Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
File:                     6rQDOf6nhnTLY0k0UbHTGhazOOg.mft (raw, json)
Hash identifier:          l7uLBEHANcVCGlSzemtIm6Iriw6cHJUgu45YiTwi9vo=
Subject key identifier:   38:7E:E8:B2:DA:DF:CC:5C:4E:93:F1:09:11:13:DE:E7:3C:E4:FA:9A
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Certificate issuer:       /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial:       01A0D012993C20014A804E2F5C4F7FF7958B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:01:14 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:14 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:14 +0000
Files and hashes:         1: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (hash: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=)
                          2: 6rQDOf6nhnTLY0k0UbHTGhazOOg.crl (hash: 9vhOGHl+ZxqzlWN1NangMyK9rDm68sjWPj1i1E7jp5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:99:3c:20:01:4a:80:4e:2f:5c:4f:7f:f7:95:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
        Validity
            Not Before: Sep 23 21:01:14 2026 GMT
            Not After : Sep 24 21:01:14 2026 GMT
        Subject: CN=387ee8b2dadfcc5c4e93f1091113dee73ce4fa9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:19:5d:e0:55:f6:bb:69:b2:a6:3f:83:c9:
                    70:fc:4c:2d:87:c8:c8:48:f6:dd:25:c5:c8:42:79:
                    d9:6f:29:29:ef:07:ea:13:ce:21:93:74:f4:a0:42:
                    ab:b0:47:cc:03:69:3d:d4:6c:1c:9e:51:b2:a8:54:
                    27:74:2a:26:86:89:79:44:2a:69:21:39:7e:91:62:
                    b2:65:38:0d:ab:f3:6a:65:06:ce:f7:4c:0c:1e:5c:
                    ba:5d:61:aa:0c:6b:b5:dd:f7:63:d6:59:3b:b7:d3:
                    7e:a5:ec:07:45:e4:96:dd:28:6c:4e:82:38:71:57:
                    65:e5:f5:4b:d3:dc:71:9f:91:54:f3:89:25:64:7a:
                    10:fe:04:ab:eb:a4:8e:67:1d:9a:12:66:9c:65:67:
                    22:7f:61:0a:0d:d4:c9:ce:96:bc:6c:b8:71:26:55:
                    a3:ca:22:f1:24:fd:3d:c9:de:02:94:06:a2:e1:32:
                    b7:63:cd:76:7b:1f:6e:40:ca:d1:c8:c8:03:f1:e8:
                    fe:5b:52:8f:94:37:cc:97:4a:0b:37:6f:8c:09:7a:
                    ba:36:40:de:48:ed:cb:ba:8e:f9:de:cd:63:d9:01:
                    8e:cc:a6:fa:79:2b:23:81:a9:89:a0:a7:2e:d5:10:
                    c8:0b:64:dd:cf:c3:e1:ed:25:8d:ea:58:ff:3c:a4:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:E8:B2:DA:DF:CC:5C:4E:93:F1:09:11:13:DE:E7:3C:E4:FA:9A
            X509v3 Authority Key Identifier:
                keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:10:93:89:d0:f7:dc:fb:3c:28:21:f2:cd:37:1d:80:b5:be:
         32:15:72:a1:96:e6:64:7f:0d:15:8e:8d:2a:3c:a5:ff:93:2b:
         df:0a:05:cb:5c:9b:db:c3:56:77:ed:5e:bb:5c:81:df:47:08:
         3e:19:04:b3:03:cb:2c:0c:23:27:14:6c:e7:f5:15:39:f0:1e:
         48:2e:a3:33:39:bd:9f:55:63:2d:8d:3c:e9:9c:fc:91:16:f2:
         86:f1:ba:39:8a:da:b2:94:c0:79:88:37:50:f2:5e:64:c7:0c:
         09:6d:a2:e2:f9:91:f0:b6:e0:e4:5c:7f:c7:87:fb:ed:47:58:
         41:a9:1b:a0:40:ae:1a:3f:cf:d5:17:c5:71:77:b5:ab:7e:c4:
         1a:5b:04:7f:1b:e9:03:7b:50:de:77:92:ea:9f:cc:16:95:66:
         67:63:6e:ab:bd:2f:3a:92:d7:e7:b5:43:82:12:af:dc:85:56:
         66:11:66:98:2c:3a:24:00:b4:94:43:ae:19:ba:10:da:4e:63:
         e6:55:92:74:cb:b5:76:0f:ff:20:e7:c6:44:f0:b7:c2:48:21:
         c1:78:ca:81:e7:a7:33:a6:ac:e3:4d:94:92:33:8c:11:8e:9d:
         81:c7:6f:a6:a9:93:29:83:9c:6d:fb:b4:0d:83:9e:95:7e:c6:
         af:a8:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:17:36 2026 by rpki-client