Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          dpVZdbbWgbN/Fl1lmMAiJLWweMe4u3+aD2TmfEtDhXE=
Subject key identifier:   29:F0:8E:3B:71:F5:43:45:8B:B8:05:09:A3:84:1A:0E:DB:A9:17:B5
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       019D2AA9B0E7F613B91132AB82192829585C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 15:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:56 +0000
Files and hashes:         1: XxtWaMM5sBfFC2sC8FpjDL8Ge7Y.roa (hash: HWIQrBtT9vbpCee5Xkd6bp75O2LIMTf2r4JmS0NQHJ4=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: vMXHbLnQ2ynRflLYvIoKeZVsHIV+vTFcgWGkLnjDnGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:b0:e7:f6:13:b9:11:32:ab:82:19:28:29:58:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Mar 26 15:00:56 2026 GMT
            Not After : Mar 27 15:00:56 2026 GMT
        Subject: CN=29f08e3b71f543458bb80509a3841a0edba917b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:1c:6b:4e:bd:94:ed:c7:ed:8e:83:3c:d8:
                    d3:b1:c4:8d:15:63:ce:c0:af:2f:65:ca:8b:a6:6e:
                    d2:14:05:85:e4:0d:4b:90:8d:5c:0a:2a:89:d8:05:
                    c3:8b:79:77:48:ce:7c:0b:c4:b6:ab:1d:4f:1e:ee:
                    1b:46:37:c4:cd:ee:2f:54:e4:59:87:d1:97:4c:ab:
                    4b:25:aa:59:87:79:a6:4f:15:40:df:de:2b:b1:10:
                    dc:48:93:24:7d:f9:93:ac:da:fd:20:32:af:5a:da:
                    ae:a2:48:d6:d2:f1:17:d5:fe:eb:e4:05:59:c7:83:
                    1a:73:97:a5:d9:e7:6c:a3:2b:b3:4a:6b:f3:34:46:
                    ba:d4:80:4f:12:b2:24:79:d4:74:e8:80:41:8a:8d:
                    23:82:5c:6d:35:d4:52:0e:00:7d:0c:1a:1e:6e:b2:
                    6c:53:cd:a4:fa:bc:ee:ce:5d:71:15:d6:2e:84:f6:
                    65:28:be:50:82:dc:fd:2b:f1:c5:f4:d6:55:5f:7a:
                    41:a2:11:97:be:a2:80:b0:53:93:9d:05:8d:82:0b:
                    b0:d0:3d:dd:7c:36:28:25:f7:cd:03:ca:cb:1c:e0:
                    1d:62:24:d4:2f:d4:7a:f2:e4:2b:31:c5:97:4e:4b:
                    d9:4f:1c:76:25:23:c3:b5:18:20:ca:b0:c9:d0:41:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F0:8E:3B:71:F5:43:45:8B:B8:05:09:A3:84:1A:0E:DB:A9:17:B5
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:c8:df:8f:a9:d5:88:6d:bc:df:35:bd:9f:8a:00:fa:d6:
         5e:3e:af:9c:34:0c:20:7c:99:ef:f7:29:d7:50:0a:2c:07:05:
         1f:38:38:75:6e:ae:e5:b8:6c:ea:cc:8b:77:d9:3d:b6:02:36:
         90:df:23:e2:b9:78:83:25:d0:10:e9:aa:24:78:54:b5:6a:cc:
         41:64:fa:2c:84:71:ea:bf:af:f8:f7:d8:5c:a7:ab:7c:a9:ec:
         1b:e7:a9:13:84:3f:84:44:73:ba:f9:c4:b9:c7:5d:18:74:20:
         93:c5:31:0b:99:54:f5:ab:a6:5e:e2:13:1b:d4:65:4d:21:24:
         b6:4c:bd:a6:3a:59:26:ae:92:4c:17:14:ec:a0:bb:32:e7:dd:
         50:c7:86:0f:46:76:6a:17:e2:38:1e:34:d9:ce:f2:be:15:11:
         5c:00:e0:01:d8:cf:43:f7:dc:50:46:eb:83:b7:8a:dd:47:4e:
         61:27:3c:b9:7b:91:4b:51:3f:3f:7b:31:b7:23:c8:e8:b5:2f:
         51:21:a1:e8:50:f6:43:e2:a2:3d:41:99:be:bb:34:ed:44:15:
         d4:16:32:eb:fb:d7:4e:c5:36:b7:ad:39:4d:d2:9f:aa:d1:83:
         21:e4:d9:dd:72:da:77:97:1c:a7:fa:a7:b1:da:9e:35:ce:4e:
         d0:0e:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:29 2026 by rpki-client