Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File:                     6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier:          p7c+/AcNNC01CiVEJ6iaK6UJCq62A3SPabXtpzJShFs=
Subject key identifier:   21:8C:D8:F2:F1:68:60:94:3C:E5:56:95:F2:2F:E6:D9:A4:1D:86:4E
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer:       /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial:       019D2816E5C06C5A1FE569F88150B14AF64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number:          035D
Signing time:             Thu 26 Mar 2026 03:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:22 +0000
Files and hashes:         1: 0NDgQCvqhryncNsEQEFvwSr_y0M.roa (hash: LF2EyUV4OIlA7LZWcGa2EYYOsJUgAR1OHjq6qtxDlCo=)
                          2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: NY8yhY2kEdyQcXLdcDilBvahpzS5sKxJZ4DqduM6nhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:e5:c0:6c:5a:1f:e5:69:f8:81:50:b1:4a:f6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
        Validity
            Not Before: Mar 26 03:01:22 2026 GMT
            Not After : Mar 27 03:01:22 2026 GMT
        Subject: CN=218cd8f2f16860943ce55695f22fe6d9a41d864e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:a6:b2:3b:c2:42:e1:fc:35:47:fe:bd:87:
                    a0:6a:17:d4:ba:6f:6b:be:a5:76:20:f1:59:5f:77:
                    1b:f1:62:66:e3:9a:4d:2e:15:c9:6d:29:fb:41:29:
                    f9:35:51:7f:96:97:b9:39:be:cf:42:70:80:87:79:
                    2a:9c:43:61:03:cf:d5:9a:a8:83:0b:ec:88:3f:d9:
                    7c:ac:ed:3f:eb:1b:11:36:52:96:10:b7:70:d2:c1:
                    ae:ef:91:f8:ef:56:ba:67:cb:ba:79:85:ac:37:8e:
                    e1:e4:38:aa:ef:27:6c:d8:e6:82:47:7c:ee:57:1d:
                    19:52:2f:64:4a:03:0e:ed:50:e9:5a:b8:7e:eb:2c:
                    cd:ba:e0:33:a8:03:e4:36:70:d2:8e:8d:62:5b:fd:
                    e1:60:e5:22:65:66:cc:71:a7:50:47:d4:85:1b:3d:
                    5f:19:2e:3e:cf:22:ea:4e:7a:81:cd:df:0e:b9:06:
                    7f:8a:8d:08:cf:5d:77:e6:62:4f:95:25:d2:fd:7f:
                    a4:4d:a0:91:c9:77:67:af:de:7e:a4:81:db:c1:cc:
                    ec:c4:ca:aa:48:72:a7:51:ed:6e:79:0b:d4:00:70:
                    30:bc:29:f1:c0:51:cc:f9:3d:f3:cc:f1:5f:4b:87:
                    9e:8b:c3:2c:68:5f:f4:7a:fd:99:9b:d0:d9:c6:8f:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8C:D8:F2:F1:68:60:94:3C:E5:56:95:F2:2F:E6:D9:A4:1D:86:4E
            X509v3 Authority Key Identifier:
                keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:6f:b3:6e:74:37:aa:5f:24:a2:b5:60:e1:14:f2:c5:aa:
         4e:84:91:b0:83:fe:5a:56:6a:1d:83:39:7d:28:c6:aa:aa:b3:
         82:3e:f0:ac:83:31:03:7f:6e:ef:de:79:40:0e:20:26:55:b4:
         10:03:8e:60:d5:00:09:e4:db:4d:f7:2d:dd:05:98:c2:49:e6:
         25:cf:c3:9b:11:5a:8b:a1:77:af:4a:fa:fd:86:01:ed:ab:1a:
         88:27:98:dc:ef:42:ca:ac:fb:a1:64:96:69:8a:d6:61:9d:26:
         51:c1:00:40:9c:6c:a7:7f:77:c6:fd:00:40:1d:fe:ac:4c:20:
         24:8f:8f:49:62:29:34:69:91:87:d6:8a:b8:2d:07:1c:cd:43:
         54:1c:b4:1e:40:94:d8:65:63:ae:ae:e0:5b:f3:49:ef:e6:e2:
         43:1a:22:0f:62:d1:e5:e9:1a:ae:6f:71:1b:fe:56:80:a4:14:
         d6:f0:6d:23:9a:48:09:6d:06:80:9f:59:10:da:da:d4:5b:a7:
         e3:56:c5:59:68:71:9d:43:aa:1b:18:3b:87:57:d9:78:83:b1:
         7d:c2:ad:aa:f3:8e:7b:61:e7:cc:42:67:dd:c5:55:43:6b:14:
         7f:58:37:66:28:d2:b3:5b:d9:0c:a3:68:80:6f:8b:da:12:41:
         19:1b:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:45 2026 by rpki-client