Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
File:                     6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json)
Hash identifier:          +jdSdF44KRFWK46lc72R263wpu4p+Pi/1Hfu4Ofq1aA=
Subject key identifier:   CF:3F:90:04:3F:86:D2:5E:6A:2D:14:45:90:9A:19:FB:C6:3E:6C:02
Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
Certificate issuer:       /CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Certificate serial:       01A0C557BB04B28FBBDEF8BC6A5820D75FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
Manifest number:          03B2
Signing time:             Mon 21 Sep 2026 19:00:55 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:55 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:55 +0000
Files and hashes:         1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: RaFF7EoQUMg7Zc1fjvMeJHsTKQzM++loV3hDNZYpvDE=)
                          2: TCYoAFJaTqATlFl0u6eQAyMZXJ8.asa (hash: v+oV8YQrF1EVh7SFPiMT8Uf4NtlNNpd/LZU5zlH6PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:bb:04:b2:8f:bb:de:f8:bc:6a:58:20:d7:5f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6
        Validity
            Not Before: Sep 21 19:00:55 2026 GMT
            Not After : Sep 22 19:00:55 2026 GMT
        Subject: CN=cf3f90043f86d25e6a2d1445909a19fbc63e6c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:68:a3:0c:30:ca:21:d3:da:81:ef:5e:61:
                    2e:d4:6a:ef:f6:94:c1:e7:22:b9:21:f7:6a:e4:c4:
                    3a:cd:91:8e:56:ab:66:cb:02:76:8e:26:9b:0f:21:
                    ea:f3:a9:31:9f:a6:44:03:20:6a:9d:8e:2c:02:ba:
                    7c:2c:c8:e5:d8:10:34:f4:ef:36:26:0a:49:0a:a4:
                    33:98:95:15:ca:c4:6f:24:6b:80:ac:cf:da:72:b5:
                    c9:fc:c1:49:d7:c4:9c:d7:64:c0:b6:1f:08:43:23:
                    c4:64:6d:8d:0e:f3:1e:3a:b7:4d:d9:bb:dc:68:3b:
                    c9:a6:91:c5:cb:41:15:93:67:c9:37:9e:90:67:8e:
                    6e:07:81:6a:24:38:37:b5:ea:78:57:ee:c9:a1:d8:
                    f1:cd:cf:5e:4d:1d:22:62:6d:aa:c2:53:af:e0:e8:
                    bd:5c:7d:46:1e:95:0e:9a:2a:c3:d8:80:b1:26:af:
                    2f:d5:e4:5e:f3:df:97:ff:f7:1e:3f:45:05:7f:ff:
                    36:f9:e5:d0:58:67:38:86:81:62:bc:4b:f6:d4:45:
                    6a:55:29:14:86:30:e5:82:8b:4d:e2:bc:08:8a:fb:
                    65:22:3b:fe:cf:77:99:66:cc:c0:ae:73:f4:87:15:
                    48:ec:d5:bf:7d:82:ff:ea:2a:19:8e:72:7c:0d:24:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3F:90:04:3F:86:D2:5E:6A:2D:14:45:90:9A:19:FB:C6:3E:6C:02
            X509v3 Authority Key Identifier:
                keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:99:74:6a:87:d9:d2:4b:43:90:c7:49:b4:d6:db:6c:32:41:
         3b:d9:bc:cf:83:f2:79:f0:76:65:d0:29:5f:b5:fd:57:76:74:
         69:96:ba:f3:a5:88:8d:83:54:95:7c:f4:95:a2:38:d7:48:bd:
         be:17:de:67:78:cc:1f:16:e6:5e:9f:d8:05:3b:b5:35:bb:5b:
         48:7e:a6:8c:49:71:b8:0a:e5:a4:cb:99:87:ae:f0:b8:e4:c7:
         2f:59:3f:76:b5:91:bc:94:ef:c3:64:eb:cf:39:7f:df:24:c0:
         e5:b7:0f:07:9c:a3:60:b9:cb:5a:29:5a:1d:40:48:cb:51:f3:
         94:d1:fa:0e:af:02:ae:f6:f7:5d:d7:8d:e3:d1:9c:97:25:c5:
         a7:28:ed:98:98:77:72:c0:2f:8e:e4:5d:83:a0:e1:8d:da:b7:
         8b:56:bd:ac:81:d3:49:38:e9:66:e9:11:3c:6f:ea:35:b5:8a:
         70:e9:c0:04:f2:86:03:9b:d5:82:29:1b:5e:71:38:cc:82:05:
         87:d9:f5:38:2c:d9:f3:1e:4f:c4:44:f9:64:1d:69:45:cd:a1:
         3a:f6:5e:5c:09:28:50:46:56:44:9e:62:2c:de:00:54:ca:eb:
         80:90:49:b7:a3:13:49:af:82:23:21:7a:fc:0f:54:36:e4:72:
         62:12:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:20:37 2026 by rpki-client