Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          dDU37zv2O5pbxrcbySVIs0w4WGzgLafB5D/7mkca8oI=
Subject key identifier:   74:69:26:3C:37:3C:71:22:6E:20:53:63:0F:87:35:83:EE:D1:23:77
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       01A117BD2AF399B036113BDB68AFF91FF26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          17AE
Signing time:             Wed 07 Oct 2026 19:00:35 +0000
Manifest this update:     Wed 07 Oct 2026 19:00:35 +0000
Manifest next update:     Thu 08 Oct 2026 19:00:35 +0000
Files and hashes:         1: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: yGiJwK8ZMcTlViB//yxlLfUfdZdjsIfSvGtGxMgcbts=)
                          2: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (hash: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:bd:2a:f3:99:b0:36:11:3b:db:68:af:f9:1f:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Oct  7 19:00:35 2026 GMT
            Not After : Oct  8 19:00:35 2026 GMT
        Subject: CN=7469263c373c71226e2053630f873583eed12377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:85:b0:1e:23:7c:1a:02:83:f3:9f:97:b2:
                    70:6b:ed:7c:31:01:0f:0e:ca:7e:6a:f4:fc:e7:43:
                    85:05:41:ce:fa:cf:ef:dc:af:73:b9:48:f9:25:8f:
                    6e:5b:3e:0e:b6:e7:26:78:e2:08:f2:cd:f7:5a:f2:
                    6c:f7:26:e2:ef:9d:07:89:ae:05:37:fc:a6:c7:12:
                    98:63:f1:b6:d8:0b:fd:f7:20:c7:9b:b3:0c:3d:ce:
                    af:13:93:2c:dc:81:91:a4:16:66:cd:26:71:b6:e8:
                    d9:57:bd:8d:68:ad:d9:80:7f:bf:63:9c:ed:e9:79:
                    91:02:b8:c3:bc:16:41:ee:b6:22:31:5a:8d:48:14:
                    f5:e6:d1:54:58:0d:62:b6:cf:06:ff:21:f5:3f:5b:
                    f2:90:63:7b:5a:df:3e:1a:e2:13:52:02:2c:6f:81:
                    25:f9:38:2f:4b:57:79:e3:5d:01:e6:4e:f0:d4:83:
                    cf:0d:d5:27:4e:ab:a3:cb:4c:d0:c5:4f:cf:c1:96:
                    4d:1e:a8:66:50:f4:b6:d4:a9:55:67:5a:4b:ab:de:
                    5e:cd:1d:f6:8a:0c:cf:3d:b5:16:7c:15:e6:6e:2f:
                    66:d1:bb:4c:5f:a4:d9:19:b6:b4:5f:ba:f7:01:84:
                    82:a1:b7:ab:91:36:81:fe:db:9d:79:52:3b:0f:8c:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:69:26:3C:37:3C:71:22:6E:20:53:63:0F:87:35:83:EE:D1:23:77
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:5d:b4:a0:aa:78:08:8e:17:54:ff:f9:66:6d:38:f7:bd:
         0b:50:69:c9:d3:41:25:f3:8b:c5:fe:3a:0f:da:a1:e2:ff:93:
         cb:71:84:8e:18:d6:cd:e5:79:61:4e:ba:f2:fd:1c:d5:e4:d8:
         b4:30:ad:02:0f:5b:28:7f:80:d8:67:dd:67:ea:66:be:d3:11:
         4b:5a:60:bd:09:d7:a5:e2:09:ec:3f:9b:95:df:96:69:5b:44:
         22:57:9a:3e:3c:c7:85:61:44:75:6e:1c:f2:f9:a6:1b:c4:0a:
         f1:eb:3f:c6:b6:27:88:a0:9f:df:b4:c7:7b:47:28:b0:71:92:
         b4:20:99:0a:c7:fc:b3:9b:f6:ad:96:a5:13:d8:4a:27:23:aa:
         5d:21:f9:f7:2d:c0:da:ef:e0:f4:42:86:e6:0a:9b:b8:96:ff:
         87:52:e3:e0:52:0c:d4:d3:8e:fb:00:5a:5a:f7:a0:20:b3:b5:
         53:25:83:5a:21:8d:01:7c:55:3c:a9:c7:7e:06:60:e3:0f:45:
         03:c6:6d:6e:e1:eb:8f:67:30:91:44:24:24:1f:68:af:fe:e5:
         8b:d8:92:77:b7:57:40:2c:ae:14:46:08:ae:5c:a6:a8:2b:18:
         e3:83:a6:fd:1f:85:b3:89:2c:89:f8:f1:a9:bb:d4:35:1e:f5:
         c8:89:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:23:02 2026 by rpki-client