Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          SHY/tkEpiqH0sEaE4qUdQSovdYRnlGH0tbBHqnieF0w=
Subject key identifier:   FB:9E:F4:77:2A:2E:AE:C5:C7:C4:B8:4F:CA:94:20:FC:F4:91:00:9A
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       01A08ED7922B324762D6B42F85F9F3C07E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          1A17
Signing time:             Fri 11 Sep 2026 05:01:27 +0000
Manifest this update:     Fri 11 Sep 2026 05:01:27 +0000
Manifest next update:     Sat 12 Sep 2026 05:01:27 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: h8X5p0bG1co643yGlpStkqv2wVhOeKoXliUB7rAbBGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:d7:92:2b:32:47:62:d6:b4:2f:85:f9:f3:c0:7e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Sep 11 05:01:27 2026 GMT
            Not After : Sep 12 05:01:27 2026 GMT
        Subject: CN=fb9ef4772a2eaec5c7c4b84fca9420fcf491009a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:bc:49:f6:85:00:fa:7f:60:c2:22:29:27:
                    b9:0b:d3:4d:9d:51:09:04:71:77:64:5a:65:eb:14:
                    51:07:f4:b4:b8:d7:aa:0e:47:8d:3b:4d:94:9d:a5:
                    0d:02:b9:2d:02:3d:b0:82:30:18:f7:70:d8:34:ba:
                    8e:b8:77:53:ef:6d:7e:0b:e2:b3:dd:c9:ab:a7:8d:
                    81:2c:44:d7:8b:84:00:d6:48:75:92:ab:4e:20:38:
                    8e:fd:b1:29:c6:dc:17:0d:95:34:14:46:da:4f:63:
                    64:c3:1b:b7:ed:ea:fc:26:a9:99:54:d5:59:c2:cd:
                    a3:e6:d9:7e:c0:9d:b6:79:62:3f:70:b9:43:f6:bb:
                    5b:c5:f2:45:2a:04:68:38:4b:68:fe:19:fc:5e:62:
                    62:71:1c:84:12:f8:21:53:67:85:37:8c:e4:e9:7f:
                    0c:bf:37:1a:a2:0b:fe:c3:6b:69:90:80:74:95:27:
                    38:47:5f:1e:8e:a7:3e:1b:1c:2f:8f:d1:db:0d:7b:
                    f8:d7:8a:00:d5:e3:8b:f8:e6:39:5c:aa:f2:dc:1b:
                    60:d4:56:4a:33:3a:f0:0e:3f:16:c9:0f:83:d1:6c:
                    9a:6b:cb:af:f3:c8:0b:ca:58:2e:6f:b9:58:41:6a:
                    97:23:63:38:04:64:ae:b9:cb:71:e8:86:74:e9:86:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:F4:77:2A:2E:AE:C5:C7:C4:B8:4F:CA:94:20:FC:F4:91:00:9A
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:41:96:29:85:4a:97:9e:14:19:62:ea:5f:a7:d4:a9:13:90:
         be:ad:87:a7:3f:87:fa:58:19:10:e6:4c:48:9d:d3:b1:36:1c:
         19:e8:78:44:bc:a9:79:60:ba:32:cd:9c:f8:2a:c4:de:e3:e4:
         98:15:de:a5:4a:21:5f:a6:f5:c1:0b:69:f7:57:a4:fe:14:21:
         e2:7f:95:52:c9:b7:5f:fa:62:57:c1:37:e5:77:7d:ee:53:50:
         fa:c2:d7:01:51:f2:2c:c4:96:7a:11:c6:a6:7b:f6:d0:f8:2b:
         46:bb:38:d0:ba:fe:38:f9:56:a2:eb:a2:1f:1b:2e:5a:f4:5f:
         aa:9a:a9:2d:b8:86:0b:5f:61:f8:eb:2e:92:a9:55:78:93:db:
         19:65:00:e1:71:a5:e8:16:43:bc:a2:ee:9c:ec:a5:10:73:ee:
         87:b2:7a:e2:26:ff:9f:7c:50:df:82:15:bf:2e:36:0c:ae:53:
         62:a9:84:cb:d0:a9:6c:50:c1:7c:53:94:25:6a:96:8d:39:21:
         a8:15:42:da:36:9b:28:e8:a5:60:d6:8d:8c:44:53:8e:f8:b4:
         3f:60:98:8c:d8:31:ed:a5:9f:a3:b1:f2:2b:a7:b7:b9:f7:03:
         0d:dd:1f:f1:c9:11:5d:1f:a5:f7:ad:4e:89:f1:04:c6:91:b1:
         36:10:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:01 2026 by rpki-client