Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File:                     1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier:          TtXzR9mz77badHxoJSjkFIFoORY8/MKIa6dopRamsnY=
Subject key identifier:   94:6D:5E:50:C1:8D:E0:95:A3:88:75:5C:97:7A:00:C5:37:5F:F0:61
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer:       /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial:       01A06E70DCA3C532A8FA0F32BE425A8DC0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number:          057D
Signing time:             Fri 04 Sep 2026 22:01:25 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:25 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:25 +0000
Files and hashes:         1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: 7zG+XUmu5Uyq2/lU+IEQQxHAW5hwzr0rZO2VFVe0OQU=)
                          2: HORWGw6AaqSSM12H6ipwx55-oWY.roa (hash: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:dc:a3:c5:32:a8:fa:0f:32:be:42:5a:8d:c0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
        Validity
            Not Before: Sep  4 22:01:25 2026 GMT
            Not After : Sep  5 22:01:25 2026 GMT
        Subject: CN=946d5e50c18de095a388755c977a00c5375ff061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:64:df:13:bc:c7:43:98:bd:b0:e6:47:0a:
                    2f:9a:6e:e5:19:2f:7a:05:15:5a:2f:e8:79:8b:af:
                    6f:e2:5e:18:03:4a:56:d5:43:15:63:2e:86:1e:53:
                    a0:44:5c:78:83:82:f8:a2:9c:d8:2a:65:b2:74:cd:
                    3a:eb:29:80:43:7e:de:e1:34:06:7d:77:9f:62:c2:
                    eb:1c:4c:f3:c8:e5:bb:14:87:93:ca:f3:6b:24:bd:
                    8c:39:bb:2d:09:fe:01:61:9e:c1:2e:b8:a6:41:cb:
                    d5:e1:1a:e7:e9:7d:93:22:f7:bb:61:41:3f:6d:ed:
                    7b:79:d4:04:8b:c8:81:59:97:30:15:e6:fd:66:78:
                    04:d0:9a:a2:af:b4:7e:99:66:8c:57:58:b0:48:44:
                    fa:6e:6a:13:f6:26:83:71:8c:15:14:0e:a4:05:e9:
                    20:0a:91:37:86:c6:c3:41:4b:51:ab:9a:6d:b2:39:
                    0d:b2:4a:63:1b:76:06:ba:2b:5e:7a:08:46:4b:31:
                    8f:a6:06:b3:3d:56:bc:ad:1f:1f:fd:6f:6f:d0:da:
                    d7:51:26:7f:d6:83:75:40:b1:67:88:d6:2f:0c:bd:
                    4d:77:c6:05:9c:8f:f3:e3:65:a6:33:f7:5c:6c:bc:
                    11:ee:f2:26:e2:13:e6:02:93:08:e2:a0:e6:53:b8:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6D:5E:50:C1:8D:E0:95:A3:88:75:5C:97:7A:00:C5:37:5F:F0:61
            X509v3 Authority Key Identifier:
                keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6b:be:47:40:5b:84:ef:92:05:c5:54:1f:b9:6b:9b:1c:d9:
         30:80:54:4b:7b:8c:2c:7e:a6:75:54:d9:c3:a4:a9:6e:aa:ab:
         ff:a0:49:fc:45:4f:62:f3:b3:bf:b8:20:e7:e5:c8:c2:fe:27:
         17:7f:a8:94:48:cf:d0:f5:7e:99:ee:9f:81:7a:78:b4:a4:ad:
         1a:c9:e7:8e:78:f6:f8:c6:f6:e6:ee:4d:2f:b5:08:32:27:2d:
         6c:9a:f5:84:f3:54:7f:51:6b:f1:96:7c:fc:a5:70:cb:72:f0:
         ac:d0:d6:60:ab:ec:2a:10:ba:69:11:3f:9f:b4:65:26:0d:72:
         6f:b7:3b:f7:8f:77:74:ac:e1:9e:8e:12:93:c6:e3:9a:ea:d9:
         37:0c:29:ed:e8:36:33:58:ed:f9:eb:29:84:9a:30:7f:cf:b1:
         16:9d:a5:cf:ca:31:e2:0f:23:14:9b:1d:08:e1:43:05:1f:89:
         70:78:22:b8:a4:ed:49:b2:61:77:b2:43:b7:b7:1a:33:c8:a4:
         4d:d0:a8:7e:c6:87:0b:3f:05:a8:d0:77:26:e0:d3:af:a9:f8:
         fe:41:1e:89:18:01:5e:49:a8:ba:15:d5:54:42:32:39:d9:6b:
         6c:b7:e3:bb:7a:80:fb:fb:00:f1:f2:14:f4:6d:2f:06:55:54:
         45:b0:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:59 2026 by rpki-client