Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
File:                     6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft (raw, json)
Hash identifier:          A1/maxADdNMMUp8OzFVXmk+6wAF0QNxac9W282DYxIM=
Subject key identifier:   BA:56:16:F4:F8:EA:26:C1:AA:D0:FF:97:60:D5:2E:C2:32:4C:40:09
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Certificate issuer:       /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial:       01A111BC6525413DE471484871B08107487D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
Manifest number:          0E21
Signing time:             Tue 06 Oct 2026 15:02:01 +0000
Manifest this update:     Tue 06 Oct 2026 15:02:01 +0000
Manifest next update:     Wed 07 Oct 2026 15:02:01 +0000
Files and hashes:         1: 0_Mtz0SJn_Q1_qJIY7U2X30pxFc.roa (hash: JhAJBfefubEnCZzBggi2Jk8wcWB1kEHwdaXxGQiW+fE=)
                          2: 3sTjhtSCdCFjlXPH6zWP0eR8GzM.roa (hash: t9fVvDqY3mce+uPHAt2yf14UXNM0S2u2Yxz2zd88g9Y=)
                          3: 6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl (hash: Iz0bTk7aY+nNG5aIgovn14MRf2X7HswqzoAJF+E101k=)
                          4: KQP5UFzlwh34mQhk2uGuD-kC2tM.roa (hash: aZJt9+sSUYrWvyxQEYZgSZv+R3XEe1+eoGHJYCXBrBo=)
                          5: MmdMYdnFGKAQaaW-EpV_KukZOwg.roa (hash: Jeo+yHcPo3neOn3MMjFI/0H7ghQVonj3u6f1BlhM4RE=)
                          6: OvLceknpF7Ust4dohXHWTvFfxXQ.roa (hash: MU6UFaguqe6PrH6/Uy9nW9MU7YtJmW+UWWM7KB2psMM=)
                          7: Q3k98zZGrjbWpN4fBm2hOrOvAsM.roa (hash: deEukkANp5TJItkgPRqHeGc4iFyBMtaGTMURlNpHHKY=)
                          8: WUQrr_4ErwTyokIEksE5ipDNF2Y.roa (hash: IBd7pbChaAcJbC+ej8XSxTMwsER0dU7akkgBcvjAl3U=)
                          9: fisZpLjzN8rjoisMM1L1Tcj9U_A.roa (hash: wu7MbMVzXtW8jNgKqD+S18VYIebPX70/c4BvEmCGAnA=)
                          10: zDbXBWuUtJNusqOvbCndBNN80Io.roa (hash: 7Lbj5BCGj2t7KPfgPi+9t9ReOGx4VQdMsoCL0ryz/pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bc:65:25:41:3d:e4:71:48:48:71:b0:81:07:48:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
        Validity
            Not Before: Oct  6 15:02:01 2026 GMT
            Not After : Oct  7 15:02:01 2026 GMT
        Subject: CN=ba5616f4f8ea26c1aad0ff9760d52ec2324c4009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:a0:6a:52:bc:b0:61:28:7c:c5:25:4f:c7:
                    bc:58:e8:2e:68:64:71:d5:27:7c:71:31:45:77:a0:
                    ad:ca:9d:1b:86:41:a0:d4:c3:8a:19:25:10:ab:3a:
                    4e:5f:7d:d0:48:2a:66:69:45:6c:79:72:83:d4:16:
                    49:ae:54:7e:a6:09:b8:23:e4:be:9d:30:6b:06:f1:
                    2c:5b:9f:87:ab:05:69:a6:64:50:26:fa:18:d4:c8:
                    c4:67:35:9a:00:56:4a:ae:8c:a0:25:60:9e:fe:fd:
                    53:4f:fe:27:60:2d:be:e3:f5:f8:78:60:93:cd:f3:
                    c3:b5:16:0f:0d:75:25:fe:e7:b7:4b:b5:9e:b8:20:
                    fb:a2:73:8c:2f:53:fa:1e:84:e6:e6:1a:24:13:f5:
                    d2:cc:c4:94:55:c1:66:38:5f:e8:38:49:c7:4b:d0:
                    c4:13:0d:26:1e:08:d8:ad:4a:0e:7d:8a:b7:c7:7d:
                    db:2a:2e:f9:cb:2b:04:8a:d7:ae:ad:21:b5:27:69:
                    45:f9:b1:07:a0:ef:9c:23:90:39:9e:1f:c1:25:96:
                    2d:d3:3b:d6:ee:10:83:04:07:a9:c8:96:87:a5:50:
                    7d:27:c6:88:3b:0f:84:c1:10:6c:ab:a3:7e:49:3d:
                    e5:d4:c5:7e:e6:46:97:6f:86:ed:a7:b1:76:38:c5:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:56:16:F4:F8:EA:26:C1:AA:D0:FF:97:60:D5:2E:C2:32:4C:40:09
            X509v3 Authority Key Identifier:
                keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:a8:59:b9:c5:63:52:e5:d8:17:04:ad:4d:63:f7:64:1e:
         78:24:b7:45:1f:bd:54:ec:2d:90:5a:c2:ab:b3:ff:85:e1:d7:
         00:0b:6d:a2:6e:72:d0:b5:38:88:fa:2c:f2:1a:27:48:2e:19:
         93:28:82:93:f7:86:0f:00:d1:1a:cc:70:2d:f4:cc:16:b0:b4:
         77:1c:96:9f:6d:40:84:37:79:04:a7:af:b6:f0:34:98:a5:1b:
         dd:ae:36:46:c1:cd:07:1f:1d:58:5b:c0:ea:4c:94:64:0c:37:
         65:81:23:35:a9:04:19:da:16:21:2e:9a:b1:02:c1:f9:e9:82:
         34:ee:34:db:86:35:70:c4:e0:89:4b:f2:fe:78:c1:eb:39:54:
         3f:a7:03:6f:c1:ea:39:00:80:d0:3c:d8:cd:7d:8c:88:96:bc:
         a1:88:10:1e:15:6f:d1:08:06:04:79:bc:b4:3a:89:bc:7a:0b:
         2a:8b:a3:b0:a2:ef:26:78:00:c8:4d:6f:d3:31:52:c8:66:68:
         44:c8:7f:04:f3:10:ac:fd:31:51:e0:c8:cc:b5:63:65:4e:e9:
         27:57:37:18:64:81:b5:cd:a0:33:ff:c8:25:64:1e:f7:7c:3b:
         ad:82:f6:23:0d:79:3e:f1:fb:4f:b0:37:75:45:35:f0:53:07:
         dd:23:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:02:55 2026 by rpki-client