Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          wDDL9TNDTy8dkmUcm0XmZtOmUhcWMgdU8wbG8Kh14a0=
Subject key identifier:   58:A0:CD:17:E5:21:66:0E:C1:F4:BE:1D:00:83:53:65:55:65:F7:F7
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       019D273A8B5A72BF86BD496BF409829182FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          0F04
Signing time:             Wed 25 Mar 2026 23:00:41 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:41 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:41 +0000
Files and hashes:         1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: didG0TiT3lZk9bFPgqLE7gD9qNydlAT7/yEcwJT5V5w=)
                          2: 7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa (hash: 9/Cnn9Mz/GVeQ/OrX2MtzdspTFn1KWilYOYP/ODpG8E=)
                          3: 9KB6jsA15iDe5hTvYqZPtVlVLBA.roa (hash: dgedybpWr2Mko0EXnuNN0p3FXF1lj/f5Eij3mnR2u6A=)
                          4: rWa57xsNqA6h9p133SuFrfwT1jU.roa (hash: nyGSyY5avNWGsV5nwcg1OwYhIlMW5PE6DQJT9vvTzMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:8b:5a:72:bf:86:bd:49:6b:f4:09:82:91:82:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Mar 25 23:00:41 2026 GMT
            Not After : Mar 26 23:00:41 2026 GMT
        Subject: CN=58a0cd17e521660ec1f4be1d008353655565f7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:e4:48:23:27:da:44:46:6f:a0:93:c0:8c:
                    36:cd:d7:7e:e5:ab:84:7a:e9:b0:53:85:fe:f4:2a:
                    c5:a0:97:e5:8b:9a:2b:98:b5:ca:2f:93:6e:95:19:
                    f9:20:92:d9:14:42:fb:b2:e5:d8:7d:00:a8:e0:d7:
                    4f:fb:cf:e2:61:24:04:e1:60:74:5c:c5:7e:06:9e:
                    56:c4:6d:6c:83:34:58:fa:c7:f3:fc:be:71:a1:c8:
                    98:6f:43:6c:b1:59:76:1f:7e:27:b6:6e:30:a7:f6:
                    97:d8:b6:24:2e:c7:46:0f:55:fc:7e:f6:c3:b1:44:
                    a9:0c:17:65:0f:fb:aa:9c:92:7a:9e:92:be:79:58:
                    8b:c3:32:90:43:2d:f7:ae:58:7f:d0:1f:4f:e2:84:
                    19:3d:52:aa:e7:34:4d:a8:06:3c:88:c9:3f:8a:0f:
                    b0:6f:bb:35:da:b6:d8:75:72:aa:1d:18:e3:b0:79:
                    89:28:e2:b9:c8:fa:66:0c:02:cb:d0:e7:93:24:a6:
                    29:c8:73:8f:91:2d:63:07:12:f5:55:13:cd:b0:e4:
                    42:a5:0e:d7:fe:8e:83:a2:c4:f6:49:b4:bc:38:32:
                    bb:f6:9c:5f:da:ec:0f:48:3e:78:f2:ee:01:00:63:
                    dd:66:95:38:f4:6e:d6:db:92:fd:36:29:1a:5d:9a:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:CD:17:E5:21:66:0E:C1:F4:BE:1D:00:83:53:65:55:65:F7:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:af:ad:a8:61:c3:fb:95:3c:22:ae:6a:8c:c6:95:74:fe:b1:
         e9:59:8a:e9:98:2f:5f:3e:96:49:f1:96:46:36:b2:96:ec:66:
         f8:80:e5:4f:02:9a:ff:d5:54:5a:81:bb:34:6e:6b:97:67:a5:
         d4:52:5a:ef:8a:cc:f4:96:55:a5:11:28:21:f0:01:2a:1b:1e:
         0b:c5:cb:f6:b8:c2:35:28:d5:11:0b:2c:40:fb:37:c4:2b:f8:
         92:90:fb:ce:99:d3:02:fd:f3:e1:18:32:ac:67:d9:60:e2:89:
         04:5d:a0:f9:c3:3d:f0:d6:e0:f4:96:4c:19:b6:e2:b9:f6:2a:
         27:19:8a:13:04:77:6b:d1:91:36:31:5b:d2:a7:fd:69:5c:80:
         d5:f0:23:05:92:a4:49:a5:8c:91:ac:94:35:89:3c:97:7d:2a:
         8b:87:77:86:33:07:5a:6f:ec:2b:6b:b8:46:4b:94:e5:7e:d9:
         a7:00:29:88:75:9d:d0:e2:c2:7a:61:03:16:02:37:ec:1b:27:
         3e:63:a6:ee:79:3e:52:9f:a0:f9:02:5b:85:17:89:e1:1b:10:
         11:9f:be:21:e6:93:68:d2:8d:1e:74:b2:20:83:0d:79:9c:4d:
         bb:23:f7:d1:a3:f2:ba:c3:43:d8:6d:44:56:2e:b3:79:23:69:
         49:ab:b4:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOotacr+GvUlr9AmCkYL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Zjk5Y2Q4ODRmYjVjYmFiM2YzYjM0ZTE3YTgwYTQ4YWRl
YzNmZTUwHhcNMjYwMzI1MjMwMDQxWhcNMjYwMzI2MjMwMDQxWjAzMTEwLwYDVQQD
Eyg1OGEwY2QxN2U1MjE2NjBlYzFmNGJlMWQwMDgzNTM2NTU1NjVmN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokjkSCMn2kRGb6CTwIw2zdd+5auE
eumwU4X+9CrFoJfli5ormLXKL5NulRn5IJLZFEL7suXYfQCo4NdP+8/iYSQE4WB0
XMV+Bp5WxG1sgzRY+sfz/L5xociYb0NssVl2H34ntm4wp/aX2LYkLsdGD1X8fvbD
sUSpDBdlD/uqnJJ6npK+eViLwzKQQy33rlh/0B9P4oQZPVKq5zRNqAY8iMk/ig+w
b7s12rbYdXKqHRjjsHmJKOK5yPpmDALL0OeTJKYpyHOPkS1jBxL1VRPNsORCpQ7X
/o6DosT2SbS8ODK79pxf2uwPSD548u4BAGPdZpU49G7W25L9NikaXZqTRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFigzRflIWYOwfS+HQCDU2VVZff3MB8GA1UdIwQY
MBaAFOj5nNiE+1y6s/OzTheoCkit7D/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2It
NzUwOWY3ZjRjNWE2LzEvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2ItNzUwOWY3ZjRjNWE2
LzEvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq+tqGHD
+5U8Iq5qjMaVdP6x6VmK6ZgvXz6WSfGWRjayluxm+IDlTwKa/9VUWoG7NG5rl2el
1FJa74rM9JZVpREoIfABKhseC8XL9rjCNSjVEQssQPs3xCv4kpD7zpnTAv3z4Rgy
rGfZYOKJBF2g+cM98Nbg9JZMGbbiufYqJxmKEwR3a9GRNjFb0qf9aVyA1fAjBZKk
SaWMkayUNYk8l30qi4d3hjMHWm/sK2u4RkuU5X7ZpwApiHWd0OLCemEDFgI37Bsn
PmOm7nk+Up+g+QJbhReJ4RsQEZ++IeaTaNKNHnSyIIMNeZxNuyP30aPyusND2G1E
Vi6zeSNpSau0Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:06 2026 by rpki-client