Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          I6dUpoZhk4ksoqE+8Izoiy6d/7VHMH+RPiVoOinr6oc=
Subject key identifier:   1C:7B:08:AA:46:23:BD:0D:5A:CE:09:24:DC:9E:1F:96:FF:41:64:9A
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       019D33084AC33EF95EFDB325D77AE082ACDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          0F82
Signing time:             Sat 28 Mar 2026 06:01:14 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:14 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:14 +0000
Files and hashes:         1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: SVrAZDocv4/dnkCyOtz1GFUh8L6d/8evp+CgrEMWekQ=)
                          2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:4a:c3:3e:f9:5e:fd:b3:25:d7:7a:e0:82:ac:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: Mar 28 06:01:14 2026 GMT
            Not After : Mar 29 06:01:14 2026 GMT
        Subject: CN=1c7b08aa4623bd0d5ace0924dc9e1f96ff41649a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:05:ce:a8:07:38:2c:dc:46:e3:f5:db:da:
                    48:34:17:fd:f5:c3:d4:35:29:fd:ce:83:5a:79:41:
                    30:6a:82:da:e6:28:9f:2b:7b:6d:04:18:be:3e:3a:
                    31:21:79:fd:3d:02:e7:14:96:73:ee:ce:7f:93:87:
                    e3:3a:aa:6f:7c:c3:98:c5:f4:82:d5:08:eb:bb:53:
                    45:a3:53:17:7d:05:92:76:5c:d2:4f:aa:46:af:67:
                    c9:6d:3f:4b:22:93:33:ab:2a:0c:ec:1f:c7:29:7b:
                    a2:2b:c0:02:8a:07:92:f2:4f:78:a9:ed:d4:c7:23:
                    cf:33:8f:e9:5f:36:c3:c5:11:2c:37:be:64:37:7b:
                    2c:7d:32:ce:ee:e6:22:0b:a1:ff:27:f4:2d:ec:9f:
                    9e:57:64:a9:34:04:30:f8:e7:51:c0:40:41:79:70:
                    1f:84:8d:66:32:1d:66:86:e9:67:a1:db:f1:0b:7f:
                    4f:41:f7:47:fd:f3:31:37:9a:5e:4a:92:85:3f:4f:
                    2f:f1:eb:f6:9c:c2:ef:fe:f0:b2:33:ab:63:90:2b:
                    8b:e2:47:4d:0f:2d:59:e1:d5:ab:b1:0e:57:ee:85:
                    3b:20:0f:2c:94:ca:99:f4:c2:28:8b:27:28:7b:0e:
                    57:c5:b3:35:c6:94:71:c3:1a:65:0c:d4:49:c6:c8:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7B:08:AA:46:23:BD:0D:5A:CE:09:24:DC:9E:1F:96:FF:41:64:9A
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:08:ad:37:63:22:16:e4:ef:e8:a4:18:89:98:33:34:87:b2:
         e3:40:7f:ad:14:f8:95:ae:2d:c8:2a:eb:fd:fc:5e:8e:d5:ae:
         7c:ca:a4:55:07:d5:b8:b4:a9:ed:a3:95:f1:f5:0d:5b:7c:21:
         02:d5:7b:bd:72:e7:0a:07:b4:44:05:f4:79:0a:a3:25:a9:e7:
         07:85:91:24:1b:d3:da:75:3a:e9:45:b8:08:3d:f6:e7:22:cf:
         c8:ab:c8:7b:f7:eb:de:4b:9e:24:1c:31:3d:69:74:a8:36:e7:
         32:03:92:a6:7f:4c:0c:9c:7f:72:84:fe:d1:1f:86:29:92:cb:
         6c:ba:c0:54:3a:40:c2:bc:de:b4:51:e8:da:a8:73:4d:53:fb:
         18:3d:57:d0:89:53:ee:7f:98:15:7f:a0:4c:87:2f:84:1c:45:
         e9:d2:81:98:41:ce:9d:e2:0a:37:74:1c:eb:05:2a:4c:07:a8:
         4f:6f:e4:b2:7a:fc:4b:ba:36:4c:5c:eb:2c:c8:ac:86:ee:6f:
         65:e9:f2:d3:a7:e6:ad:26:4f:7e:3e:d2:fd:9a:c3:b2:26:32:
         69:ee:50:bc:54:b4:9d:e3:28:3f:f8:ab:9a:45:66:53:2e:1f:
         0f:61:ff:92:89:84:20:cb:98:dc:1a:a2:36:42:a6:84:3a:55:
         31:fc:44:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zCErDPvle/bMl13rggqzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2
N2I4ZWQwHhcNMjYwMzI4MDYwMTE0WhcNMjYwMzI5MDYwMTE0WjAzMTEwLwYDVQQD
EygxYzdiMDhhYTQ2MjNiZDBkNWFjZTA5MjRkYzllMWY5NmZmNDE2NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmQFzqgHOCzcRuP129pINBf99cPU
NSn9zoNaeUEwaoLa5iifK3ttBBi+PjoxIXn9PQLnFJZz7s5/k4fjOqpvfMOYxfSC
1Qjru1NFo1MXfQWSdlzST6pGr2fJbT9LIpMzqyoM7B/HKXuiK8ACigeS8k94qe3U
xyPPM4/pXzbDxREsN75kN3ssfTLO7uYiC6H/J/Qt7J+eV2SpNAQw+OdRwEBBeXAf
hI1mMh1mhulnodvxC39PQfdH/fMxN5peSpKFP08v8ev2nMLv/vCyM6tjkCuL4kdN
Dy1Z4dWrsQ5X7oU7IA8slMqZ9MIoiycoew5XxbM1xpRxwxplDNRJxsgUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx7CKpGI70NWs4JJNyeH5b/QWSaMB8GA1UdIwQY
MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt
NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0
LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0witN2Mi
FuTv6KQYiZgzNIey40B/rRT4la4tyCrr/fxejtWufMqkVQfVuLSp7aOV8fUNW3wh
AtV7vXLnCge0RAX0eQqjJannB4WRJBvT2nU66UW4CD325yLPyKvIe/fr3kueJBwx
PWl0qDbnMgOSpn9MDJx/coT+0R+GKZLLbLrAVDpAwrzetFHo2qhzTVP7GD1X0IlT
7n+YFX+gTIcvhBxF6dKBmEHOneIKN3Qc6wUqTAeoT2/ksnr8S7o2TFzrLMishu5v
Zeny06fmrSZPfj7S/ZrDsiYyae5QvFS0neMoP/irmkVmUy4fD2H/komEIMuY3Bqi
NkKmhDpVMfxEhg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:08 2026 by rpki-client