Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File:                     n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier:          Gardnkl9uSdJt1yKhPX7ASlfvEit8TfX2n4RdPDvDzU=
Subject key identifier:   C6:8C:ED:4E:BC:83:9F:28:56:1E:2B:CA:50:7A:F2:3F:C8:9A:80:6C
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer:       /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial:       019D2A049E72332191603D1CF9B8CB12B48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number:          147D
Signing time:             Thu 26 Mar 2026 12:00:38 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:38 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:38 +0000
Files and hashes:         1: XF1Nc0TElShdxgSlTTRramDytfo.roa (hash: 2x0djNsK99Aex80NEk4TpsPuhlZgzcphXHvm3HIeB7I=)
                          2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: PptfzZVQJjP9Fo7L1LjlJaaD12djSgahIZFLiRKn3e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:9e:72:33:21:91:60:3d:1c:f9:b8:cb:12:b4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
        Validity
            Not Before: Mar 26 12:00:38 2026 GMT
            Not After : Mar 27 12:00:38 2026 GMT
        Subject: CN=c68ced4ebc839f28561e2bca507af23fc89a806c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:d0:d2:eb:4d:b5:77:60:5a:10:d7:37:d3:
                    fa:58:d3:6e:dc:21:7b:4e:7b:a4:21:45:fd:a4:78:
                    b0:2e:26:a1:fb:c2:3f:a2:93:dd:84:0e:a4:16:81:
                    f0:66:98:37:75:f5:98:c9:1f:98:1c:6c:ab:66:68:
                    0f:45:b8:4d:76:2b:a1:cc:0e:7a:44:33:44:d4:34:
                    96:43:e6:89:32:98:e1:df:0d:70:e0:b1:fa:ae:6c:
                    86:d7:5b:ab:db:ca:c7:1d:b6:2c:4b:c7:03:3e:5e:
                    f2:44:7a:e9:99:3b:fb:33:1f:b0:ac:b0:28:fe:22:
                    cc:e5:00:00:81:3a:8f:b2:62:0a:cd:d8:6d:1d:b6:
                    06:f7:cc:42:bc:c7:a1:c7:5f:0c:e5:79:35:0e:2c:
                    f0:ab:6d:c8:93:87:bb:cb:72:b7:3e:24:fb:db:e5:
                    bd:cf:2a:94:0e:44:e2:f1:b2:51:eb:4b:fe:55:99:
                    4f:f8:3a:8d:01:76:73:ef:22:2e:12:4f:5d:38:f9:
                    c6:70:51:a9:57:9f:ae:8d:55:d2:f3:82:a3:49:1a:
                    b5:f5:79:83:a1:42:da:1a:f2:84:8a:eb:fa:82:7a:
                    91:ff:7f:e4:2d:38:1f:0f:66:9a:ac:ea:91:65:ec:
                    e9:1f:cb:e3:1a:15:ae:77:09:a3:dc:fb:42:15:04:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8C:ED:4E:BC:83:9F:28:56:1E:2B:CA:50:7A:F2:3F:C8:9A:80:6C
            X509v3 Authority Key Identifier:
                keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:24:7f:e6:ac:8b:26:dd:ef:19:aa:f8:11:4f:fb:3e:e8:98:
         ab:52:24:6c:5e:23:aa:31:5e:6e:95:00:cf:ce:58:ba:3b:f5:
         e2:94:1a:19:c5:a4:ea:80:a7:94:d2:e0:0d:3f:b1:05:12:47:
         00:22:d7:fb:8d:3a:94:d2:94:97:a4:23:78:2a:c5:83:4a:98:
         0f:6a:d8:22:21:f1:c7:6c:21:cd:4b:a1:cf:33:37:0f:b2:1c:
         06:8c:1d:12:90:7d:53:6f:02:df:f5:0d:9e:2c:1a:18:59:cc:
         05:6d:1e:9f:c0:6e:70:9a:26:ef:50:88:2d:36:f0:b3:07:a3:
         78:71:74:52:eb:7a:dd:17:ce:77:bd:d5:e0:f8:82:de:56:42:
         2a:1c:ac:bb:7b:0f:4f:ac:e8:3a:07:5a:1c:d6:73:67:5c:57:
         9c:7a:f5:49:ce:f6:4a:88:c4:c7:34:52:02:ce:2c:5c:7b:02:
         f1:bf:2e:b9:af:2d:90:5e:fb:ce:b0:42:9d:65:a1:f4:2d:09:
         ea:d2:0c:c9:31:16:61:2f:1d:e8:72:8d:6b:c2:2b:6a:30:7c:
         21:d5:e6:d0:c9:52:00:1a:45:7a:19:37:3e:11:3b:39:32:55:
         64:d7:b4:06:8e:c8:f6:58:e8:42:34:36:27:86:a6:eb:7c:94:
         ef:3a:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:23:01 2026 by rpki-client