Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          69LWLu2r/5M7njmMQ2jTt6YTaRj1snsVlFuaMFAM5BE=
Subject key identifier:   2C:47:4D:EB:AE:34:F9:D6:40:8A:AF:ED:41:C6:38:1F:65:84:65:DF
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       01A0C2C4A5E1DBB0DE908B0B8349F06E17E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          09C5
Signing time:             Mon 21 Sep 2026 07:01:02 +0000
Manifest this update:     Mon 21 Sep 2026 07:01:02 +0000
Manifest next update:     Tue 22 Sep 2026 07:01:02 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: oobwHYRIXK2/SfEIcbRzR6jRcIdZicRDscrcwuyVXcU=)
                          2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:a5:e1:db:b0:de:90:8b:0b:83:49:f0:6e:17:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Sep 21 07:01:02 2026 GMT
            Not After : Sep 22 07:01:02 2026 GMT
        Subject: CN=2c474debae34f9d6408aafed41c6381f658465df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c6:89:1e:6e:0b:be:b8:9f:dc:88:0d:8d:c2:
                    8d:45:60:f0:a0:3d:db:b2:51:e2:93:e4:aa:91:4e:
                    f7:9c:62:c0:c0:a2:68:f6:fb:0c:e2:6b:b1:45:06:
                    2b:b9:ac:f2:7e:57:73:d5:9a:b4:d2:cb:b4:f6:a7:
                    71:eb:da:42:92:91:4e:c4:68:25:ab:98:5c:d5:44:
                    8c:f9:56:3a:53:ad:f4:23:f3:f6:a0:1c:0a:d2:ae:
                    7f:63:0b:cd:81:df:c9:87:b1:27:d9:ec:81:92:2c:
                    83:89:b3:1c:49:e1:57:11:c8:fa:2d:73:b6:fa:b5:
                    06:41:7d:f5:ff:49:2e:10:86:e5:80:44:81:cf:7f:
                    b6:16:06:3f:9e:91:75:1f:3c:50:ee:3a:5c:74:02:
                    8c:3c:17:9b:62:b0:e1:45:3f:e5:76:0c:26:ab:40:
                    46:8d:1c:cc:71:3a:5a:9f:86:ab:81:d9:37:f5:d8:
                    fa:75:8e:b8:e0:49:a4:f9:d8:1f:c7:55:19:2f:4f:
                    f2:31:a4:e7:84:cf:24:0e:76:10:63:65:8c:ff:8b:
                    5f:de:72:a3:62:02:05:45:f4:86:e4:47:89:3c:53:
                    60:fb:58:1c:e8:13:e5:1c:19:4b:f8:e6:bc:6c:17:
                    02:33:97:61:70:91:ae:b6:b6:e0:1d:f1:c2:bc:99:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:47:4D:EB:AE:34:F9:D6:40:8A:AF:ED:41:C6:38:1F:65:84:65:DF
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:74:ec:a3:9a:0c:9d:0a:a8:a7:d5:63:e6:87:c4:0b:c3:13:
         ca:64:80:af:d2:a5:80:16:8d:28:0f:d0:ed:ac:e0:72:ec:08:
         4b:93:13:9f:de:91:71:95:76:4e:7f:0d:1c:16:fd:91:01:ca:
         3d:5e:27:f4:19:f4:30:6e:5c:f5:69:75:08:d2:a9:07:ff:16:
         52:c9:e6:67:f7:38:9f:33:7a:87:81:0b:7a:c6:d8:4f:14:30:
         92:e7:bb:30:3a:f0:97:77:39:f0:1f:cc:1e:c7:08:18:8f:46:
         1d:7d:fe:c9:58:12:0f:0f:f6:79:07:19:5f:2d:6e:77:cd:c6:
         3f:58:74:15:98:6a:f0:87:20:5f:96:1c:d3:77:e1:86:15:af:
         f3:92:1f:22:b4:59:33:b9:cc:29:ff:34:e2:04:6a:fd:33:a9:
         ca:95:41:f8:08:9f:5b:9e:29:d5:71:34:de:81:4f:69:0e:7e:
         5c:5c:fc:1c:a5:53:30:6f:6a:a7:ca:cd:0b:b1:c9:a9:11:90:
         0d:e0:23:48:6b:25:be:60:08:fd:b3:ec:3b:e3:c2:6f:9b:3b:
         a5:97:73:4a:55:12:96:fb:23:af:75:75:9d:50:1a:77:50:7b:
         c7:36:62:ff:ee:82:91:d4:f6:10:7f:0f:ef:b7:53:e9:a9:80:
         fd:39:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:25:33 2026 by rpki-client