Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          jXabZa6pT04PLl0ieT4QcWqGh+BvDb4zCS+y3i/KsIk=
Subject key identifier:   B4:F7:1D:F1:74:FA:71:D5:68:C6:17:62:EE:4F:8F:A4:08:EA:BB:3C
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       01A13F708AB8DBF3DF1CEAA374194BBDE1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          1A37
Signing time:             Thu 15 Oct 2026 12:01:42 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:42 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:42 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: d0X2VOkHWfCoJv0O3myq44Ogur5gJ8SQF/OwrMJ1uMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:8a:b8:db:f3:df:1c:ea:a3:74:19:4b:bd:e1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Oct 15 12:01:42 2026 GMT
            Not After : Oct 16 12:01:42 2026 GMT
        Subject: CN=b4f71df174fa71d568c61762ee4f8fa408eabb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:28:4c:b3:08:19:ee:23:f2:67:c9:09:f1:
                    78:20:78:e2:23:9d:ce:81:2b:b4:09:b6:5b:40:3e:
                    42:9f:ad:d6:7d:0b:87:e6:f2:2f:eb:e2:b0:8a:7a:
                    93:4b:98:19:95:be:64:cf:7c:2c:59:60:c3:b3:d2:
                    c2:28:e8:ad:43:40:83:48:99:60:17:ba:f8:91:0d:
                    77:d1:f8:38:45:46:fb:21:09:a7:1d:aa:2a:2b:ea:
                    ec:dd:8c:8f:5d:bc:94:91:6d:e5:a5:b5:69:60:45:
                    51:dd:82:27:d9:18:4d:c3:b7:02:e7:30:3e:54:eb:
                    23:0d:6a:dc:20:c0:35:cd:12:59:98:63:89:32:4d:
                    8d:c8:71:ec:3b:b5:a6:ae:c3:24:45:0b:b2:45:56:
                    8a:30:5f:c5:dd:1f:4b:4a:0f:c0:a9:a6:72:80:42:
                    45:bb:0e:56:22:35:28:8b:fa:d3:34:40:43:31:44:
                    e3:71:30:02:0b:6c:34:fd:e7:73:e3:52:95:3b:6f:
                    1a:0d:51:29:a0:bc:65:52:f3:29:02:ae:11:6c:04:
                    9a:4f:4f:6f:f7:76:91:31:aa:c1:03:ee:b2:1f:45:
                    8e:66:65:a2:e2:94:ee:c1:9b:45:53:0e:9a:1f:f1:
                    61:35:fe:a9:3d:2e:29:5d:03:16:20:99:64:7d:cc:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F7:1D:F1:74:FA:71:D5:68:C6:17:62:EE:4F:8F:A4:08:EA:BB:3C
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:c2:f8:70:90:3a:8e:ba:6e:74:09:7b:d1:5f:01:15:a2:
         b7:a4:cb:b7:a9:f4:a0:7d:33:70:a3:12:8b:7b:0f:d2:df:12:
         65:59:8c:05:24:63:11:3d:4b:35:d7:b7:db:dd:ff:48:b9:52:
         a0:3d:74:57:31:15:30:fb:30:c1:ae:20:d5:da:f2:43:2d:86:
         76:8c:4f:6e:6f:d5:93:37:47:03:37:17:fd:c1:1d:8d:c8:68:
         f8:c9:e8:9d:9e:7e:2e:73:f2:72:2d:1e:02:a9:8f:80:f5:40:
         f9:bf:66:37:79:51:f8:e7:73:b4:3d:5c:25:ed:7e:82:25:68:
         64:0b:ba:3b:df:d9:b7:a6:95:82:4d:13:d2:4e:9f:38:b8:eb:
         ad:35:1d:db:f4:df:a4:33:6b:6e:06:5a:9d:d8:e6:b6:a8:67:
         dc:c6:e5:af:24:ff:5a:76:b5:13:41:e4:2c:d9:14:55:3b:12:
         8f:9c:b6:24:29:5f:8c:7e:0c:e6:cb:fb:86:80:e6:f5:b4:b3:
         d1:a8:3a:23:82:ec:f6:9f:fc:3e:38:81:5a:87:7a:fc:2a:22:
         b8:a1:e6:3c:13:b2:88:f9:c7:c5:25:77:91:b4:65:47:0e:b0:
         44:50:e8:d1:dd:78:37:c3:8f:71:c1:a3:46:15:30:23:e4:a1:
         66:cd:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:18 2026 by rpki-client