Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          Om/PS6MvwY8oKl5Nif+uAKX4G4Hccux0kBfdtRahCfQ=
Subject key identifier:   9E:44:EF:A3:F4:51:23:35:51:15:25:06:02:82:90:06:E8:2F:B8:28
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       01A00213880C004B4CFE8DC2CD7FA527FF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0D3C
Signing time:             Fri 14 Aug 2026 21:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:29 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: hvVaRYv5IUnxQzKcwPMGiay/X2YyIqmcB4tjsi6HTGE=)
                          2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:88:0c:00:4b:4c:fe:8d:c2:cd:7f:a5:27:ff:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Aug 14 21:00:29 2026 GMT
            Not After : Aug 15 21:00:29 2026 GMT
        Subject: CN=9e44efa3f45123355115250602829006e82fb828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:eb:96:5f:80:92:f6:c9:31:b4:c7:34:51:
                    2c:8e:fd:64:f6:d9:f1:49:95:16:b5:72:be:56:9d:
                    af:53:a3:cd:2d:8e:5d:49:53:1b:ab:0b:5c:06:37:
                    67:b6:ba:6e:69:f5:ab:9d:30:38:a8:e5:88:d4:d6:
                    93:4a:ba:8a:a3:b4:f2:2e:d6:00:9e:35:f8:d5:26:
                    c8:57:11:ee:7f:05:d2:7f:e2:39:03:a6:5e:b1:6e:
                    de:f9:18:21:07:e8:c0:a5:7f:fb:4d:75:71:66:ac:
                    c0:20:7e:b4:8d:48:cb:4c:02:1a:db:2c:06:90:47:
                    b0:47:ca:be:19:1f:61:b4:8b:f4:df:9d:a1:09:08:
                    58:78:55:8c:89:e3:08:34:30:32:f4:d4:b8:25:8f:
                    9e:52:3a:f0:6f:cf:8b:be:44:84:26:95:07:89:f9:
                    88:08:c9:33:27:5e:01:c7:66:b5:54:57:12:6f:05:
                    f8:e6:47:b6:a0:c9:a7:0d:58:a2:c4:41:27:c9:5e:
                    eb:40:c3:f3:c9:cc:9a:c2:a0:14:a7:b8:44:13:0e:
                    ae:23:34:d0:d5:81:b7:f9:73:3c:30:10:ef:8b:a1:
                    62:ad:93:46:a0:20:f8:a9:80:b0:66:25:59:79:ec:
                    d5:31:ff:09:9b:8e:7c:e1:10:66:07:aa:56:3a:1d:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:44:EF:A3:F4:51:23:35:51:15:25:06:02:82:90:06:E8:2F:B8:28
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:de:59:12:51:59:90:b1:35:16:96:1e:11:a6:23:8a:87:54:
         84:cc:f8:ce:e3:ba:d1:f3:0d:bb:d3:fa:38:32:bb:93:ab:3d:
         f9:c2:d2:85:18:61:38:95:62:8d:b5:04:a3:d0:37:43:9b:3c:
         86:be:32:02:07:61:df:07:7e:73:a8:2a:18:08:dc:10:ec:d3:
         8a:aa:de:61:77:26:d5:65:a6:04:c4:8b:bf:22:ea:a8:2f:df:
         e9:70:b1:e7:e2:ea:68:05:18:a1:50:bf:a2:fc:66:b2:c4:b1:
         45:0c:08:66:c4:8f:47:d4:67:7e:a7:58:88:ed:51:4d:2a:04:
         18:c1:22:c7:cf:34:48:3b:4c:ad:e6:d7:aa:61:c8:09:84:e6:
         f7:ad:1e:dc:81:18:10:6a:15:f7:fe:a6:45:d7:8c:12:7a:4a:
         bc:2d:30:83:f7:32:f2:fe:d1:3e:cb:c0:c1:89:c2:0d:d7:aa:
         6c:ac:f3:42:1b:bd:98:b5:e4:43:68:7d:ca:b2:f2:84:f9:73:
         e4:3d:7e:34:7c:74:01:80:e8:fe:70:10:c1:0d:fe:26:08:83:
         f8:89:bb:8a:fb:9c:29:06:d8:a5:0a:48:fa:0c:04:93:bb:58:
         62:af:80:87:dd:51:05:33:f7:e9:98:04:41:2e:b7:04:05:fb:
         4d:35:66:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:30 2026 by rpki-client