Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File:                     6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier:          07mtToLO6UnZvCpqd543AsYDrupLKdOU1IouXbhP24M=
Subject key identifier:   C8:6B:1E:5F:67:17:4D:FC:B9:7F:F1:C9:45:33:5E:F6:EB:73:D8:8E
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer:       /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial:       01A0675BD1148D1FB4B21865078136150ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number:          0D35
Signing time:             Thu 03 Sep 2026 13:01:05 +0000
Manifest this update:     Thu 03 Sep 2026 13:01:05 +0000
Manifest next update:     Fri 04 Sep 2026 13:01:05 +0000
Files and hashes:         1: 3emAWx4CwUjXTOlu3eGRcP8exk4.roa (hash: 7JNrYxT9p1XVXRMuxvNlwu6pjAnS2skjIUjy7zyVGNM=)
                          2: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: /gIafQ/pv7KQNgF/MMHgQ2GNfkicjQy9h1LanRM9yXc=)
                          3: 7JG0wgwc3Ipwz7qhWdtjieS8I-g.roa (hash: Bf31ERPASMZUPsJ1JNVT6s0KlXLHtYfNo3YFwAiIYd0=)
                          4: M0-zibw8figUEualVbAK_qKKn7I.roa (hash: Z5xGisw/jnK6aZVp7vDDb87cHHqmNXG4qfj0M/Do+gA=)
                          5: dGWFlJ7W7KgxmoQieTtE38uohEE.roa (hash: lbkU01uoBxNDRnB1JfGRWbHlYxb03RF1Vm6tXomt19A=)
                          6: lP0ykif50yA8AG9VfJnhqGB_mS8.roa (hash: ytE6dcjHno16teNpTqPF9DCN/rBWfa+d3ChvXPOe6JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:5b:d1:14:8d:1f:b4:b2:18:65:07:81:36:15:0a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
        Validity
            Not Before: Sep  3 13:01:05 2026 GMT
            Not After : Sep  4 13:01:05 2026 GMT
        Subject: CN=c86b1e5f67174dfcb97ff1c945335ef6eb73d88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:37:ac:3d:59:08:f8:d2:4b:8e:5e:d7:ae:
                    e2:e9:41:e0:79:e1:cf:53:ab:e2:1c:e2:eb:81:53:
                    86:64:44:f6:10:09:95:9c:a0:bf:13:bd:66:dd:f9:
                    5f:f4:77:31:6b:90:48:3b:bd:0b:83:7b:57:98:ba:
                    31:df:4e:56:ef:49:1b:0e:b0:f7:72:53:2e:33:0b:
                    73:dd:9e:f1:27:40:a7:6b:31:87:08:6e:c3:3a:79:
                    44:09:26:f0:e9:ee:21:1b:b1:13:cb:6a:52:ab:40:
                    e5:f2:72:e5:ec:64:8c:97:62:84:67:71:fe:0c:b0:
                    ff:f0:7c:48:41:af:a5:4e:fd:e9:ac:7e:eb:72:ba:
                    93:af:97:ad:36:bc:bc:8b:1b:5e:dd:23:06:90:ff:
                    da:22:5c:0d:4a:cd:04:a2:ec:b1:51:49:89:f5:66:
                    1f:95:53:f4:b8:e7:f4:c3:2f:06:bc:54:43:7e:c0:
                    76:38:ea:8b:73:d8:5f:e1:59:ac:c2:cb:c5:e4:90:
                    9f:fc:36:02:ea:34:d3:0a:ab:9b:31:02:ba:e3:57:
                    d7:33:e7:e7:76:7b:b5:04:7b:58:40:70:ca:b1:c7:
                    ae:3a:27:08:da:a3:f4:09:df:7d:5b:fe:34:c4:56:
                    63:0c:20:0a:db:ac:04:ce:de:1b:40:41:30:52:56:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6B:1E:5F:67:17:4D:FC:B9:7F:F1:C9:45:33:5E:F6:EB:73:D8:8E
            X509v3 Authority Key Identifier:
                keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:95:fe:da:f4:99:14:ba:ff:03:3a:12:ec:65:c9:6a:0b:f0:
         ac:9a:0f:08:ef:07:f2:9b:69:87:5e:c9:25:d9:fe:e2:d0:39:
         31:e3:5d:ad:55:20:fb:ba:48:c6:6f:a1:f1:f1:c7:9b:98:e3:
         d2:7d:2a:b5:91:8b:1e:95:84:59:aa:f7:45:d7:ea:9e:20:fa:
         93:9b:24:ef:3e:0a:d0:f6:c5:e8:f9:cf:47:88:91:be:98:46:
         cd:60:15:98:14:21:eb:80:e3:10:d6:c7:7c:17:5c:4f:64:20:
         ef:b7:b3:ab:92:08:58:82:a0:df:63:8b:ff:cf:70:26:df:16:
         1e:c4:3e:84:cb:00:ec:1d:cf:41:60:b0:1a:a9:e9:67:de:72:
         3d:70:3b:cc:d1:98:0e:e3:c4:1b:e2:cb:94:3d:3f:12:5f:6e:
         f5:a4:de:4a:76:5e:3c:9c:05:54:ea:7d:e0:23:0f:e3:aa:43:
         c6:f1:ec:ac:0f:3d:e4:3a:4d:a9:13:27:74:84:96:bc:ae:85:
         ea:08:ef:80:84:bf:7f:03:da:59:69:98:4f:10:14:96:53:93:
         9d:51:b5:5f:9a:93:ee:b5:13:a0:89:1b:71:f6:e8:00:f3:27:
         42:e7:45:ec:01:d7:d0:1c:bd:21:85:95:76:ac:12:37:8c:11:
         43:65:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:42:45 2026 by rpki-client