Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File:                     6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier:          fF5oIC2QLXR/0iqL6EPI0ZU4VZc60N9/r+qtFaLwVQ0=
Subject key identifier:   BD:0A:73:46:6E:20:D2:91:D6:24:7A:68:4E:73:2A:3C:0E:17:BD:44
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer:       /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial:       01A0C1B1807C0C13C6198541BEC188831BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number:          0A00
Signing time:             Mon 21 Sep 2026 02:00:30 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:30 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:30 +0000
Files and hashes:         1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: sBl31JhwZIUysmU1LndqSIgfi0rrZwesLC94lvxbS/g=)
                          2: b4Ahv2Rp9bxG7wcFPklnJREK0b0.roa (hash: KQEo13dywO1eXsbu0WPKOMTBSK6OIgfZ6KB0hgpviHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:80:7c:0c:13:c6:19:85:41:be:c1:88:83:1b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e994e74064158e97904990947510eb9941986ca1
        Validity
            Not Before: Sep 21 02:00:30 2026 GMT
            Not After : Sep 22 02:00:30 2026 GMT
        Subject: CN=bd0a73466e20d291d6247a684e732a3c0e17bd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:1c:7f:14:20:98:14:ec:e0:68:fc:d3:ed:
                    d5:65:af:3c:ac:cf:60:fa:ab:d6:bd:70:18:81:99:
                    19:2f:76:b2:04:fb:81:cd:10:d7:82:65:5e:e7:7a:
                    fb:f8:99:15:df:4d:0c:bf:5c:e0:e7:dc:ca:ec:14:
                    96:6a:65:a8:fe:35:69:bf:8f:da:40:8c:20:6b:84:
                    16:82:cd:92:8f:fb:23:71:00:24:e0:31:ad:1c:8d:
                    c7:cb:cb:9c:44:f1:18:c8:bf:02:ec:aa:b9:7b:06:
                    43:d9:98:a6:19:39:c2:a6:c5:70:ed:8d:30:22:31:
                    d1:b1:95:7d:1d:bc:aa:3c:9a:6f:60:b6:78:5f:a9:
                    f6:08:95:0d:ed:93:88:3e:84:ab:d1:24:84:b6:19:
                    37:90:00:f5:15:00:cd:f4:90:76:09:ef:5c:8f:b3:
                    f6:b0:4e:b6:f4:c9:b8:b8:66:70:2a:71:81:3d:d1:
                    09:72:dd:2c:a0:eb:8a:75:c6:4b:53:e8:6e:4a:79:
                    2e:cc:79:17:db:2a:dc:fe:e0:f9:e6:df:5a:5c:0d:
                    e4:6e:53:e4:23:c3:92:f3:c0:68:c8:4e:f5:76:6b:
                    ca:e9:95:36:be:41:1e:75:47:00:4f:70:ee:10:17:
                    7e:88:8d:18:1c:e4:d8:c1:47:63:3a:51:b8:fc:ac:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0A:73:46:6E:20:D2:91:D6:24:7A:68:4E:73:2A:3C:0E:17:BD:44
            X509v3 Authority Key Identifier:
                keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e9:d6:e2:69:18:70:6d:e8:4d:69:ae:1c:a6:be:65:9e:dc:
         57:46:78:19:51:9b:6c:61:37:31:9d:dd:06:62:db:03:63:8a:
         3c:b9:9c:9a:56:fe:bc:ce:5f:e4:21:fc:0a:25:5c:85:70:d4:
         6f:2a:05:01:bc:d1:9e:9e:1c:bd:b0:cd:2e:c8:40:04:ed:a5:
         f7:d4:0b:18:e8:a2:18:b1:f7:f3:59:1a:68:5e:62:c4:55:33:
         c2:b5:2f:f8:9d:fc:d6:e9:e8:e1:e8:8a:0a:fb:18:2e:3f:ca:
         e0:46:dd:15:47:10:63:89:7b:ca:f7:7f:2e:90:fd:d2:6f:9b:
         a0:90:e3:28:25:4c:3c:b2:eb:08:e5:44:3b:ec:cc:a1:30:3b:
         e1:af:c7:2b:33:9e:81:2e:7f:eb:5f:6d:c9:0d:9e:45:63:d3:
         13:01:26:9d:da:ed:33:3b:b4:ee:a4:24:e6:59:08:d0:4e:3c:
         e0:0f:93:f8:c6:36:be:84:2c:2f:69:ec:7c:0c:f3:a3:3a:b8:
         c9:8f:0d:22:da:70:d6:36:99:fe:57:99:d3:ce:bc:5d:e0:9d:
         a5:ea:f1:9a:46:1f:51:55:fb:54:67:b7:9f:a6:6d:01:62:69:
         33:23:b8:b7:eb:71:aa:1b:85:36:2e:04:f5:43:05:2b:92:7b:
         ef:e4:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:40:40 2026 by rpki-client