Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
File:                     6SnD2lr0FZyTY3duwz3FuscKMk0.mft (raw, json)
Hash identifier:          sVF18PVdDQ+mEIZs+nm0gS3VQWa5Tv1i41A23jhTn8k=
Subject key identifier:   38:19:2E:25:51:9C:3C:E1:B7:64:B4:BC:C4:3F:FF:DD:A5:BE:E5:75
Authority key identifier: E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
Certificate issuer:       /CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Certificate serial:       01A001019369131CA0AF35C5134B47B55FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
Manifest number:          06A1
Signing time:             Fri 14 Aug 2026 16:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:15 +0000
Files and hashes:         1: 6SnD2lr0FZyTY3duwz3FuscKMk0.crl (hash: yGwNm+OJ7KdGaJbbpLDOdu8/3HjlOXQw6T6GWBziT/0=)
                          2: RMKMFjuIsOF34y_Eoi6mHIhKM8E.roa (hash: jdDMeZqYmQE2irg3itDoUEw04h1lMnJrH0NJa7Heqzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:93:69:13:1c:a0:af:35:c5:13:4b:47:b5:5f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e929c3da5af4159c9363776ec33dc5bac70a324d
        Validity
            Not Before: Aug 14 16:01:15 2026 GMT
            Not After : Aug 15 16:01:15 2026 GMT
        Subject: CN=38192e25519c3ce1b764b4bcc43fffdda5bee575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5f:68:1d:44:37:aa:5e:70:98:d3:28:2e:de:
                    be:4e:6b:51:31:99:f1:44:48:73:d2:b6:10:81:72:
                    d2:31:c4:70:f4:41:a7:b4:ac:3c:fa:50:f0:d8:8e:
                    82:08:3c:16:6a:81:16:be:69:21:ad:ca:e2:99:29:
                    b7:c6:0f:41:f6:7c:75:08:c1:b8:4d:e4:b5:ab:04:
                    80:f6:9b:fc:3f:6b:36:57:f4:8a:86:af:74:2e:3e:
                    da:2f:98:e8:5f:a1:d8:6a:ce:e8:b6:00:0a:7d:7d:
                    96:a7:4a:86:77:a6:d6:de:4f:2b:6b:d2:88:4d:05:
                    7e:6c:52:6a:60:3a:a8:d3:60:41:21:b1:3a:0e:1c:
                    43:d2:69:dd:85:e3:1f:8f:cb:cb:3d:8b:c6:73:c2:
                    bb:81:42:ef:95:14:2b:39:34:52:c0:28:79:ea:51:
                    c9:0f:2f:b2:03:1a:cb:83:a6:db:b9:a2:d0:b7:b0:
                    c4:7e:1a:ea:3c:10:45:1b:70:96:68:89:b9:ef:a0:
                    e8:a7:cd:19:7c:34:ce:d4:d0:2d:3a:ea:7c:36:f2:
                    b7:84:83:3c:4e:50:d0:57:66:c7:dc:a6:87:1e:5e:
                    f8:00:a5:af:ca:5f:26:b8:40:14:dc:e4:29:53:16:
                    39:1a:f8:c8:c7:f3:6b:d0:fd:a6:74:90:14:7a:37:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:19:2E:25:51:9C:3C:E1:B7:64:B4:BC:C4:3F:FF:DD:A5:BE:E5:75
            X509v3 Authority Key Identifier:
                keyid:E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:6d:df:0c:23:0a:3c:1f:11:15:c3:af:2a:a5:86:c3:4d:48:
         61:3d:50:34:22:41:60:9b:82:ab:11:2e:22:8f:e5:8e:a8:ec:
         d6:20:ea:a4:51:46:8e:77:d7:76:cd:68:d8:09:1a:7a:5a:e3:
         98:07:d8:53:91:91:02:96:79:a0:3c:8b:ea:26:47:42:f2:18:
         df:ab:79:fc:6d:14:3b:b7:13:7d:8b:a8:e5:da:bd:c2:67:08:
         82:0f:c9:55:ff:65:98:90:3b:2e:01:37:b7:89:c6:fa:d4:ed:
         ba:0e:85:a7:88:05:24:ad:90:31:db:bf:98:eb:3c:c4:b6:99:
         7b:0a:a5:f4:de:2e:f4:7a:db:70:37:6f:5b:2a:c4:37:a5:db:
         48:9b:61:fa:e6:ba:e8:67:87:8e:34:ff:6d:33:6c:5b:e5:7c:
         01:13:f1:ff:3c:2e:08:20:2b:86:a1:b4:aa:b7:41:55:c3:a8:
         09:ee:c8:72:ec:d4:09:e3:52:b6:fa:16:ca:f4:09:e2:d1:6e:
         c3:4b:57:08:fc:b7:8b:8c:18:fb:dd:7c:28:93:23:8b:67:b3:
         65:4f:5d:95:94:52:7a:6c:98:6e:64:6c:24:93:e4:73:06:d8:
         8c:c6:74:04:7d:25:e4:76:ee:90:56:69:45:2a:28:23:29:25:
         0c:a5:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:30 2026 by rpki-client