Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft
File:                     6yf9aphL6LGRNkvsjsU43aTRB8A.mft (raw, json)
Hash identifier:          gaQDP5fNKH+fXOjHh2c47QPjQYwJAPtLNzeNy+u6FRk=
Subject key identifier:   31:C1:D3:87:F3:BF:02:C3:0E:56:40:A6:21:C1:F4:1F:D4:4A:DD:D7
Authority key identifier: EB:27:FD:6A:98:4B:E8:B1:91:36:4B:EC:8E:C5:38:DD:A4:D1:07:C0
Certificate issuer:       /CN=eb27fd6a984be8b191364bec8ec538dda4d107c0
Certificate serial:       01A04129D9DB13FA900B0DCAC61D2B929379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:00:56 +0000
Manifest this update:     Thu 27 Aug 2026 03:00:56 +0000
Manifest next update:     Fri 28 Aug 2026 03:00:56 +0000
Files and hashes:         1: 6yf9aphL6LGRNkvsjsU43aTRB8A.crl (hash: sAW7l2qLWZlo+P5l1Yk3x85rkfnq+Ay064YUcE2wV+4=)
                          2: JsCad4FCyfVUBF2WY6yR_DCWBVw.roa (hash: pEHKwoBlBoQLwZMsVB7ZRqvnfjBWmWm2YEzrTvzWI9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:29:d9:db:13:fa:90:0b:0d:ca:c6:1d:2b:92:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb27fd6a984be8b191364bec8ec538dda4d107c0
        Validity
            Not Before: Aug 27 03:00:56 2026 GMT
            Not After : Aug 28 03:00:56 2026 GMT
        Subject: CN=31c1d387f3bf02c30e5640a621c1f41fd44addd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:22:14:43:21:1d:bc:91:3e:ef:27:f3:1c:
                    95:91:1c:bb:9a:2e:7c:16:d8:82:90:6b:36:b6:2c:
                    cf:67:59:ea:03:62:01:09:19:9f:f8:dd:64:b6:77:
                    e8:9c:19:da:20:cf:4c:72:f7:28:59:d5:b0:18:79:
                    bc:0f:af:f9:6c:45:2f:1f:68:bb:6a:ef:df:20:0a:
                    ff:f2:90:97:9e:39:bd:66:36:b1:77:6c:60:ae:e9:
                    92:0f:36:d5:a9:0e:c9:79:d9:c7:1f:9d:39:6f:c1:
                    50:3a:ba:9b:e2:98:25:13:cf:e2:55:0f:33:76:d8:
                    e4:95:d0:80:a4:4c:29:93:8d:c1:18:65:ca:84:00:
                    c9:20:7d:5a:b1:05:9c:cc:49:f6:89:23:c1:2a:24:
                    bc:8e:23:73:19:c0:54:8a:78:e3:0d:7f:8e:e3:25:
                    a4:06:54:e9:dd:25:f1:2d:19:b8:aa:99:35:97:c0:
                    9e:17:5b:00:87:77:4b:34:28:59:d6:cc:4e:13:e5:
                    ad:ed:65:9e:26:b8:2f:53:00:97:ff:c6:98:ba:98:
                    ee:4a:c1:b8:2f:5f:25:75:67:80:b5:26:f1:95:d2:
                    62:8e:3e:5a:54:91:61:d1:af:bd:7d:4c:3b:22:e9:
                    46:65:08:a2:da:2c:0d:ef:59:3b:74:71:92:62:aa:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:D3:87:F3:BF:02:C3:0E:56:40:A6:21:C1:F4:1F:D4:4A:DD:D7
            X509v3 Authority Key Identifier:
                keyid:EB:27:FD:6A:98:4B:E8:B1:91:36:4B:EC:8E:C5:38:DD:A4:D1:07:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:15:8b:c1:90:48:82:9d:2f:bf:c0:45:73:37:11:bd:33:52:
         19:d6:00:78:db:32:8a:37:1f:3b:fa:08:8b:3e:a4:17:63:d5:
         4a:a4:16:39:9e:25:7b:57:4f:66:53:90:6c:a5:59:5b:7c:77:
         35:a6:57:c2:e2:c1:80:d6:89:4b:00:61:13:ee:4d:6d:a2:09:
         cf:7c:47:73:44:79:39:ca:50:cf:d0:6d:09:2c:b1:1e:ab:d7:
         64:c0:aa:3d:f1:6e:61:37:7e:a4:58:27:2d:13:2a:5f:bb:d5:
         2c:99:ec:57:09:f3:47:69:36:fc:a6:92:8d:82:ad:88:d5:68:
         d8:b8:ff:9f:a7:07:90:9c:e5:8a:41:06:b6:79:91:b3:07:9b:
         7b:d3:03:8b:60:4e:4a:34:de:a2:52:63:df:34:95:a6:f3:57:
         ed:cf:20:4a:ce:ed:38:83:09:3c:da:1c:df:46:32:a6:38:43:
         90:66:39:39:4b:84:fe:6d:62:d1:5a:66:1e:8a:72:75:e8:38:
         d5:21:3b:e1:ca:c2:06:73:3b:13:34:66:22:6b:80:db:b1:71:
         d0:d9:03:81:54:e1:b8:b2:47:2f:0a:fe:86:8e:2d:5c:ea:98:
         0e:cf:61:ae:51:39:83:e7:2d:bb:13:63:41:52:eb:18:ab:e5:
         47:2a:f0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:26:20 2026 by rpki-client