Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
File:                     6E31KvRgym-oySOkn1y3lepnB_c.mft (raw, json)
Hash identifier:          ut0qy3E1pfNkAIZBZrsltXpRJm+VaL1jxAQ5p7ySvGY=
Subject key identifier:   70:60:33:CD:DC:62:8C:75:92:6B:32:0E:71:FE:4E:36:38:1A:E1:8D
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       01A0EA401CE12DD908F7E25B83707884583B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
Manifest number:          0D5E
Signing time:             Mon 28 Sep 2026 23:01:05 +0000
Manifest this update:     Mon 28 Sep 2026 23:01:05 +0000
Manifest next update:     Tue 29 Sep 2026 23:01:05 +0000
Files and hashes:         1: 4oXfdQKp5HXjwMzyZGAYEu-9cFQ.roa (hash: ysEJREps26RDxZ4fMeZfNoHSZc8djGREUHjiVuAlpew=)
                          2: 6E31KvRgym-oySOkn1y3lepnB_c.crl (hash: qPraNaMRocTY1EIFdUCy+4vceKwqOYn6wpR1nWjhyWc=)
                          3: Gelmt2dyq_XN8YdpKEuPQmN09eA.roa (hash: +DBE2rKsQVPzu0RclwrvCMPoUnuvCaTotWIVnHuK8zc=)
                          4: IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa (hash: AWvg3wl7fzu5i9djaKK4h6Y9sJ9Pr3WgdeDcYIz8ktg=)
                          5: MoYY5fz7HhZKplR2tXpTgeZ2uVM.roa (hash: t9266I63SCRYIn30RTHuLE4HWcuXvB4ra7uzm55ySLo=)
                          6: ZTGwXU-RZxt5HvicU9cTu67_aBA.roa (hash: IknlYJvQcGpokgXwlg+2DlcCG+JAUyIrN2s2FH50pH8=)
                          7: kG9o92WtxtdlslnK36VPn0SNf1M.roa (hash: OXeUCoUsqDWHvih8GRMeRQbUwh35avks5fVUQM/vjSE=)
                          8: lC2XbX4cuplfxzDFdPkX4beJSHQ.roa (hash: 4NbdL/Pd4mQvjIUFzF3/JGDoJtxOXi886n6gnA6oHhU=)
                          9: s931y6R-0zlx2ez42IiM1gBgTIo.roa (hash: RTrkv7ongNF6gWxBGWrH9pDs7qZjN5vjg1SAtV6G9Y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:40:1c:e1:2d:d9:08:f7:e2:5b:83:70:78:84:58:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Sep 28 23:01:05 2026 GMT
            Not After : Sep 29 23:01:05 2026 GMT
        Subject: CN=706033cddc628c75926b320e71fe4e36381ae18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:0c:80:68:ae:fc:92:08:c8:45:ff:9a:c9:
                    46:e0:04:9d:91:9f:06:4b:c8:a1:e9:33:1c:d4:40:
                    67:d8:84:4e:29:fb:25:60:2e:a2:be:34:cf:91:4e:
                    46:93:de:01:85:06:0e:13:af:b7:c3:88:e7:50:95:
                    e6:fd:58:f6:92:71:26:7e:85:2e:cf:78:fe:81:31:
                    a0:2b:af:00:9b:0c:52:c4:9f:ec:65:10:a2:5d:07:
                    b5:11:02:24:de:a1:17:21:cb:0f:ed:21:77:c1:0c:
                    ca:41:48:97:0b:7c:0e:5b:df:dd:b1:6e:74:41:19:
                    fc:37:6b:5f:78:bc:a5:d1:d7:a0:fe:b3:86:4b:62:
                    42:93:0d:69:92:b5:f2:50:ea:55:87:78:25:cc:ae:
                    bf:1d:19:4d:59:26:e9:80:bf:f3:f4:2e:64:3e:25:
                    35:74:76:51:1e:47:88:bd:49:45:c0:f0:fd:97:a4:
                    8b:5e:19:30:a5:ae:53:f8:30:c4:73:ec:13:f6:6f:
                    32:6d:37:00:c3:87:fc:f7:99:2c:15:c1:b1:66:01:
                    91:ca:12:91:0a:0e:b0:d4:4e:70:84:a9:9b:a9:bc:
                    4a:08:bb:4e:49:10:f5:b3:ec:95:a4:c4:8d:a8:ee:
                    7a:aa:f2:91:9a:47:f4:b2:af:88:d3:1e:e6:28:a0:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:33:CD:DC:62:8C:75:92:6B:32:0E:71:FE:4E:36:38:1A:E1:8D
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6a:92:d4:94:03:ef:b9:46:94:a2:b3:89:35:1b:3e:27:5e:
         af:8d:39:06:d9:5a:a2:72:6a:2b:18:e1:a7:f4:dd:85:9d:b4:
         81:66:90:d7:b4:81:77:1c:ee:5f:3b:54:70:0d:e1:4e:98:2b:
         ff:f0:13:49:56:78:2e:30:11:17:b0:31:99:be:be:8a:85:1d:
         6e:fa:57:98:f2:ca:59:a8:14:ed:d1:ea:ba:ee:60:24:11:fd:
         e1:36:90:4a:60:5c:57:bb:46:d4:7a:48:54:2f:7b:33:dc:b9:
         4a:82:ce:a8:20:00:22:b8:f1:a0:20:4e:87:24:13:78:b2:66:
         eb:87:3f:d2:1a:45:35:9a:cc:60:80:40:93:53:2b:75:57:25:
         6a:e8:f4:b9:82:42:e0:06:70:59:cd:80:39:a4:ef:ba:9d:06:
         6e:30:f6:1c:cb:6b:c1:fe:1b:18:20:b2:38:a0:a8:a4:23:4d:
         84:70:ca:f7:30:a7:0c:99:96:99:81:73:c3:1e:37:a4:6c:c6:
         b0:a5:9e:93:65:cc:ef:21:21:71:d0:00:7f:e0:91:95:1d:05:
         70:f7:45:bb:56:10:6c:11:b2:7b:ce:d8:5c:96:46:5c:e1:f7:
         ea:43:ed:70:cc:e0:95:81:95:f7:24:09:48:34:30:f1:1b:6e:
         e6:51:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:40:45 2026 by rpki-client