Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          +wckrZVe6geaVskN4ra9WlR6EnOWK4djT9e0Nvw16wc=
Subject key identifier:   4F:E5:10:39:27:49:AC:45:95:02:7A:AB:87:87:9E:43:C1:6D:FB:46
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       019D29CE59D4C603B5C47BC7BFA6AAC7FDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          0F6D
Signing time:             Thu 26 Mar 2026 11:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:22 +0000
Files and hashes:         1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: 4nytFjVp6EwG1lguCYm9DDX47Grw0lhlzK4XZbh5c+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:59:d4:c6:03:b5:c4:7b:c7:bf:a6:aa:c7:fd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Mar 26 11:01:22 2026 GMT
            Not After : Mar 27 11:01:22 2026 GMT
        Subject: CN=4fe510392749ac4595027aab87879e43c16dfb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:00:3b:51:4c:fc:46:60:63:d8:7b:20:21:
                    f9:6a:e0:06:e5:58:ef:72:6c:84:c4:b4:31:87:05:
                    1d:be:ac:ae:0c:c2:e5:12:c2:9f:f0:aa:2b:1d:84:
                    c5:df:d5:4a:5f:1e:98:6b:ea:66:f2:25:f7:69:41:
                    18:cc:a2:22:67:66:68:6c:93:95:03:6d:7e:ec:6d:
                    7c:55:b6:0a:68:a3:8a:ec:83:d8:a9:5e:41:c8:86:
                    39:2c:5f:42:37:94:c5:99:54:67:d1:05:ed:ef:60:
                    25:cc:e9:cd:50:63:ac:df:ed:53:89:6a:4c:5d:a5:
                    49:db:7b:f2:3b:b4:fb:16:bb:09:4e:9f:6d:fd:ef:
                    9d:f3:62:84:4e:39:5b:6b:0a:7e:aa:64:24:e2:3b:
                    a1:cb:ff:fa:d4:79:2a:a2:e7:59:75:b2:89:a7:fd:
                    da:a1:6f:c3:16:9d:47:9c:c0:70:ee:29:d7:b5:03:
                    80:83:1a:50:ea:61:da:b0:25:b1:7d:fa:e0:fc:87:
                    40:30:28:f2:d4:12:0e:ef:10:20:8a:b2:c7:1e:2c:
                    55:25:83:f4:ea:1d:66:ec:4c:5f:ce:44:9f:77:ca:
                    fe:39:92:64:88:71:8d:b0:96:76:0d:38:7d:0c:c4:
                    a7:f9:05:cf:b7:af:79:91:91:1a:14:2e:20:4f:fc:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:10:39:27:49:AC:45:95:02:7A:AB:87:87:9E:43:C1:6D:FB:46
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:81:09:dd:09:74:6d:30:e3:01:7e:8f:d4:8a:c5:18:a7:9e:
         a0:93:ee:e5:f9:8a:2a:aa:c5:50:e1:5a:3b:fc:af:8c:48:30:
         10:05:49:73:dd:f5:cf:0a:d6:f2:59:a8:81:54:41:23:c3:5d:
         09:c9:2f:85:d9:68:c7:33:cf:b2:97:bd:6d:68:38:46:f5:f8:
         eb:8d:93:52:ba:29:ba:0a:6f:b3:87:e5:25:fb:26:57:12:1a:
         f8:46:e7:95:54:bf:07:81:b3:85:06:fe:bd:4b:2d:f8:29:b6:
         a2:a3:87:04:f6:12:9c:a1:f0:e9:5c:3a:05:e6:2d:ef:90:d7:
         f2:54:e8:c6:1d:e4:40:3b:84:43:9d:a7:f9:1e:e2:32:11:83:
         6c:98:4f:cb:0c:b9:b5:15:75:4a:45:41:5f:91:4a:bb:eb:30:
         62:dc:3f:fa:60:59:a3:27:d9:9d:91:df:f9:45:7a:06:6f:8a:
         21:75:68:56:15:49:25:e3:e5:1c:c2:0e:28:6b:6b:84:f0:0b:
         7e:f4:92:0a:83:8a:be:9a:45:65:18:33:64:dc:47:0f:6e:d0:
         15:c8:08:38:07:77:45:8b:6b:8c:69:1b:af:6a:9c:fa:ed:f7:
         4b:50:82:ac:e5:d8:d3:ad:a1:82:3c:90:01:06:d6:e7:d6:62:
         65:e1:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:48 2026 by rpki-client