Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File:                     n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier:          ajKl5qvcMX9iN3ngi6CdNdrbwSh33O553FVwZLsqfGg=
Subject key identifier:   BD:BC:35:4A:92:61:98:25:BB:59:FB:78:6D:2E:70:88:4C:B1:A5:89
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer:       /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial:       019D2816546C949DCBF27503FB1530B27DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number:          147C
Signing time:             Thu 26 Mar 2026 03:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:45 +0000
Files and hashes:         1: XF1Nc0TElShdxgSlTTRramDytfo.roa (hash: 2x0djNsK99Aex80NEk4TpsPuhlZgzcphXHvm3HIeB7I=)
                          2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: If0N/gsIA38r6svv0+WX7Xtoe11W6MlyeHFN4C4Jm0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:54:6c:94:9d:cb:f2:75:03:fb:15:30:b2:7d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
        Validity
            Not Before: Mar 26 03:00:45 2026 GMT
            Not After : Mar 27 03:00:45 2026 GMT
        Subject: CN=bdbc354a92619825bb59fb786d2e70884cb1a589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:08:01:b6:4c:38:e4:44:66:23:df:0c:15:
                    33:53:3b:36:2c:53:ef:41:99:4c:cf:a6:66:5e:71:
                    7d:74:3b:45:9f:ea:fb:01:31:0b:77:d2:55:99:2b:
                    03:0e:05:01:a9:1a:b2:72:16:91:f0:cf:8f:83:ab:
                    82:a0:b8:f0:d7:0c:51:bf:9e:11:61:15:5e:b4:d9:
                    cc:53:a7:23:ef:a6:b5:48:b5:78:a9:70:b0:f5:08:
                    46:01:f2:d5:2b:36:82:da:19:6f:9f:29:e3:57:72:
                    09:27:7e:a6:f7:65:a8:2b:79:1e:e9:f8:4e:a0:52:
                    73:50:16:7a:be:92:81:fa:0b:13:c0:ab:14:c0:35:
                    95:7d:fe:b7:84:23:bb:0d:0a:57:89:72:72:e5:e3:
                    04:80:1a:7a:4b:f5:9e:4e:0a:6a:b0:93:64:a9:f8:
                    99:21:c5:f1:ab:88:29:f1:ef:fc:c8:a3:fa:ee:56:
                    14:80:66:bf:f0:b2:07:da:40:80:fe:66:68:04:14:
                    99:a4:2e:22:1a:f3:f9:c1:22:4d:8a:50:a7:e8:94:
                    88:28:2d:b6:a5:2e:86:da:0b:62:c9:1d:ee:d7:53:
                    ac:2b:9c:9f:b6:44:4f:63:43:8a:aa:2f:76:30:20:
                    4e:99:13:0e:d0:fa:22:b3:9f:7c:54:70:74:fd:e1:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:35:4A:92:61:98:25:BB:59:FB:78:6D:2E:70:88:4C:B1:A5:89
            X509v3 Authority Key Identifier:
                keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:86:06:c5:68:90:4a:9d:3e:d2:91:34:b8:3d:86:0a:c7:a9:
         d3:f6:15:5d:d3:4c:48:34:27:f2:ec:a6:a0:c2:b3:3f:b3:11:
         46:fd:33:1e:1e:b3:cb:7f:89:53:0d:97:57:13:31:a4:f5:98:
         3b:1b:64:15:37:8d:bc:0d:38:49:0c:c3:ec:e0:b3:17:93:9f:
         17:e9:78:75:aa:c1:e6:12:b1:a9:62:cd:07:a4:5b:21:e1:4d:
         ba:f3:07:c1:29:b8:a2:00:6e:8a:4c:02:b6:dd:29:dd:f7:70:
         1d:12:cd:63:8f:9d:11:e6:09:ff:88:a6:d2:ce:1e:b8:b3:05:
         ea:20:aa:be:99:04:eb:b0:c4:0f:49:fb:a7:b4:a8:d5:eb:27:
         e5:9f:a2:c3:c9:26:9b:01:03:4b:ef:e9:e2:81:12:b1:15:e6:
         a0:5a:76:44:21:ba:ed:c1:de:6e:47:ae:e5:2e:21:e1:32:da:
         5e:b3:58:e1:6d:50:cc:88:6d:e2:96:f9:1e:95:6d:f1:ca:74:
         45:d2:6f:2c:31:b6:97:ec:f2:a6:d0:a4:ab:07:24:6e:bb:e2:
         d0:f3:a5:02:40:4b:c1:f3:f5:06:3b:f7:34:d1:10:c3:64:40:
         1c:1e:21:3b:84:b9:5d:fe:e6:87:42:02:a4:ec:2c:2b:e3:e3:
         c0:18:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:08 2026 by rpki-client