Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          qeV8VWBWLIMNWRVI8lC6G80qNmKp2hvbA+HoW//jGvk=
Subject key identifier:   86:F7:42:B3:38:9B:F1:46:17:F2:5C:A5:06:C6:7F:CE:81:1E:4E:44
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       01A08AFAC0F91117CA88DCF38E4D9C76784F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0EB4
Signing time:             Thu 10 Sep 2026 11:01:24 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:24 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:24 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: pJSrUGuh6YskRjfUzBstPPr2BKQuVopqIEVC5D/AUv4=)
                          2: CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa (hash: nNkOheFA1Bvc9D0wPsf9Fhra1hW/4NT0jdBtU1SIYdk=)
                          3: KaO-__UQ_4-yFi8MMxv305lzDlw.roa (hash: MPyADIXrlTVIshlYvvPri9A+eTXT/5p1O9Y/NNCFTew=)
                          4: myL47iydC8eKGLu8PQ2TD5S3cnE.roa (hash: l0U46siz8BLtzrVkMhNRaqElDbC1K1LmUtKA9hKwXgg=)
                          5: ojYHQmSAFTm29RLFj7gCPdYmCjg.roa (hash: 7+saW1Xd2Xb7UDM8OgcUC8MrbOvLnaAq3EyCVMvJhAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:c0:f9:11:17:ca:88:dc:f3:8e:4d:9c:76:78:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Sep 10 11:01:24 2026 GMT
            Not After : Sep 11 11:01:24 2026 GMT
        Subject: CN=86f742b3389bf14617f25ca506c67fce811e4e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:32:45:3e:fa:a0:91:1d:2d:50:9a:55:0b:
                    88:e4:9d:bd:6a:14:e2:f0:dd:79:d3:41:ac:f2:77:
                    e1:10:a3:21:ce:2b:ce:7e:c1:7c:80:78:67:74:ed:
                    13:5c:0f:d7:e2:de:b9:45:3d:12:2d:71:e7:d8:11:
                    69:1d:f6:28:c6:65:5d:08:4c:ea:43:e2:a8:f1:26:
                    9e:9a:69:8a:54:f9:21:b5:ad:f2:9b:0b:fc:2f:1a:
                    d6:2d:02:66:e5:2f:b8:86:5f:b1:21:6a:a7:10:8f:
                    a5:3c:06:b5:16:67:f2:4d:d5:67:d1:af:32:f1:6d:
                    02:27:39:c6:08:bd:8c:a3:40:3c:f5:2d:6b:bb:9b:
                    2a:9c:27:7e:57:27:0d:33:76:cc:0f:f6:d2:9b:b7:
                    ef:ab:94:17:ad:f5:fc:8c:e9:a6:6f:b1:12:eb:2a:
                    d6:c2:4e:b7:a1:7c:8b:8b:d5:05:b1:66:37:8d:d0:
                    6d:94:77:da:3e:a8:09:1c:e7:99:df:c4:9f:ec:67:
                    27:79:40:16:73:76:20:48:b9:8c:78:62:57:1c:f0:
                    4c:45:b9:5b:e4:49:db:53:db:89:af:df:39:25:6c:
                    37:16:f3:e4:a6:22:00:be:28:55:9c:50:df:d1:92:
                    61:fe:c1:83:af:44:c0:d2:90:f5:35:3f:b8:ae:0b:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F7:42:B3:38:9B:F1:46:17:F2:5C:A5:06:C6:7F:CE:81:1E:4E:44
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:63:b9:07:d5:9b:45:a1:87:5f:72:20:ad:22:e3:3c:e5:
         e0:70:db:9b:6a:8d:1c:b2:ce:ba:13:c8:0d:10:93:cb:82:ba:
         fb:1c:82:c6:48:f5:f2:66:94:13:59:31:e4:ee:d8:bd:23:f0:
         8d:7d:a0:e1:97:64:cd:b8:b9:f5:65:16:98:39:dd:7f:e8:71:
         66:af:93:f7:d4:c2:ee:d3:10:ec:ae:6c:03:01:f6:fa:8f:04:
         ee:87:22:ab:75:0a:85:f1:d9:6e:07:c0:e6:27:b0:51:36:3d:
         c3:31:0c:dc:c6:73:5a:d3:1e:d8:62:df:c5:81:21:fd:25:de:
         59:ec:f1:1d:ef:c2:62:74:dd:03:86:93:9c:e2:3d:dc:9e:66:
         23:f8:64:4e:9f:3a:23:81:73:64:9c:6b:3e:f8:73:a5:10:c3:
         95:43:4f:76:8d:3d:30:aa:98:2d:cd:a2:4e:fc:6b:01:07:12:
         a7:df:09:ca:17:56:71:d1:28:00:5e:a3:6a:c9:62:ed:90:36:
         ae:a5:62:6f:6c:02:74:c4:03:b6:ca:17:53:50:ee:b9:9d:0f:
         eb:ed:dc:98:fa:c5:3e:49:d7:3a:a8:93:ca:b4:8a:50:2d:b5:
         49:da:df:6c:45:46:5f:ee:91:c8:17:b3:22:f4:62:4b:99:e3:
         70:c4:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:47:47 2026 by rpki-client