Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
File:                     6eWwFOVpGG-4SiAklUzMyckbHj8.mft (raw, json)
Hash identifier:          Eu1CXX9lrQYOw/Bq7yazkuXwM1/XyCyvJBRNdURizEg=
Subject key identifier:   6C:B6:78:D8:2D:F9:23:24:AA:78:25:E1:1E:17:7D:33:46:14:14:2B
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Certificate issuer:       /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial:       019D25BAF2EBD44030B2432405DC6DD74C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
Manifest number:          18A0
Signing time:             Wed 25 Mar 2026 16:01:41 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:41 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:41 +0000
Files and hashes:         1: 6eWwFOVpGG-4SiAklUzMyckbHj8.crl (hash: tclqxBc3pS4kjiaUayySZTLXy7pohKAQfI/E48blBNc=)
                          2: AyV8l9k8NpFrZM4JHdOedX5rD9Y.roa (hash: 7TH1aMwJMpyZIQOTDwZsMfmKOk8Dx9iIl8+9iDSE9Jg=)
                          3: FwQPCKrHVz4balVdLwibEI9Cfrk.roa (hash: 8KMKnJZwG7UrXagLhxDUIpsQxMbosc9CWiPlwMkABfI=)
                          4: kF6_UgVJJRHB4eH9fH0QHfmWKts.roa (hash: MGgGN5ZtdECC48jX2k/n9hSAK1fuT574iIqEAPMM09c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:f2:eb:d4:40:30:b2:43:24:05:dc:6d:d7:4c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
        Validity
            Not Before: Mar 25 16:01:41 2026 GMT
            Not After : Mar 26 16:01:41 2026 GMT
        Subject: CN=6cb678d82df92324aa7825e11e177d334614142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:25:69:47:2e:b5:85:4c:06:70:4b:1c:55:
                    e1:d6:9f:67:83:6a:f0:65:f3:fd:9c:d7:c8:88:4d:
                    a7:2e:b5:81:5d:d6:dd:69:40:98:22:55:71:6c:2c:
                    f8:0f:7f:17:9c:bf:e7:ba:dc:0c:ef:fd:4f:f6:ac:
                    1f:99:8e:0f:c3:4e:7a:32:a4:84:8b:7b:79:d4:88:
                    5f:7e:89:81:02:f5:85:36:75:e8:ca:d6:d3:99:df:
                    9a:18:ab:f2:d4:b7:27:a2:18:f3:df:62:fc:14:07:
                    4c:80:9b:ff:20:c4:4a:00:dd:8f:ea:af:42:a3:6b:
                    97:55:d7:a9:84:6e:7e:f1:b9:b2:44:23:cb:bd:37:
                    32:0c:72:aa:0a:5b:58:f4:d7:cb:9f:d5:3f:da:0a:
                    7c:9f:d3:69:72:9d:d9:27:ab:c9:aa:b1:00:0b:6a:
                    54:75:cb:30:5d:02:c7:a7:c6:41:21:03:aa:db:c9:
                    26:37:23:c0:91:af:68:4e:e3:4f:80:71:37:13:ba:
                    e4:7d:09:19:9b:da:4b:17:24:d5:0b:0e:af:e9:34:
                    82:e0:87:8f:81:bf:be:9f:0c:47:ed:bb:0d:f4:08:
                    17:c2:db:8e:ee:cb:66:af:6d:b3:5c:07:4a:25:f2:
                    42:96:4e:42:41:2e:ad:9c:b5:05:c4:99:66:0c:f5:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B6:78:D8:2D:F9:23:24:AA:78:25:E1:1E:17:7D:33:46:14:14:2B
            X509v3 Authority Key Identifier:
                keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:1f:9e:8e:0f:ea:ca:12:89:de:68:1b:5c:e0:37:30:ed:
         72:59:db:43:ec:4a:27:11:e8:bc:4c:e8:19:ef:0c:0c:70:8f:
         4f:df:55:65:2f:d6:fd:7e:b8:3f:50:5b:ff:6e:d7:8f:04:89:
         be:16:48:b6:fc:07:47:95:df:1a:62:83:bd:f5:7e:8b:a9:b9:
         7b:a7:25:cb:2b:9b:5b:f8:2b:6a:76:d0:c5:fa:86:cf:f4:c4:
         ef:c1:1a:a6:ea:bd:8a:df:c2:fb:c3:17:26:0f:a9:3b:9a:16:
         78:81:bd:03:97:0c:02:29:71:d7:8f:62:59:4c:99:7b:9b:a3:
         4a:30:45:3d:a9:c4:b7:55:c7:62:19:c8:85:5e:60:3c:f1:52:
         36:23:ca:3f:06:06:e3:23:89:0d:e6:57:7d:6c:aa:bd:1f:d4:
         42:b8:b0:9e:c1:f3:ad:9a:c1:8b:c3:fb:b7:38:fc:38:12:d2:
         e8:fd:e4:f4:f0:ff:00:7b:5c:90:bc:07:7c:25:23:09:a6:6c:
         4e:73:76:57:ee:d8:60:2d:e4:84:1c:2e:ea:28:d0:15:b0:be:
         00:46:68:e0:14:2d:e8:d8:78:b3:94:6d:7f:3e:80:84:d5:55:
         b4:e9:73:99:45:6b:3d:11:0e:bd:41:40:b1:ef:f5:9b:6f:7c:
         57:a7:84:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luvLr1EAwskMkBdxt10wcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTViMDE0ZTU2OTE4NmZiODRhMjAyNDk1NGNjY2M5Yzkx
YjFlM2YwHhcNMjYwMzI1MTYwMTQxWhcNMjYwMzI2MTYwMTQxWjAzMTEwLwYDVQQD
Eyg2Y2I2NzhkODJkZjkyMzI0YWE3ODI1ZTExZTE3N2QzMzQ2MTQxNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VIlaUcutYVMBnBLHFXh1p9ng2rw
ZfP9nNfIiE2nLrWBXdbdaUCYIlVxbCz4D38XnL/nutwM7/1P9qwfmY4Pw056MqSE
i3t51IhffomBAvWFNnXoytbTmd+aGKvy1Lcnohjz32L8FAdMgJv/IMRKAN2P6q9C
o2uXVdephG5+8bmyRCPLvTcyDHKqCltY9NfLn9U/2gp8n9Npcp3ZJ6vJqrEAC2pU
dcswXQLHp8ZBIQOq28kmNyPAka9oTuNPgHE3E7rkfQkZm9pLFyTVCw6v6TSC4IeP
gb++nwxH7bsN9AgXwtuO7stmr22zXAdKJfJClk5CQS6tnLUFxJlmDPXuTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy2eNgt+SMkqngl4R4XfTNGFBQrMB8GA1UdIwQY
MBaAFOnlsBTlaRhvuEogJJVMzMnJGx4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2Qt
MmJiMWVmYzU3YTg2LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2QtMmJiMWVmYzU3YTg2
LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKO4fno4P
6soSid5oG1zgNzDtclnbQ+xKJxHovEzoGe8MDHCPT99VZS/W/X64P1Bb/27XjwSJ
vhZItvwHR5XfGmKDvfV+i6m5e6clyyubW/granbQxfqGz/TE78Eapuq9it/C+8MX
Jg+pO5oWeIG9A5cMAilx149iWUyZe5ujSjBFPanEt1XHYhnIhV5gPPFSNiPKPwYG
4yOJDeZXfWyqvR/UQriwnsHzrZrBi8P7tzj8OBLS6P3k9PD/AHtckLwHfCUjCaZs
TnN2V+7YYC3khBwu6ijQFbC+AEZo4BQt6Nh4s5Rtfz6AhNVVtOlzmUVrPREOvUFA
se/1m298V6eE/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:05 2026 by rpki-client