Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
File:                     MNs1tD7r7J26qD7xjrHv8CPxge0.mft (raw, json)
Hash identifier:          bbyC/uBcMOY3BzfvAem0C+ByjLHmxWXXWWRIiRuTj2E=
Subject key identifier:   6C:B2:F9:6A:83:14:79:18:66:47:24:17:0A:48:43:81:EE:6A:ED:97
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Certificate issuer:       /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial:       01A1DBDCFF8CF0955532B13B93C9AF3F3E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
Manifest number:          D6
Signing time:             Sat 14 Nov 2026 21:00:55 +0000
Manifest this update:     Sat 14 Nov 2026 21:00:55 +0000
Manifest next update:     Sun 15 Nov 2026 21:00:55 +0000
Files and hashes:         1: MNs1tD7r7J26qD7xjrHv8CPxge0.crl (hash: 9v0I2Txq258+Gz3DxZUK4xGLKFfmd7qRUl6ijdMqar0=)
                          2: laQy4Wer-MeK7_ZIFecIrIa3BYE.roa (hash: GIqBZqp8MxiBgUobnm0UVDm8lJqcl76WM/fO2JMPIBI=)
                          3: ojj7MWuR-byapBcCWPFFbQ9xUDE.roa (hash: B/r+JitPLdjn+OZZ1E6DqL9+MTPDYrTKHbUo7Y9Tfvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:dc:ff:8c:f0:95:55:32:b1:3b:93:c9:af:3f:3e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
        Validity
            Not Before: Nov 14 21:00:55 2026 GMT
            Not After : Nov 15 21:00:55 2026 GMT
        Subject: CN=6cb2f96a83147918664724170a484381ee6aed97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:2c:37:ed:a1:4c:8e:eb:e4:c2:6c:f1:4a:
                    ea:ac:90:d2:fb:13:17:b2:c9:ac:76:dd:eb:25:ff:
                    90:e7:21:65:b0:88:18:65:3c:df:75:12:c4:c6:1d:
                    a4:e4:d8:9a:80:3d:9b:4e:98:9d:85:d9:06:54:37:
                    17:a9:6a:c0:a3:5a:25:6b:6f:fb:c1:82:e3:1d:5f:
                    17:5b:19:b9:97:85:0a:15:99:fe:f9:ac:45:89:01:
                    82:03:3d:8d:be:ef:39:88:55:1f:c6:b9:96:0b:77:
                    bb:9f:70:73:de:71:88:46:e6:02:37:50:5f:5f:2c:
                    f3:c4:3f:3e:05:9a:85:6e:f1:1f:67:ec:19:54:87:
                    4b:39:ec:59:cd:1c:f1:ab:3f:d7:e9:b6:b5:40:1d:
                    25:6c:ba:b0:68:76:9f:9d:d2:bf:71:52:d0:c8:af:
                    ae:a6:35:38:bd:a3:24:6a:4b:b6:9f:b1:48:9d:c7:
                    b5:05:17:fc:8e:43:bf:54:c4:7a:ad:0d:15:ec:41:
                    6d:e8:4a:b4:44:74:d6:2b:ba:d6:0e:25:dd:ab:31:
                    ff:57:87:53:d5:04:5f:60:c3:e0:92:01:ca:1f:c7:
                    a8:a0:d1:f9:b3:12:0b:bc:d0:0c:a8:b5:a4:17:04:
                    cd:b2:c6:64:d2:a4:12:dc:49:ba:54:aa:6c:eb:33:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:F9:6A:83:14:79:18:66:47:24:17:0A:48:43:81:EE:6A:ED:97
            X509v3 Authority Key Identifier:
                keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:5b:e4:34:90:78:07:a5:71:bb:b5:06:92:3d:46:f9:e7:4d:
         e0:d8:2e:a6:1f:4e:9e:23:0f:9c:9e:18:c3:30:ae:97:6d:ad:
         53:04:c4:28:20:3e:b8:c1:e2:ed:d0:df:3d:f0:3c:10:6c:fa:
         4a:5e:96:bb:56:c8:81:35:35:c3:f9:65:ed:bb:58:d0:22:12:
         59:90:87:d8:f3:ba:98:b5:90:d9:04:ca:8a:81:f7:bf:12:23:
         78:97:2e:7d:f4:cd:5b:83:2d:ce:69:8c:05:4e:a4:9b:97:3c:
         17:03:70:fe:46:94:59:ca:09:11:76:25:f7:e2:d1:cc:27:23:
         9d:7b:aa:d8:53:31:e1:d4:b2:2d:ff:b2:cc:89:6f:a9:be:bb:
         31:14:29:24:e0:9d:15:aa:b9:0c:5e:93:2f:8d:4e:7f:b0:87:
         b4:b8:52:04:80:09:9a:eb:a2:b4:dc:80:bd:a5:aa:f6:a7:f1:
         09:aa:82:56:5e:21:7d:ef:2d:18:06:3a:f0:8d:26:2f:04:d8:
         ad:43:d7:6f:91:c3:8c:aa:62:4a:a0:d1:ad:f3:9c:26:03:75:
         ad:eb:27:ce:76:bd:52:da:73:9d:b8:66:69:94:0c:da:ab:b9:
         87:18:f0:4d:1b:bf:8a:80:42:6b:76:61:b5:b1:85:86:6c:fa:
         55:5e:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:05:54 2026 by rpki-client