Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
File:                     6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft (raw, json)
Hash identifier:          GCNu378RuCZ7Z7RWkFzDf9Ua2J/QpVFZQvti7e5XSZ8=
Subject key identifier:   5E:1C:7C:78:DF:10:55:97:CB:62:58:E9:48:E5:9D:C9:94:81:1A:DD
Authority key identifier: EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
Certificate issuer:       /CN=ea2f671f10834dae48ea8d987342c375cab3316d
Certificate serial:       01A003269C0AC361D2F3BD955D4EBBF38A81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
Manifest number:          05FB
Signing time:             Sat 15 Aug 2026 02:00:56 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:56 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:56 +0000
Files and hashes:         1: 1-BDF7EdL9hLHZ4qCs6jAWm3n8G8.roa (hash: 3HI3L0u1gTr2C+yxlBAEamd5L6jvpyumi2g5XXRKy/k=)
                          2: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl (hash: 7ABqMuyi+AwVWpBcvYUK7Bhh1tLo+QdoJWlc2sjNp/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:9c:0a:c3:61:d2:f3:bd:95:5d:4e:bb:f3:8a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2f671f10834dae48ea8d987342c375cab3316d
        Validity
            Not Before: Aug 15 02:00:56 2026 GMT
            Not After : Aug 16 02:00:56 2026 GMT
        Subject: CN=5e1c7c78df105597cb6258e948e59dc994811add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:28:1c:98:e4:bc:95:1e:4b:96:38:8c:d1:
                    e5:ed:3a:ac:e5:2d:b0:0b:e9:89:54:04:43:05:f8:
                    e6:24:d8:61:7a:00:fd:84:f1:dd:98:03:b2:44:be:
                    be:34:79:dc:9e:8a:37:54:92:0c:c4:9b:23:5c:ce:
                    13:7c:eb:da:33:cf:00:65:bf:51:f2:82:e2:8a:dc:
                    b4:26:d9:30:64:bc:12:02:cd:e7:08:53:9c:83:e4:
                    fb:1d:b1:54:f1:0b:8e:e4:aa:bb:17:a8:d1:62:c7:
                    2e:eb:78:b0:33:d6:b8:0c:e4:ae:aa:38:67:29:22:
                    80:fb:5c:56:21:24:b4:0d:3e:02:17:be:38:7f:2b:
                    3d:a6:d6:65:dd:f5:7f:9e:71:26:cb:5c:54:3f:84:
                    41:66:48:75:00:77:79:2a:d0:88:5c:d2:a9:e0:50:
                    af:ca:59:87:b3:f1:87:50:15:7a:49:85:0d:0d:f2:
                    33:62:ec:80:31:05:69:71:42:bb:49:ba:bd:c8:ab:
                    91:17:3b:8c:d7:5c:13:6f:c9:45:c4:1c:bc:ff:f8:
                    90:17:a2:2d:b3:fe:10:69:70:e0:39:e9:05:f6:45:
                    e2:39:83:ba:4c:eb:84:d6:cb:0d:3a:bf:6e:5b:2f:
                    6d:bf:71:96:f2:58:f4:16:ce:0d:94:3d:dc:15:16:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1C:7C:78:DF:10:55:97:CB:62:58:E9:48:E5:9D:C9:94:81:1A:DD
            X509v3 Authority Key Identifier:
                keyid:EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:86:50:7d:26:51:d9:f0:db:56:d9:f5:03:4d:27:d8:c3:
         4f:1f:e8:d2:9e:8f:68:4e:45:b2:8b:1f:e9:5a:23:5e:c0:7e:
         a0:42:77:e1:f5:43:c4:98:79:d3:49:cf:0d:e7:50:24:76:88:
         da:52:e6:ab:b2:d6:f6:b1:d7:ce:11:11:c2:db:bd:a7:8d:e5:
         11:13:87:45:99:d1:4d:73:89:19:bd:2d:ac:ef:8e:df:eb:c1:
         a6:48:7b:65:f6:b8:c0:9f:95:8c:21:77:b3:b9:5a:fe:24:f3:
         ec:e5:7f:64:fb:59:cb:0d:89:e9:2f:9d:d4:81:38:f1:dc:be:
         12:b0:06:bf:02:0c:ca:39:c9:6a:07:86:a8:fc:fb:68:74:a1:
         0b:2e:1e:d5:c2:a0:5e:bb:b6:7b:95:51:0a:88:69:c2:35:3c:
         a7:81:aa:3a:50:de:be:94:bf:40:e4:c1:e1:b0:7a:e8:37:b5:
         e2:cf:f3:63:4f:05:38:6c:8d:5a:a6:a2:b8:f9:c5:76:3b:9c:
         fb:6a:d2:76:7e:a4:30:2b:1f:95:5e:21:65:ce:93:01:91:85:
         e1:e8:5a:07:c5:0f:85:e9:65:6f:0e:e5:de:f7:f5:0d:f7:b3:
         3b:07:36:ba:d2:b4:14:20:3e:4c:3b:cf:94:ab:5d:c3:88:98:
         3d:db:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:12 2026 by rpki-client