Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
File:                     S6fJoMZPbB33LdgBBdDmNvPDoC0.mft (raw, json)
Hash identifier:          uzYHkBxtykZcPB0MCJgJffmS9iWUOE5qZeKJInQNKxM=
Subject key identifier:   DA:CF:8C:7C:36:B0:3B:D7:F0:86:65:7A:DA:5A:74:14:8A:7B:13:90
Authority key identifier: 4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D
Certificate issuer:       /CN=4ba7c9a0c64f6c1df72dd80105d0e636f3c3a02d
Certificate serial:       01A14D99C55D45DF1266D68D8288839338FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
Manifest number:          79
Signing time:             Sun 18 Oct 2026 06:01:25 +0000
Manifest this update:     Sun 18 Oct 2026 06:01:25 +0000
Manifest next update:     Mon 19 Oct 2026 06:01:25 +0000
Files and hashes:         1: 2ocJnrKYRe3zKZci6rQMXjSGrqI.roa (hash: 9Ph1zNpQRXznlTIJmQawq72adyHVEEo9MJswFzGJ9NM=)
                          2: S6fJoMZPbB33LdgBBdDmNvPDoC0.crl (hash: LrTSVXpzai6DH8RfxbiEFeZYaSKogKuyBRdjI0ulqPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:99:c5:5d:45:df:12:66:d6:8d:82:88:83:93:38:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7c9a0c64f6c1df72dd80105d0e636f3c3a02d
        Validity
            Not Before: Oct 18 06:01:25 2026 GMT
            Not After : Oct 19 06:01:25 2026 GMT
        Subject: CN=dacf8c7c36b03bd7f086657ada5a74148a7b1390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:4a:e4:2f:3f:44:e6:f7:5a:29:3a:6f:b1:
                    97:31:36:e5:46:d8:6b:7a:47:68:4a:95:3c:ad:cb:
                    06:ba:28:25:69:80:e5:9c:69:9e:33:14:ae:59:ca:
                    d9:bd:93:6c:2e:5c:a8:59:98:66:50:65:76:96:bd:
                    9c:1a:61:99:0a:25:8b:9a:31:8c:69:2a:82:86:d3:
                    c0:21:ab:10:6d:7d:1c:e8:34:0f:e0:02:73:a5:1e:
                    f9:36:8f:24:27:9a:76:88:97:f3:57:24:b9:8d:42:
                    64:3c:fd:e7:5f:c2:67:e8:97:eb:a0:f6:bf:22:f9:
                    5d:35:de:1d:41:58:2b:87:0a:81:66:0f:23:bf:a1:
                    29:23:43:b2:1e:d7:df:ad:23:13:52:7e:e6:c9:bf:
                    12:4c:f8:e3:77:8a:af:c1:e8:60:2e:e1:6f:eb:e2:
                    86:f8:d9:2e:a6:e5:0b:2a:ee:e3:3e:eb:4f:6d:1a:
                    f2:4b:d7:00:04:bf:05:d4:98:2c:25:76:49:7c:bd:
                    52:c8:ad:61:33:40:28:b3:db:3f:21:59:54:09:31:
                    a0:c6:4e:99:e7:2f:01:f2:c3:72:83:31:fa:a5:be:
                    39:db:30:4a:86:88:02:ad:65:c3:f1:83:ec:96:1f:
                    28:13:dc:40:54:06:d0:a3:59:10:4f:17:68:11:16:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CF:8C:7C:36:B0:3B:D7:F0:86:65:7A:DA:5A:74:14:8A:7B:13:90
            X509v3 Authority Key Identifier:
                keyid:4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:4f:25:b2:17:e5:0b:74:6c:76:4b:97:9c:4b:11:33:eb:
         d8:b1:92:65:85:a6:f1:cb:b3:da:c7:d9:c9:e7:3f:da:64:64:
         96:99:38:2f:d6:35:0c:a6:59:aa:cc:32:45:2d:a4:3c:f4:54:
         8a:ab:d9:84:7a:d9:f4:bc:e1:cb:07:fd:42:43:e9:f5:b4:93:
         0a:f6:0e:1b:c1:08:f3:74:02:7e:9a:dd:c2:8f:e1:c7:05:9a:
         2d:d8:69:55:92:bf:6b:46:a3:f4:20:db:60:e1:7a:f5:52:ae:
         5e:0f:13:c7:b9:6f:1b:71:12:c9:06:b4:d8:3a:2e:5c:02:a4:
         46:ed:43:79:ad:98:02:97:df:6f:af:d4:35:84:09:30:d7:52:
         0b:44:14:6c:f5:bc:42:5c:81:fa:ff:00:80:c0:1b:0d:28:5f:
         78:3d:c0:68:53:84:4a:dc:91:ce:e0:e5:de:cc:60:d9:90:82:
         04:35:d5:af:e8:e7:95:bd:62:27:44:fa:61:59:18:41:0f:b2:
         b9:46:c7:e1:5c:b9:20:af:0f:15:19:b4:c6:47:e8:a6:74:ac:
         98:c6:a5:ab:b4:97:31:ef:18:d3:d2:5b:e4:5f:66:53:a1:a9:
         41:5f:58:ae:79:e2:8b:c4:ff:75:02:f4:fc:b6:1c:d7:ef:ea:
         5f:ed:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:01:17 2026 by rpki-client