Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File:                     6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier:          CtF9fGmJLGBsMsEJWwU0aFX3Ye3AVVswDtYmunnPzWo=
Subject key identifier:   F1:DB:C4:F1:90:D9:18:FB:30:13:EE:BF:C6:0A:AC:AE:67:35:86:AB
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer:       /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial:       01A17A04250A05B6FEAD002CF96F4FBE67D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number:          05C9
Signing time:             Mon 26 Oct 2026 21:00:54 +0000
Manifest this update:     Mon 26 Oct 2026 21:00:54 +0000
Manifest next update:     Tue 27 Oct 2026 21:00:54 +0000
Files and hashes:         1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: 2tTinV8f4PB4RxbmT1ONviushVI5smegUNEqFCn4BjE=)
                          2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:04:25:0a:05:b6:fe:ad:00:2c:f9:6f:4f:be:67:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
        Validity
            Not Before: Oct 26 21:00:54 2026 GMT
            Not After : Oct 27 21:00:54 2026 GMT
        Subject: CN=f1dbc4f190d918fb3013eebfc60aacae673586ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:e7:b7:5c:fd:34:7b:1c:42:94:7e:72:67:
                    48:40:39:b4:fc:a2:4e:bf:72:88:e2:05:59:d0:66:
                    87:10:ef:0f:30:4b:e8:c0:ff:ca:ad:51:60:7b:85:
                    86:45:cf:fd:01:8a:aa:2a:1b:77:f1:d1:24:ea:98:
                    e0:94:97:ba:6e:4f:20:df:32:3d:75:36:4b:fd:3d:
                    0b:29:2e:e9:ce:2d:73:4e:b1:c9:59:ff:4e:51:af:
                    ef:54:14:17:20:d0:8c:47:a2:7a:49:ea:e8:e1:3e:
                    06:2f:6b:00:ce:94:8b:36:6b:7b:98:e5:da:90:14:
                    bb:b0:55:71:07:a1:91:55:da:c5:fa:4c:f2:90:79:
                    76:7c:f1:8d:00:f4:f7:07:e8:23:b3:a5:93:65:18:
                    8f:e9:5e:d7:be:a7:f0:55:3a:ee:79:5b:ee:26:10:
                    fc:86:5e:24:a2:d8:7a:c9:63:a5:8a:15:cc:84:a6:
                    56:48:8f:c9:ee:a0:22:04:8d:19:18:c8:cf:28:6e:
                    69:ba:6f:f4:a5:0e:fe:db:eb:68:46:47:2b:89:e5:
                    a7:d4:31:46:bf:5d:85:24:e9:ff:ff:74:1c:8e:8b:
                    d2:a4:66:bc:a8:68:b8:40:a6:41:3c:cc:ea:de:fb:
                    e5:21:2e:61:c8:dc:41:d0:a3:26:e8:38:6a:5b:ce:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DB:C4:F1:90:D9:18:FB:30:13:EE:BF:C6:0A:AC:AE:67:35:86:AB
            X509v3 Authority Key Identifier:
                keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:0b:4f:71:dc:20:c0:27:0b:83:b8:d0:a7:cf:51:05:ef:
         61:13:0f:4c:d1:89:b7:90:f4:a1:2f:d5:f7:a3:72:d8:79:ae:
         8d:1e:8f:a4:4c:31:80:9c:62:dd:7e:34:76:bf:51:f0:1d:d9:
         60:97:99:93:17:39:95:d8:6a:5d:d5:0c:4b:58:a3:44:56:2f:
         67:a4:d0:5d:7d:93:81:53:75:53:e6:17:c2:1c:d6:94:11:83:
         d2:50:f7:bb:11:28:f5:b3:d0:c8:f2:b6:19:f9:4e:34:0b:83:
         60:99:b3:50:61:fc:fe:cf:84:09:22:14:61:53:0a:2d:73:a4:
         14:79:1b:1c:e0:36:99:27:ff:e1:55:be:9d:07:9f:29:fe:6c:
         91:22:91:82:56:b9:f5:79:bb:7a:c7:b2:96:bb:19:0c:18:ef:
         fa:7c:51:87:2e:d1:67:e8:ce:06:bc:d0:41:e2:1d:01:b2:d7:
         09:2e:34:2f:a4:e9:5a:0b:77:23:5f:de:d1:1f:35:a9:d9:6a:
         03:33:38:be:3d:45:12:f8:9b:53:fd:6d:96:07:14:56:5e:18:
         8b:3c:ad:e0:77:52:69:bf:9a:ac:f9:89:56:ea:be:b3:cc:0d:
         d7:01:e8:79:ee:54:b7:36:06:ff:4c:2e:d8:4b:7b:3f:a5:c2:
         9b:ec:97:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:14 2026 by rpki-client