Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
File:                     6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft (raw, json)
Hash identifier:          fuiY0kumWeYDZR2vczsH6DaHDWbiPJZHHoBMfal+fGY=
Subject key identifier:   0A:FF:EA:FC:7C:00:D2:95:3F:E8:9A:08:F7:82:B7:F0:B3:4F:40:C2
Authority key identifier: EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4
Certificate issuer:       /CN=ebf371e509735990943b73a85e470f3ea0a41db4
Certificate serial:       01A0EB1D56BD30D4A4E31B038E739B2B2478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
Manifest number:          F3
Signing time:             Tue 29 Sep 2026 03:02:43 +0000
Manifest this update:     Tue 29 Sep 2026 03:02:43 +0000
Manifest next update:     Wed 30 Sep 2026 03:02:43 +0000
Files and hashes:         1: 6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl (hash: /Bv77tC/fuxZzDNFmJ0F5qC1HmAqIhYW8yk0450bIRk=)
                          2: ZLkUyts_ik035FHPNwJmjLRIrPI.asa (hash: SPbBsWohroURBEl28DxtmNiba7IFZbUfgRRzWaEzxEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1d:56:bd:30:d4:a4:e3:1b:03:8e:73:9b:2b:24:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf371e509735990943b73a85e470f3ea0a41db4
        Validity
            Not Before: Sep 29 03:02:43 2026 GMT
            Not After : Sep 30 03:02:43 2026 GMT
        Subject: CN=0affeafc7c00d2953fe89a08f782b7f0b34f40c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:74:07:26:b9:3f:ba:06:7e:55:7a:8d:89:
                    c2:97:f8:ed:1a:ae:5b:91:2d:09:8d:ed:d5:83:b0:
                    da:97:26:14:0d:40:fd:12:2b:b1:df:e6:12:fa:bf:
                    f1:cb:ad:77:f9:93:01:3d:cc:24:d5:8d:15:20:58:
                    28:a3:00:93:ed:50:a5:0c:02:cf:46:8d:ac:e3:62:
                    5e:67:53:9a:50:8b:8e:f3:a8:3a:33:9c:51:4a:b1:
                    22:ae:5a:61:c2:07:04:20:84:d4:de:82:21:6f:21:
                    ed:83:de:88:ed:70:74:3a:c5:f1:cc:cc:c1:64:67:
                    45:34:7a:e8:da:8c:e2:84:94:0d:7c:fb:63:0d:af:
                    28:cd:29:1e:46:49:7c:b1:e9:8d:43:ea:d1:ed:d5:
                    a3:64:27:cf:a1:f4:26:b1:e2:52:43:d7:af:af:3d:
                    6e:c2:a9:17:44:41:6c:b9:af:95:12:27:b9:7b:8b:
                    ff:7e:e7:13:77:d0:d5:b8:17:f1:7e:89:2c:35:22:
                    87:52:cf:59:6e:ec:07:30:c0:07:d9:d3:78:bf:88:
                    14:68:55:97:73:ff:06:3c:0a:b5:f3:44:30:b8:07:
                    67:4c:e9:f9:33:ee:d2:ce:7b:6a:14:be:94:57:4d:
                    55:9c:2a:65:21:53:b3:8f:65:9e:e2:98:52:88:83:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FF:EA:FC:7C:00:D2:95:3F:E8:9A:08:F7:82:B7:F0:B3:4F:40:C2
            X509v3 Authority Key Identifier:
                keyid:EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:3e:fe:d9:4d:6d:82:dd:50:09:0a:f8:e3:b2:5a:f4:3e:
         32:03:01:8f:15:28:bc:b8:c3:d7:8b:08:a8:46:10:9e:30:d6:
         bb:3f:66:45:36:8f:5d:5d:d0:76:36:e3:5c:51:46:03:9a:44:
         59:55:dc:fa:44:6e:dd:c7:36:12:6f:98:ac:8c:94:f1:de:9c:
         88:9c:2e:d9:92:e1:be:f5:f4:8e:77:e9:9a:57:e1:da:a5:ce:
         57:99:4c:28:24:fa:fd:9b:e5:bb:4d:5c:9d:d7:36:a1:b0:47:
         17:15:37:8e:2a:d3:24:6f:73:4c:6e:b6:ce:e1:bc:62:dc:70:
         a2:29:c9:5c:f0:c4:b6:57:dd:fb:c1:6c:ee:8d:8d:05:ed:83:
         02:4c:75:be:63:78:6f:aa:40:00:12:92:45:cb:1b:a4:f4:a0:
         62:73:1b:96:24:cf:ce:d1:e6:92:98:cf:ea:7f:08:1e:df:74:
         c2:95:e8:80:0a:b1:10:a8:6d:33:ae:b8:a4:ce:20:21:85:15:
         45:02:af:6e:55:bd:54:08:88:1e:e7:a9:8f:a1:9d:01:26:7a:
         74:0c:de:15:c7:bf:2f:aa:f7:21:95:ea:fb:f9:87:0f:f7:86:
         55:07:85:6d:15:3c:c1:f6:cc:3f:90:7d:3c:77:80:08:00:28:
         3e:c0:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:29:41 2026 by rpki-client