Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          ZMgQKRfjuB6bqcuqgl4AWzZsrL+jmyjJT+qOHGS9i/s=
Subject key identifier:   6C:14:D7:96:CC:9D:9C:44:58:24:A5:AE:6A:51:98:29:B1:A5:56:A2
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019D26CD2B099CAE1A9EA4097E4DBA38B869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          13DB
Signing time:             Wed 25 Mar 2026 21:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:13 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: ZCcvjDQ+MJoyx96rYyhuBeuMBU1uBnZ4JmgFVpuumfI=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:2b:09:9c:ae:1a:9e:a4:09:7e:4d:ba:38:b8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Mar 25 21:01:13 2026 GMT
            Not After : Mar 26 21:01:13 2026 GMT
        Subject: CN=6c14d796cc9d9c445824a5ae6a519829b1a556a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:c8:36:51:cf:9d:87:d2:27:bf:1c:39:95:
                    f1:b4:c0:02:fe:62:40:81:5a:fe:83:d0:44:87:c3:
                    59:fa:45:37:be:39:8d:e1:87:85:9a:a0:af:bb:20:
                    fe:59:73:3a:5d:76:19:54:ee:1d:73:e0:30:98:ff:
                    b3:0c:7a:fe:1e:e0:89:15:96:a2:b9:83:31:e2:5a:
                    9b:da:05:d5:74:21:7f:f2:94:99:00:06:bd:c2:73:
                    7b:b3:5e:6a:65:f9:53:9c:01:8c:c0:af:12:f9:3a:
                    1b:23:dd:23:86:19:56:d4:e5:fc:fc:0f:59:35:6f:
                    1f:74:c2:2c:db:32:28:70:66:c6:c0:52:bf:6a:bb:
                    58:3c:27:7d:7d:f1:7f:6e:8a:9b:7c:f2:5e:91:1b:
                    29:04:67:01:cb:33:58:6c:ad:b5:4c:b5:b1:2f:af:
                    b4:43:01:8d:e8:14:1d:78:02:8a:fc:0c:4b:97:8c:
                    80:41:dc:c6:2f:77:29:51:28:e3:6a:fb:94:76:8a:
                    b4:f4:fe:59:5c:4f:4c:ee:09:54:a4:fd:36:d9:b2:
                    65:f4:ef:13:fa:39:9d:45:02:cd:0f:e6:0f:e1:cb:
                    72:4a:f2:08:dc:44:4c:67:7c:45:22:ea:15:40:b7:
                    cb:5a:9e:a0:f0:ba:0a:8d:54:6c:42:c2:b8:85:9c:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:14:D7:96:CC:9D:9C:44:58:24:A5:AE:6A:51:98:29:B1:A5:56:A2
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:0b:5c:1f:a6:bb:94:c5:f7:20:5d:a2:06:3c:5e:90:70:45:
         86:77:c3:35:54:ea:1f:fa:a7:05:ee:96:bf:b5:42:6b:f8:16:
         87:63:50:e2:18:aa:c0:32:53:78:f5:8d:b7:39:eb:c1:7c:ba:
         eb:9c:b2:ac:e5:b8:8c:b8:cf:61:7a:d9:8b:55:1d:59:55:cf:
         1b:6f:72:9f:0c:d0:ce:93:b3:2d:03:62:53:10:ee:e7:57:2f:
         39:ba:94:31:aa:5a:90:a8:92:21:7f:a5:7a:6c:51:a7:a2:8d:
         39:13:cf:17:c1:97:f6:a5:7d:d4:8d:a0:0b:fb:dd:4f:0a:91:
         94:7f:01:9a:5d:de:e0:a9:7f:d9:cd:42:40:7c:10:d3:9a:bf:
         79:cf:b5:3c:eb:76:58:af:13:8d:48:4b:a0:40:e0:96:be:23:
         f2:9d:ec:72:35:3c:4e:1f:16:7d:42:12:4e:fc:df:5f:ad:07:
         7e:53:6a:c3:b8:bc:25:9a:84:df:2e:6b:33:a5:d0:83:c2:dd:
         a9:64:74:a3:67:85:20:ce:19:c7:03:a0:f3:72:ce:4d:29:9b:
         33:f2:1b:df:9a:69:30:62:3a:8a:cc:a8:8a:89:3f:76:fe:58:
         9f:bd:28:30:0c:94:8a:ec:45:49:99:e7:ea:9b:63:e9:3d:a0:
         d1:a5:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:21 2026 by rpki-client