Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File:                     x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier:          FGsf/CacnOnrejQvg8InHMenh7IpWWPiPu+oHy+cwHc=
Subject key identifier:   ED:54:3C:34:58:D7:70:18:9F:E7:99:15:34:75:E9:07:32:5C:CF:73
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer:       /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial:       019D299752D64AA941566F1B92CBBE74E6A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number:          1244
Signing time:             Thu 26 Mar 2026 10:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:16 +0000
Files and hashes:         1: WNvdK2G6VGfovAlyzdy5qA0oBTc.roa (hash: T/wqo/8dAPv9d0Xqoe1ZG886rDX3diZQucP4pDiIbtI=)
                          2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: pyqmTSkxbIHE4YYB+fLlj7EiI4p8/X2xo+bXdkwMUbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:52:d6:4a:a9:41:56:6f:1b:92:cb:be:74:e6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
        Validity
            Not Before: Mar 26 10:01:16 2026 GMT
            Not After : Mar 27 10:01:16 2026 GMT
        Subject: CN=ed543c3458d770189fe799153475e907325ccf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:16:28:ff:5d:b9:7d:1c:64:76:a3:2a:43:
                    55:9d:9e:bc:2f:9a:57:30:a3:50:53:ba:91:0d:d3:
                    be:df:9e:87:14:dc:e4:16:f3:be:5f:de:f7:9b:c0:
                    1e:a2:af:58:ed:53:9b:43:6d:0d:87:f5:cd:cf:7e:
                    17:31:0d:f1:65:65:a0:69:d9:31:01:37:e8:92:09:
                    8c:f5:4c:b5:89:82:94:d9:fa:f3:13:3a:4e:40:31:
                    99:0c:44:af:0a:8a:42:29:9a:51:fb:26:14:13:2c:
                    3f:b9:2f:41:1c:b0:75:7c:e3:5d:21:d2:2d:7a:27:
                    2c:28:65:a6:3e:04:6f:b9:f5:cc:48:ac:1c:17:5f:
                    90:63:5b:fe:7a:00:01:28:b2:b7:25:ea:cd:d2:d4:
                    25:97:d3:3b:fc:37:e4:91:2c:e7:28:2c:d4:ad:d2:
                    5e:f9:eb:95:89:01:ce:68:d7:e8:48:e1:07:73:a2:
                    b1:e7:dc:cd:14:1b:d1:0b:c9:66:c3:61:aa:27:11:
                    7f:66:41:0c:e3:17:a0:cb:ab:54:42:e9:cb:c9:29:
                    7c:b3:93:33:79:73:4b:8b:4a:c6:46:4e:95:5e:b2:
                    5a:ef:0c:85:be:18:6f:7c:7e:77:82:2e:70:50:5a:
                    c4:1f:07:52:52:1d:f7:72:7f:62:a4:15:f1:09:32:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:54:3C:34:58:D7:70:18:9F:E7:99:15:34:75:E9:07:32:5C:CF:73
            X509v3 Authority Key Identifier:
                keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:56:8d:75:6b:5f:2c:76:ad:5d:89:7a:5e:a2:6f:1b:52:e0:
         f6:fc:c6:ae:74:9e:65:5e:c2:1c:3d:63:51:f3:c7:29:ef:a6:
         20:3d:30:d7:d1:13:55:22:5c:97:72:d1:28:6e:65:cc:d4:2f:
         b5:7e:30:ba:e8:82:d3:27:55:0f:90:49:14:1c:51:0a:92:c3:
         47:04:57:04:e0:91:2f:0a:a2:19:44:f8:a0:ec:93:56:26:46:
         fb:53:7e:0e:73:52:ec:3b:9a:5b:d1:b2:20:ef:12:93:c1:b1:
         84:1f:d1:9b:62:41:88:22:9a:33:81:b9:f3:24:5b:78:72:01:
         99:f9:01:65:93:d9:6f:fe:6b:01:e7:34:00:df:4b:7f:89:cb:
         28:01:30:7b:2a:e1:f9:4b:46:19:42:53:70:38:8f:7a:a8:3f:
         e1:47:f1:a2:fa:f6:ff:f3:3d:ed:d2:62:cf:df:07:ed:c6:2a:
         8f:68:f4:35:e6:53:a1:9f:aa:7a:98:22:37:80:11:e8:d1:26:
         c5:00:0e:5a:14:79:13:d7:18:05:17:5d:0f:0d:5e:51:ac:a5:
         de:5e:c8:d9:3e:f3:61:61:8f:65:fe:9e:a3:78:aa:c3:92:8d:
         e9:4d:b6:4d:00:d6:bf:e8:3a:5e:e7:e7:9c:cf:69:64:b6:4e:
         4b:59:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:03 2026 by rpki-client