Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File:                     Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier:          x9MT8kojaAyDDl5uxgOgTPlgK4fIfYVtAU0fSPLpC5w=
Subject key identifier:   15:6F:95:91:37:96:F5:1F:6B:91:0F:72:64:3B:66:72:11:A4:1E:67
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer:       /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial:       01A06C4B4A57DFF67E722DC48044925AB21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number:          0B10
Signing time:             Fri 04 Sep 2026 12:01:08 +0000
Manifest this update:     Fri 04 Sep 2026 12:01:08 +0000
Manifest next update:     Sat 05 Sep 2026 12:01:08 +0000
Files and hashes:         1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
                          2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: ouTNH7zUOBFk49j/6RJgTCVbvWFFHXWmV5lfk+bXkWM=)
                          3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:4b:4a:57:df:f6:7e:72:2d:c4:80:44:92:5a:b2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
        Validity
            Not Before: Sep  4 12:01:08 2026 GMT
            Not After : Sep  5 12:01:08 2026 GMT
        Subject: CN=156f95913796f51f6b910f72643b667211a41e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:df:4a:75:cc:c7:0f:86:89:88:a0:86:f6:
                    7f:6b:35:04:a4:22:8f:29:11:04:11:46:9b:3c:1b:
                    fb:66:21:a4:eb:68:80:66:63:43:e1:f9:d4:cd:10:
                    6e:24:9f:b4:10:6b:49:07:0d:9c:9f:b7:db:48:55:
                    50:e4:ee:3a:bf:c0:18:2f:62:b1:a7:26:a4:43:be:
                    f5:94:90:23:99:bb:75:a9:b1:ca:42:3e:77:53:6d:
                    0d:e4:67:f8:f9:fc:85:1d:f2:b5:27:a5:f2:7a:85:
                    3b:22:80:a8:0b:1e:b6:00:d5:63:ec:97:3a:5a:41:
                    48:1a:85:dd:ec:5e:0c:63:54:ab:89:de:b6:f3:09:
                    42:ad:b3:ba:4d:7e:ea:40:bf:98:43:34:8e:ca:9d:
                    af:df:7f:d2:33:39:4d:5d:14:9e:27:f3:d5:56:78:
                    5c:5c:48:8e:34:f1:54:bd:e3:c5:65:07:cb:da:d7:
                    7a:0d:7b:a8:c0:ba:d6:53:fc:6a:5e:49:35:1a:0d:
                    f0:10:19:f5:1d:e5:4d:76:e7:b5:53:cc:d2:c5:e3:
                    88:96:f2:2c:6f:49:d0:3c:57:35:20:13:d4:1a:ca:
                    d9:0b:58:be:88:05:a7:2e:b6:70:3d:c7:6e:0a:74:
                    38:7a:93:0a:dd:34:9e:6a:19:28:f5:08:97:26:29:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:95:91:37:96:F5:1F:6B:91:0F:72:64:3B:66:72:11:A4:1E:67
            X509v3 Authority Key Identifier:
                keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a7:89:7d:f4:19:5b:21:01:71:8a:33:91:dc:19:b0:9f:b6:
         75:0b:08:00:da:47:04:66:fb:ca:f6:e9:e9:fc:df:a5:3e:08:
         8e:56:b0:91:a1:87:4f:7b:3d:22:67:12:8d:e1:27:81:b7:69:
         18:d5:5f:d1:e1:33:36:0e:42:ba:78:06:14:85:9a:bc:49:4e:
         75:da:b9:58:5e:2e:8b:41:64:80:1e:39:fc:75:70:a9:26:da:
         7b:17:31:ca:59:fb:5f:c3:d3:e7:6f:15:35:5a:dc:92:92:f9:
         f2:74:7d:42:a3:08:33:41:bd:a6:b4:55:29:7d:3a:34:e5:04:
         6d:6b:21:fb:6d:e9:a7:c1:9b:b1:e6:9f:03:33:71:10:5d:30:
         69:33:5c:e0:b4:0f:b0:61:17:e1:05:de:04:d7:33:ea:51:8a:
         55:83:9a:1b:15:06:64:0f:31:b5:f5:c8:5f:45:47:79:ac:e8:
         47:89:1b:6d:65:a5:4e:ae:5c:5f:07:80:eb:fa:0d:6a:ed:0f:
         cd:ad:93:ed:71:02:da:94:f7:da:82:e1:a3:74:88:5c:56:4e:
         4b:0a:b2:5e:fe:92:c5:49:90:e4:aa:d6:f8:11:41:67:d2:c2:
         f7:94:5f:6a:fc:a5:9c:9b:10:b5:68:4b:56:fc:04:62:8d:f3:
         84:4f:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:15 2026 by rpki-client