Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File:                     6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier:          4pmapD69JpnMsLbtyls8AqTERyMJLMgAGtIb1aVRgIE=
Subject key identifier:   44:D6:7E:8D:6A:60:DD:1B:A4:3D:AF:DF:B3:02:2D:99:71:A5:67:FB
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer:       /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial:       01A06E70C6179D89C61E4CA596162C2ADEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number:          1A3C
Signing time:             Fri 04 Sep 2026 22:01:19 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:19 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:19 +0000
Files and hashes:         1: 4Af87rg4Bx7SgQQ5MxEN8mZ2YrY.asa (hash: Kzv9NX9qtlVE38MFIIf9pptzKBSLZ3APX1zKA5bjFE8=)
                          2: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: lkyZgeo/NGIigZ3q09zVbUodfDtp1LlAZyvGOGZc0tw=)
                          3: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:c6:17:9d:89:c6:1e:4c:a5:96:16:2c:2a:de:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
        Validity
            Not Before: Sep  4 22:01:19 2026 GMT
            Not After : Sep  5 22:01:19 2026 GMT
        Subject: CN=44d67e8d6a60dd1ba43dafdfb3022d9971a567fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:a8:22:25:21:fb:c1:b5:a9:76:f9:ca:9e:
                    71:79:3f:de:6f:d5:83:2b:4e:59:9e:79:74:7f:0e:
                    4d:21:db:d9:72:1e:a1:62:a6:ce:cb:16:a7:21:f7:
                    0b:e4:a5:c7:70:74:3f:22:fb:70:d0:39:ac:da:48:
                    a6:ce:18:f9:ee:ae:69:a1:1b:52:5f:76:b1:68:e4:
                    4f:75:75:50:8d:4a:4f:a6:03:29:f8:6c:05:04:ff:
                    30:49:43:11:32:31:ee:24:70:df:11:3c:dd:32:fe:
                    32:47:ee:25:f5:72:7e:a4:03:37:a6:d8:65:e3:07:
                    13:8b:cf:92:17:22:c9:d1:78:5b:19:df:fd:49:1f:
                    3f:11:97:05:8d:9f:3e:9a:44:f7:e1:8b:4e:50:e4:
                    fe:f8:d1:e2:0a:2e:bb:55:56:78:18:1c:9e:b7:4f:
                    a3:11:76:94:0a:61:c0:4a:5d:57:e9:16:f5:4b:78:
                    ef:4f:7a:55:c4:9f:44:14:b1:dd:49:df:d6:26:c8:
                    96:71:8c:72:50:92:3e:98:f1:23:da:cd:88:0a:ea:
                    ea:fa:fc:9e:6e:28:df:07:4d:64:d0:ee:63:39:83:
                    91:26:c4:00:62:9e:6f:ec:93:09:20:fb:b8:5b:eb:
                    cd:b9:3d:98:5a:34:a8:43:76:90:aa:6f:81:35:f4:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:7E:8D:6A:60:DD:1B:A4:3D:AF:DF:B3:02:2D:99:71:A5:67:FB
            X509v3 Authority Key Identifier:
                keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:54:6f:05:89:76:c5:8c:38:92:e8:fb:ff:1a:52:c7:ae:
         7b:8b:76:5e:5f:9b:49:15:2a:e3:5a:c7:68:ce:37:94:23:68:
         ab:4f:fb:10:d4:0e:4a:46:d4:ac:1e:1d:b7:27:84:2f:97:ce:
         18:73:43:c9:6c:e3:1c:99:2a:7d:e0:b2:a7:16:0b:cd:a9:ce:
         fd:8d:ff:82:72:70:2c:85:98:29:ff:f2:ac:e4:af:9f:d1:99:
         e2:71:bc:6a:5e:95:7a:a9:f1:0a:03:e0:6b:25:ad:a1:e2:c6:
         69:2b:b5:39:a1:da:c8:a4:f0:fb:6a:e5:34:56:bd:d0:3d:7b:
         81:f3:c3:6e:67:1e:7b:7b:93:d6:f2:3a:63:ea:48:00:f4:0c:
         56:4d:1f:7b:3d:bc:b6:67:16:ee:38:b8:c5:64:f8:b3:ac:ce:
         65:57:63:70:8b:77:05:80:0e:bd:3b:1a:cd:03:4e:ae:26:d6:
         7e:fc:f1:e4:59:8a:da:18:85:44:75:3e:aa:66:80:e0:8b:28:
         8f:f2:0b:f1:c0:7e:09:14:2a:f3:0c:d8:71:51:cd:84:47:bb:
         58:f6:29:69:7b:e0:33:a3:c6:4f:da:f1:a0:65:dd:82:0d:d7:
         d4:5c:07:2f:0a:36:38:08:b9:88:24:fb:9f:d5:47:72:18:1d:
         38:e3:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:11 2026 by rpki-client