Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
File:                     6UUBLq3IWU41GvpoVrw6GUsliH8.mft (raw, json)
Hash identifier:          rF1fWT2typVl4d4WDbSybwcrkcKr0UwJiT0ipoZDbL0=
Subject key identifier:   44:AE:82:6C:43:06:CF:C5:3F:0F:37:81:E5:E4:96:FC:3B:EF:62:71
Authority key identifier: E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
Certificate issuer:       /CN=e945012eadc8594e351afa6856bc3a194b25887f
Certificate serial:       01A08B9EC45414ADCCCDEB18AA2F64D86495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
Manifest number:          98
Signing time:             Thu 10 Sep 2026 14:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:32 +0000
Files and hashes:         1: 6UUBLq3IWU41GvpoVrw6GUsliH8.crl (hash: mVsNnEo5unZ01TJbYg0NrCJdA+ILS+wbSaj8utI8mrY=)
                          2: u6bPPDorwS9CKClEUNjksXyri0o.roa (hash: gLQa9Qy9OIBwLL9zfXE5Kk8EtYZV+dhDzjKvcFTXDYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:c4:54:14:ad:cc:cd:eb:18:aa:2f:64:d8:64:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945012eadc8594e351afa6856bc3a194b25887f
        Validity
            Not Before: Sep 10 14:00:32 2026 GMT
            Not After : Sep 11 14:00:32 2026 GMT
        Subject: CN=44ae826c4306cfc53f0f3781e5e496fc3bef6271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:3f:9c:6c:40:22:e1:fd:33:c5:8e:5c:1f:
                    f8:ee:22:85:e7:00:85:5b:3c:d5:08:97:b9:6f:8a:
                    e7:51:b1:0a:33:e2:71:02:35:e2:74:a9:71:3d:56:
                    6e:96:0f:fc:03:8a:bd:1e:d3:48:00:92:1b:8c:0e:
                    2e:46:73:4b:40:40:cd:b9:3f:53:dc:7a:d6:2d:37:
                    9f:51:b0:d2:1b:61:68:6a:27:47:52:a9:f4:17:14:
                    9d:e1:a5:a9:c7:9d:23:99:56:f8:c0:f5:88:fd:13:
                    96:5d:05:f3:bb:34:95:fd:f5:08:ab:a7:68:29:a4:
                    0b:a7:eb:bd:05:35:25:bb:74:9a:90:d9:6f:4b:dc:
                    82:f1:79:0f:2b:1e:3b:66:b7:a3:7b:39:d5:dd:67:
                    ea:f8:a3:a0:9c:be:0f:ea:4d:e5:6f:2a:a6:b9:d8:
                    fd:97:32:ba:f0:47:0f:5e:ee:02:d3:cf:b7:95:c2:
                    4d:82:31:bc:f8:a1:0f:36:3e:ae:c4:6c:36:8a:ed:
                    b5:f5:05:33:44:eb:cb:12:1c:a2:95:36:73:3a:65:
                    f8:b2:2a:18:08:01:1d:06:76:82:e9:ac:51:be:a7:
                    84:02:b3:a4:54:d8:cc:08:4d:1b:68:bf:4d:33:a1:
                    e6:28:ac:0b:e6:0a:d6:d7:98:d7:2f:f7:b4:d1:22:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AE:82:6C:43:06:CF:C5:3F:0F:37:81:E5:E4:96:FC:3B:EF:62:71
            X509v3 Authority Key Identifier:
                keyid:E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e3:91:a1:dd:66:b3:7a:ed:35:97:1c:61:52:18:4f:60:5d:
         d4:26:55:fa:d5:dd:21:1c:fc:77:27:6e:6a:0a:b5:76:6f:e1:
         6a:9d:67:13:f3:27:3d:8b:26:5b:fc:19:75:7b:27:9c:7f:ce:
         46:72:5b:3e:54:25:06:e1:df:14:2c:74:6e:42:9f:d1:8c:c5:
         9f:77:62:0d:dc:c2:bc:91:b0:bd:49:3e:ab:25:e6:1b:fa:a1:
         ef:cd:02:0f:6b:9b:72:f8:20:ea:72:c3:cf:e2:f8:85:aa:57:
         fe:a0:ef:bf:0e:e4:59:66:c1:a4:05:ae:64:fa:9d:cd:d1:37:
         93:e1:d5:e6:eb:d8:56:b4:e2:33:7c:21:7a:63:86:57:7c:31:
         51:97:75:15:85:53:f2:49:fe:97:db:b4:6e:41:68:4b:e2:b3:
         06:f2:4c:bd:5f:61:cf:f5:89:43:1f:e9:65:d7:35:79:03:77:
         8f:ee:23:52:f8:a3:6e:99:84:ec:42:c2:ae:64:23:b0:ad:77:
         00:e3:09:f9:ae:80:db:cc:4a:e9:75:8d:a0:2b:ba:da:c2:8d:
         f6:fb:52:fc:5d:7e:15:9e:5b:99:52:4c:19:99:79:24:9c:7d:
         45:8d:96:0f:1c:73:ff:cd:5c:d0:08:82:bd:9d:79:cb:b2:3c:
         e6:4c:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:41 2026 by rpki-client