Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          LE46PSssNGGe0C6ECzaEGC7x84A6eFrscWzk9Ey20TU=
Subject key identifier:   CE:76:06:AC:0E:30:2D:51:C9:3B:7F:71:71:F8:BE:68:64:84:7C:5F
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       01A0BCC313775688E420A7287AE45F2D5162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          1A77
Signing time:             Sun 20 Sep 2026 03:01:36 +0000
Manifest this update:     Sun 20 Sep 2026 03:01:36 +0000
Manifest next update:     Mon 21 Sep 2026 03:01:36 +0000
Files and hashes:         1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
                          2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=)
                          3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
                          4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: zCHLnY+whXeBfxfuE/tgJMN7hrmyMvXUjNYI7CYO69g=)
                          5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
                          6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
                          7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
                          8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
                          9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=)
                          10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
                          11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:c3:13:77:56:88:e4:20:a7:28:7a:e4:5f:2d:51:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Sep 20 03:01:36 2026 GMT
            Not After : Sep 21 03:01:36 2026 GMT
        Subject: CN=ce7606ac0e302d51c93b7f7171f8be6864847c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:bc:6c:5c:07:a6:0e:0c:28:6f:b3:cb:89:
                    d4:ea:08:18:a5:96:8d:cc:f5:e8:02:6b:89:2c:65:
                    95:d9:6b:cf:25:85:70:d3:d9:53:ad:8b:85:78:7d:
                    1c:c9:5b:ad:24:71:13:77:5c:23:ff:c6:4a:d1:cc:
                    ac:ef:78:9e:c7:ff:91:f7:be:a2:a0:73:d6:a5:45:
                    98:9b:49:1c:30:ed:61:53:47:28:78:bc:0f:1e:a6:
                    7d:11:be:c5:7b:e1:1b:e3:c2:c1:63:e6:19:d8:a3:
                    4d:e1:72:05:52:59:0e:42:0b:6c:dd:54:59:94:3c:
                    47:0b:b8:c2:f8:38:19:45:6a:7f:8b:39:39:ea:b5:
                    bd:01:a8:cb:0e:9a:01:ab:59:40:a3:e7:48:2e:d1:
                    64:38:63:4e:88:7a:6b:22:4c:0c:8d:00:d4:77:b6:
                    8c:f2:75:71:12:c1:fc:1c:ea:a4:48:48:84:df:93:
                    ac:15:69:a9:31:2c:d3:f4:9a:b7:9a:80:03:a4:67:
                    87:70:36:b8:1c:f4:62:f8:6d:4b:95:48:e2:4c:35:
                    a6:ff:4a:94:cd:29:ea:63:ad:ef:eb:50:83:cb:68:
                    e2:ea:c8:50:2e:11:a2:3c:f4:f5:ac:53:fb:dd:31:
                    b7:d9:7e:78:b3:16:e0:5d:f4:5e:fa:ee:28:bf:7f:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:76:06:AC:0E:30:2D:51:C9:3B:7F:71:71:F8:BE:68:64:84:7C:5F
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:b8:5a:5a:cd:08:83:c9:c5:c8:15:03:cf:bc:e8:0b:03:
         f9:46:87:5f:59:40:c5:97:15:a8:10:82:8b:9d:26:53:32:17:
         59:9c:d5:fb:73:79:ec:13:d4:74:18:c2:67:7e:ab:91:80:77:
         d1:81:48:98:f5:93:67:f3:5c:9a:23:67:d6:a0:4a:58:3d:36:
         82:7b:0b:9c:89:61:86:b7:db:5c:5c:e4:fa:41:2e:46:f4:e5:
         8b:1a:ef:b2:3a:c5:1b:c1:ea:71:29:99:40:9a:02:8d:c9:59:
         5b:a4:2b:e6:b5:c6:c1:c5:8c:8b:ae:c7:77:25:0c:f4:81:a5:
         a4:13:42:9b:2c:10:4d:59:ad:74:ce:b7:1a:06:19:a1:a0:cd:
         a3:8e:3b:2f:bf:1c:4e:72:8e:85:3a:86:a6:cb:02:10:1f:db:
         45:48:57:c0:c0:e6:c7:9e:20:24:d6:cb:44:62:c4:a4:e6:6d:
         bc:a9:e5:73:76:10:61:44:4e:7f:f2:45:63:ac:8c:4d:d4:88:
         ed:10:a2:a5:59:4f:a6:c1:1a:28:23:ae:cf:0d:7c:e5:a9:18:
         15:e4:9f:f2:33:c8:f5:b5:c7:a0:e3:a4:47:ce:92:ae:8c:43:
         b9:a0:92:43:ab:da:9d:4f:e5:de:93:b8:20:c4:85:2e:cd:f6:
         d7:6a:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:22:11 2026 by rpki-client