Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          5yWSJb3qNsxDJZP0gkP7WRhclIS7qMyEUHqdSGaHg6A=
Subject key identifier:   01:BB:99:9E:30:3F:73:96:43:3F:77:B0:71:ED:C2:A3:7F:76:01:DB
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       019D27041A93C29C6E13ED37A56A56BD362E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0C6F
Signing time:             Wed 25 Mar 2026 22:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:13 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: dqod3TJsfZWP7zx/+CqV0zMFwkToqv+ZP8qrGGWofR4=)
                          2: QS3mViuWefpzRVuut9BCujNEHBk.roa (hash: pncFDsfj5PoDws+gFKzvHR1BHzgW/TNAwcyb1+Rx/Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:1a:93:c2:9c:6e:13:ed:37:a5:6a:56:bd:36:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Mar 25 22:01:13 2026 GMT
            Not After : Mar 26 22:01:13 2026 GMT
        Subject: CN=01bb999e303f7396433f77b071edc2a37f7601db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:31:73:7d:af:13:89:19:c3:f8:2d:a5:c8:
                    72:4b:e3:72:e1:1a:74:39:98:f2:90:6e:d8:3e:ea:
                    ef:97:6a:c8:40:0e:fa:af:ea:32:8b:98:99:f0:e8:
                    eb:ee:b6:d5:c9:d6:5b:ce:ba:2b:a9:9b:47:76:b7:
                    82:67:c9:93:3c:9a:92:65:bf:d9:ec:10:89:2d:0d:
                    59:f8:92:79:a3:67:3d:07:0e:2d:33:32:7c:2f:70:
                    c3:80:f7:86:31:b6:04:6c:e0:85:ab:e3:36:f5:99:
                    a7:44:53:09:e0:db:7d:b8:d6:0f:99:2b:e1:dd:b4:
                    7a:09:41:66:be:64:5b:84:fd:1f:e6:26:81:a5:d6:
                    fc:0b:d9:08:69:7a:91:82:2b:cc:a6:5e:7b:fd:e5:
                    49:8d:98:36:94:fb:69:ba:d6:e9:6a:e5:c5:41:fc:
                    70:08:29:eb:4b:e3:76:1b:80:48:e9:49:85:50:0c:
                    89:6e:2c:93:b5:b9:de:2a:35:19:16:94:52:7b:2b:
                    db:6d:23:f7:81:f3:6c:52:58:5f:cc:a8:66:39:7c:
                    c5:9a:02:4b:3b:fb:d1:c7:df:cd:f0:55:b2:ab:d4:
                    d7:f3:d1:19:5c:f7:bd:b0:93:96:b6:69:78:be:cc:
                    6a:0e:5d:d1:1c:da:bf:26:7b:dd:5a:5d:92:f8:a4:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:99:9E:30:3F:73:96:43:3F:77:B0:71:ED:C2:A3:7F:76:01:DB
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:32:62:a9:de:de:16:83:eb:3c:c5:44:1a:1a:f8:a7:57:cc:
         04:b1:0c:81:09:4b:c2:09:5e:66:31:5e:ef:1a:2a:7c:87:25:
         3a:51:77:38:15:da:34:cd:55:bc:0f:c5:2e:87:2e:3c:8f:3c:
         cb:b0:87:6d:e3:87:cf:a8:b3:16:62:fa:39:5d:eb:1c:1b:1a:
         18:53:3b:8b:76:85:41:60:37:ee:e5:30:c0:29:18:e8:3d:6b:
         db:ba:66:57:37:c0:9e:ab:7b:31:79:f2:8c:61:a3:4c:36:8b:
         8a:38:20:0c:0f:92:72:1e:8f:ec:1a:e8:eb:77:6b:5f:62:96:
         22:c0:7b:76:18:c7:83:81:eb:dc:7c:12:b5:a7:31:e7:31:5c:
         db:44:19:8d:df:c5:80:18:f8:a4:15:be:3c:1a:01:7d:1d:94:
         f7:69:26:89:5f:99:09:b6:14:35:e2:52:70:c5:2a:0c:b9:14:
         ff:68:95:19:4b:18:12:2c:22:79:10:5f:26:68:ca:3f:a9:17:
         3f:98:d8:81:76:8d:b9:c2:0d:cd:1d:47:01:9b:58:23:2b:2b:
         cb:4c:70:ba:e9:00:68:36:73:59:d5:16:29:a1:0f:f2:b6:57:
         32:98:36:f5:f1:de:d6:5d:42:1e:5b:ea:f7:a7:54:1d:e4:bf:
         e9:9a:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:26 2026 by rpki-client