Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File:                     jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier:          TNwJZkYpUGHkNVp/fawKKOZF28Ixcrz9iAZGuUYnV+Y=
Subject key identifier:   84:F8:72:14:12:25:A1:6D:9C:DB:F1:D4:9C:39:B8:E8:0A:55:F4:96
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer:       /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial:       01A08C0CA2C477B6521FC95C3380181437D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number:          06E6
Signing time:             Thu 10 Sep 2026 16:00:33 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:33 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:33 +0000
Files and hashes:         1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: MidgwQpns0RZ80CqzgbCkKZQ2iOnzkR2osBr1o+pBB8=)
                          2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:a2:c4:77:b6:52:1f:c9:5c:33:80:18:14:37:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
        Validity
            Not Before: Sep 10 16:00:33 2026 GMT
            Not After : Sep 11 16:00:33 2026 GMT
        Subject: CN=84f872141225a16d9cdbf1d49c39b8e80a55f496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8a:d5:58:72:3e:70:23:61:e9:33:4e:0a:f6:
                    5a:7a:ce:76:89:15:1f:dc:07:50:55:d8:6a:cc:04:
                    9d:44:f4:43:06:51:a8:07:28:7b:ae:0b:06:77:74:
                    3b:cd:d0:1f:18:58:77:f7:58:cc:6d:99:d7:65:9b:
                    15:9b:5b:a5:d9:c9:4a:b4:81:fb:6a:74:ed:f1:11:
                    7c:aa:48:b2:46:4c:e6:81:ac:cb:9e:9e:96:f2:81:
                    2d:86:6b:55:6c:b3:78:e0:e8:fc:42:7a:b4:f8:40:
                    bc:f8:2f:54:1e:97:2c:84:1e:ad:46:45:fe:51:31:
                    00:2b:04:14:bf:3c:42:b2:3a:e9:a9:82:08:a3:3e:
                    a4:39:d4:7a:5d:00:e5:0e:3e:5c:c4:bc:33:de:be:
                    d7:d2:47:ee:7a:be:f5:e4:fb:a2:9d:d6:da:5d:2f:
                    ac:81:6f:6e:1d:f9:d3:3a:b4:ee:87:2f:1e:2e:76:
                    b4:de:ca:86:1c:d2:b9:a2:33:d8:d4:3e:27:d0:15:
                    77:fc:7b:59:3d:e9:0e:25:85:4b:b0:b0:72:d1:5a:
                    dd:9f:90:bc:3b:a4:64:04:af:5d:57:a0:4f:92:dd:
                    9d:55:d3:ae:03:c3:84:45:ec:96:1b:1c:34:03:f3:
                    1d:25:9a:35:1d:fe:ab:85:c3:b2:c6:9a:98:71:71:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F8:72:14:12:25:A1:6D:9C:DB:F1:D4:9C:39:B8:E8:0A:55:F4:96
            X509v3 Authority Key Identifier:
                keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:39:b1:7f:17:6b:d2:4c:a5:e4:fe:52:ee:37:43:cf:b2:3d:
         07:c3:da:d3:88:22:5b:d7:e7:98:62:b9:7e:7d:b6:bd:ac:2d:
         23:4c:b3:5f:fa:ce:30:66:dc:97:0b:4c:31:aa:6c:c2:2d:ec:
         9c:dc:6e:e8:01:8a:44:e0:3f:dc:a3:b6:e2:8c:e5:f9:5c:9c:
         60:2d:03:c4:88:f9:ce:7a:66:3a:30:54:59:ba:8a:f1:02:e0:
         0d:7a:7b:df:88:38:3c:13:a0:0a:15:b8:ef:62:7b:07:7d:58:
         ba:70:88:48:7f:fb:b2:69:9a:2f:b7:d1:36:8d:4e:b4:cd:28:
         6c:a5:bf:56:e3:ba:bd:ca:43:e6:98:9d:73:e0:92:ed:35:e1:
         1f:42:5f:ea:5a:ea:6b:d1:09:a3:80:c6:e1:aa:11:66:59:02:
         37:96:8d:9b:04:4f:21:95:27:90:53:9b:62:67:56:21:78:ad:
         b8:07:43:ad:36:2a:1b:a5:c5:f4:3b:65:7b:dc:93:c2:a0:26:
         79:14:e6:bd:d4:61:e1:27:9d:e0:d2:a0:59:6b:47:aa:45:52:
         e7:54:7a:dc:0f:c6:f2:fd:09:31:c9:c0:86:a3:7d:d1:c1:fa:
         07:92:52:12:86:e6:be:27:8b:cb:31:c6:cc:f2:e9:03:77:15:
         d3:84:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:03:42 2026 by rpki-client