Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
File:                     6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json)
Hash identifier:          lYawo5lWZXxCzTfs1aiJORrQ+VpgNkdzoCjgXiuenaE=
Subject key identifier:   C7:01:62:87:D3:FF:9B:D2:EB:66:D3:A3:C5:5C:F6:BA:57:21:3A:54
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Certificate issuer:       /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial:       01A0C3A016B9A4A8FCEF92577BE5183613E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
Manifest number:          1996
Signing time:             Mon 21 Sep 2026 11:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:43 +0000
Files and hashes:         1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: 15ppnP0sJd8XSavenkuwCF5i+IEO9+O73/JgiHS5WpY=)
                          2: VJzavZ_Z7--mgTcREVjVIAX6Nvs.roa (hash: LQAHkCMjU4wRtrZzd1Ey5tnv8CysV/CKeEDhwslpiH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:a0:16:b9:a4:a8:fc:ef:92:57:7b:e5:18:36:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
        Validity
            Not Before: Sep 21 11:00:43 2026 GMT
            Not After : Sep 22 11:00:43 2026 GMT
        Subject: CN=c7016287d3ff9bd2eb66d3a3c55cf6ba57213a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:94:be:36:6f:64:c2:1a:e3:5e:ef:ad:60:
                    9f:00:fb:f4:da:47:5a:17:04:f0:d4:2e:85:84:e5:
                    38:8e:08:96:4f:35:72:94:28:d9:1a:32:ff:a9:b5:
                    c0:40:dd:dc:62:f7:b0:26:93:2b:63:d4:61:c9:45:
                    01:85:96:59:3c:12:de:97:1b:c2:9d:59:c0:ae:6d:
                    c1:42:c7:69:7d:f4:9d:b9:b8:1e:82:38:ce:62:ac:
                    2d:f9:d2:75:c3:28:38:c7:cb:8f:21:80:2d:35:ca:
                    b1:94:b9:61:62:b1:fe:b8:67:a9:82:a3:d4:9d:56:
                    10:d0:b3:18:6e:a0:85:33:a6:43:66:84:41:b4:14:
                    f5:84:8a:1c:bc:83:15:68:f9:2b:76:a6:d6:44:7a:
                    cf:cc:ec:9e:f2:df:67:4f:7c:43:d9:3f:49:99:f8:
                    dd:bb:22:3b:9a:be:a5:67:67:90:80:2c:d2:07:79:
                    34:60:5e:92:40:29:9e:0e:29:ca:2a:30:ff:ed:93:
                    66:5e:58:5d:b7:83:2b:38:de:b1:ae:b5:36:02:7b:
                    6e:8f:39:8b:06:2b:bb:dc:76:2e:8c:91:0d:e4:c4:
                    a8:03:34:b4:3b:d1:b8:15:59:fd:c5:3d:af:95:88:
                    20:9d:0a:9f:04:71:00:c4:36:1b:7a:96:fa:19:0a:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:01:62:87:D3:FF:9B:D2:EB:66:D3:A3:C5:5C:F6:BA:57:21:3A:54
            X509v3 Authority Key Identifier:
                keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:68:59:ef:5d:32:e0:05:b2:a1:f0:fe:e4:0f:51:97:f3:
         3a:2a:90:62:5d:8a:cb:32:3b:18:15:ad:80:60:78:2e:f5:fe:
         00:b2:a9:00:3a:b7:9e:08:d4:d6:90:2a:bb:bc:2e:45:52:08:
         72:99:76:5c:5f:64:4e:13:1c:2a:9d:96:46:3f:e8:71:df:71:
         fb:a1:0c:5e:71:e1:89:03:8a:25:c8:a0:3a:66:78:ca:af:27:
         b8:58:5b:7d:d4:4c:e3:a0:9c:a5:ef:7d:e1:73:97:b7:3b:22:
         af:ff:69:14:70:2f:6e:e8:2d:d7:de:fd:cd:ff:f6:f9:cf:57:
         f8:be:7c:cc:85:66:8d:3a:1d:47:9f:8e:31:cf:83:5a:81:df:
         92:48:dc:d4:20:6b:b0:b1:a7:c8:40:7e:8e:ee:0a:ad:a7:a4:
         c4:94:e5:a0:72:24:33:ea:97:56:36:3b:12:c4:d6:98:14:f2:
         28:88:0e:8e:4d:43:50:0e:18:2e:66:2a:11:6f:a0:dd:b3:93:
         47:14:8c:c9:81:e1:dd:d8:c9:8e:4a:9a:81:7a:3e:65:a7:8d:
         cb:64:88:52:9b:0c:a6:67:d4:08:0a:e9:de:0f:22:94:d4:d9:
         d6:a6:66:9b:8a:cb:c4:fe:92:a3:7f:05:3e:b7:8a:4a:9f:a6:
         3d:c5:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:44:25 2026 by rpki-client