8:39:99:ac:ae:5b:61:c6:2c:77:08:69:
         e2:84:59:ae:1c:d1:c3:2d:15:ce:68:f6:32:1a:5a:c1:b0:d8:
         b6:ec:fa:17:84:d4:bd:d7:0d:ed:9d:f6:b4:e8:98:93:92:ff:
         a3:a0:31:97:02:1d:67:8d:1e:66:ad:45:c2:c8:b1:3f:b1:4d:
         34:f9:11:1b:a8:70:94:c0:fb:f3:ac:40:df:0b:56:d0:64:ec:
         06:7a:69:bc:95:8e:61:01:af:46:35:ad:19:90:66:00:42:c5:
         f8:b3:78:30:b2:db:b6:76:83:56:2d:fb:d7:44:d9:d0:d4:bf:
         58:87:d5:12:60:5a:68:63:2c:93:d5:df:5c:fc:72:14:5e:41:
         48:e5:49:c9:8c:3e:2b:ac:fc:22:e0:3e:e6:cb:2b:67:54:76:
         64:6b:71:f4:b3:46:82:7d:9e:68:8b:70:df:8a:3e:d8:f1:79:
         f9:af:54:fe:33:4a:da:26:f3:7f:20:a3:23:26:30:f5:43:5c:
         4b:c0:4b:37:90:c2:38:24:7e:e1:2e:f7:ac:1c:97:7e:36:3a:
         3c:60:83:28:71:90:8a:0f:e9:e7:b9:e8:62:98:ce:40:e3:ac:
         0e:df:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:23:47 2026 by rpki-client