Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File:                     a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier:          UlZ/1UIBw1I5EQYejGGpDJcpG837WeuhNzKOw3ZOFdE=
Subject key identifier:   73:8B:DE:96:6A:62:3A:BA:2C:8A:5D:82:02:84:89:D7:8E:F0:8B:B1
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer:       /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial:       019D28F2D3C198E1D9980F1CE59BE54DA3AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number:          0753
Signing time:             Thu 26 Mar 2026 07:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:35 +0000
Files and hashes:         1: F-rApHmMNywXbOy8G6qB8fH01fA.roa (hash: Cj/vTHuQIKGTmDHTsxswJvQ6X1dpxAptzaajKbS+iP0=)
                          2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: Gg5pXCm9/Pls4hnrWs5fTv2ZUEyDnVhxU8CdYDiqLQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:d3:c1:98:e1:d9:98:0f:1c:e5:9b:e5:4d:a3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
        Validity
            Not Before: Mar 26 07:01:35 2026 GMT
            Not After : Mar 27 07:01:35 2026 GMT
        Subject: CN=738bde966a623aba2c8a5d82028489d78ef08bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:d0:23:45:6f:29:7c:bc:0c:dc:6b:f1:05:
                    b0:7c:79:00:a7:e7:5f:24:cb:37:d4:ac:7e:48:f6:
                    e9:f3:fa:1a:66:7b:7b:2b:8f:92:37:b6:f2:96:d2:
                    b5:44:6c:90:8e:29:99:c3:2e:34:30:9f:b2:13:20:
                    99:bd:bb:75:32:a0:62:53:e4:fc:f2:20:28:1b:8f:
                    9f:d3:e8:f0:3f:6e:0c:ba:c2:e6:a4:a9:e3:05:4e:
                    1b:67:bc:20:7a:34:43:5b:69:53:cd:73:d1:b1:08:
                    04:70:b0:12:f6:8d:aa:77:01:5f:8c:99:1e:c5:4f:
                    50:e5:ed:2a:0b:ae:33:67:05:8d:b7:86:75:7c:2f:
                    9f:a1:70:fa:13:93:57:a9:68:e0:60:ae:59:6f:15:
                    30:9d:ed:ce:84:a6:31:fd:0a:d6:6b:a3:31:f4:21:
                    70:84:41:70:6f:ca:10:42:3b:27:29:d2:ee:d1:ad:
                    7e:c8:ac:bb:1a:50:f1:b8:9c:05:2a:e2:2c:12:56:
                    91:52:65:24:5c:16:84:29:b3:3f:e2:6e:ba:7b:be:
                    d2:95:56:70:93:54:c0:15:57:69:5f:04:fd:20:ee:
                    7c:2d:19:19:13:e5:9b:ab:a8:3c:98:be:8b:46:33:
                    63:c6:80:ba:cf:16:df:4f:b5:84:56:55:9d:3d:81:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8B:DE:96:6A:62:3A:BA:2C:8A:5D:82:02:84:89:D7:8E:F0:8B:B1
            X509v3 Authority Key Identifier:
                keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:92:3e:33:89:06:c9:35:29:dc:5a:00:4c:41:d5:75:18:
         aa:e3:fa:0b:7d:25:c5:3b:0c:46:a1:d5:b8:a1:86:cf:22:65:
         ec:d7:00:9d:35:54:3a:46:97:fe:a7:73:25:5b:0b:e6:33:b7:
         9e:de:90:0b:ca:82:af:d6:3b:4b:b1:75:4e:1c:84:b4:38:7c:
         95:e6:a8:21:50:33:32:5b:2f:36:29:c4:0c:4b:0b:d0:34:58:
         7e:3d:88:79:30:26:ce:a3:37:28:24:95:ff:20:46:21:19:04:
         92:5d:38:29:98:8b:99:d3:ed:b3:db:1f:1b:77:8c:da:01:1e:
         a5:10:2a:bd:15:ba:4b:0f:97:21:82:d9:c3:67:92:52:fc:06:
         f1:4c:d5:c9:18:9e:d0:68:0d:bd:3b:f1:96:e0:b0:00:e8:ca:
         d5:d8:1c:7d:33:bc:12:b9:4f:d2:e5:37:98:f0:d3:03:a5:af:
         2c:c8:7b:ae:8b:02:b3:3d:11:9a:a4:eb:a9:e9:52:7f:57:70:
         ea:26:0c:a4:c0:1d:9d:66:7c:4d:97:fe:ba:5b:55:d0:46:fe:
         27:e1:74:06:e3:8c:20:a2:2a:34:b0:7f:d3:1b:58:6b:4e:ab:
         70:72:5a:17:f3:e5:e9:c2:72:8e:6e:f2:b0:4e:e6:98:3f:ad:
         7d:3e:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:42 2026 by rpki-client