Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
File:                     6diA6IcHf62Ct0yZgBD6myU-Dqg.mft (raw, json)
Hash identifier:          ilMg+4BRES1N/JXR9n+pMEz0pQU/Cxj7KxP8T3aGQOg=
Subject key identifier:   86:A6:23:D8:8E:26:75:35:39:E7:9B:DE:7B:2A:36:71:B4:C4:5A:ED
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Certificate issuer:       /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial:       01A0F531963693CB6296DFDE67536150E175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
Manifest number:          1A80
Signing time:             Thu 01 Oct 2026 02:01:02 +0000
Manifest this update:     Thu 01 Oct 2026 02:01:02 +0000
Manifest next update:     Fri 02 Oct 2026 02:01:02 +0000
Files and hashes:         1: 1RM4oPNA5zV8gpBFXwkv_ja9FiQ.roa (hash: CPN5leskj6WSt3dvfwwAxdnUjDWOGaEyTKMTxOxmgto=)
                          2: 6diA6IcHf62Ct0yZgBD6myU-Dqg.crl (hash: GiaHStPn18raudedwQddnKzIJ3L+6W8BtKG1UoUmjdA=)
                          3: WtgMSRP5OEmkxWvX-DhuOQDwMBk.roa (hash: l1AreQt6W2uLe+jTGiT0wGfZWGbfEdoV2rC3OiVwsTw=)
                          4: kjq1O54rStRLxuBF-ybXt7bPUso.roa (hash: d7NKhTPVVN8Gxf/3FcrZ3uTAuZLWMskRPFJRqlThNnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f5:31:96:36:93:cb:62:96:df:de:67:53:61:50:e1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
        Validity
            Not Before: Oct  1 02:01:02 2026 GMT
            Not After : Oct  2 02:01:02 2026 GMT
        Subject: CN=86a623d88e26753539e79bde7b2a3671b4c45aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:d0:d0:98:71:ec:ac:91:25:12:71:06:de:
                    06:31:01:d7:53:ca:26:56:5d:da:e7:7a:b0:45:87:
                    7d:b4:83:59:0f:56:3d:3e:a6:43:ea:92:0a:fe:4a:
                    e3:f2:43:bb:b2:a7:3b:bb:df:48:69:fb:24:61:65:
                    a1:7d:31:ce:00:27:62:b1:a1:08:93:91:bf:c8:22:
                    19:37:35:7c:55:3d:7d:7e:03:94:87:29:ae:37:73:
                    30:cc:49:c1:55:c0:d4:de:e6:80:4c:2c:6e:43:10:
                    c8:88:2f:fe:67:63:c7:6b:81:9e:1e:77:c1:8d:da:
                    4b:e0:ac:d2:a7:43:12:da:43:59:bc:11:37:de:44:
                    48:24:33:5b:52:f6:81:4e:e3:bb:b0:b9:d8:30:bc:
                    6c:e5:ae:bf:0c:2b:7c:22:01:c4:81:08:26:9f:42:
                    ff:31:2f:0d:30:26:bb:c4:18:da:fc:a8:88:09:24:
                    47:9d:66:ad:04:dc:73:de:8b:0e:ea:82:63:3a:b7:
                    d5:10:f5:46:3d:f6:ac:2e:f7:bf:42:d7:6c:60:df:
                    bf:be:ae:0c:b3:d9:68:09:56:d0:58:23:43:38:88:
                    c4:bb:ee:8a:39:45:c4:ff:9e:6f:95:4c:e3:c0:87:
                    10:f6:97:07:0f:50:a9:95:e4:f9:c3:73:55:63:4c:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A6:23:D8:8E:26:75:35:39:E7:9B:DE:7B:2A:36:71:B4:C4:5A:ED
            X509v3 Authority Key Identifier:
                keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a4:86:b2:9d:b5:79:97:c0:3c:d8:33:79:81:4b:e9:d8:31:
         ee:81:bf:33:9c:1b:5c:2d:ef:e1:e0:98:e2:e5:4f:83:04:8b:
         77:e7:8b:7c:a0:0a:c2:23:36:99:4c:26:ef:77:84:84:3a:3d:
         37:9d:16:65:12:c9:83:5e:77:98:5f:27:c8:97:ea:b6:a9:98:
         ab:e5:78:2b:44:4d:0c:25:db:6a:d7:71:26:65:df:59:63:45:
         87:90:04:f6:c4:ce:ae:a8:d9:fb:7a:6b:91:8b:30:4c:8a:c2:
         07:61:20:aa:9f:20:6c:ed:7b:b8:38:d6:3b:6c:ab:6e:2b:d4:
         9c:a1:31:42:1b:d0:bc:12:3e:51:78:09:40:ae:5b:f3:9c:17:
         be:34:16:c8:45:72:39:60:06:f0:91:b0:32:c1:cc:03:8a:f5:
         77:2d:7b:6d:ba:f1:69:90:e5:88:83:9c:12:a7:18:63:2c:24:
         68:c8:a4:95:db:d4:d5:3f:29:dc:5b:22:62:eb:14:15:66:bb:
         44:d2:38:91:3c:27:a1:71:0f:16:a1:f0:5a:47:4b:86:40:f5:
         3f:08:fd:08:df:51:f9:7d:ad:8e:22:d8:6e:80:bb:6b:70:8b:
         96:85:25:44:72:f4:6a:b3:fe:6d:c7:f3:c6:fb:84:26:0e:ee:
         9b:98:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:33:16 2026 by rpki-client