Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          aTU6EvAHoGLzzq7ZTYS90uG1wU86/dYXkDyryHDYsGI=
Subject key identifier:   F9:96:68:B1:D5:E9:66:AC:2A:92:D5:69:6C:90:9B:6F:D1:57:9E:FF
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       019D27E0064C67146E265B3438C621F79AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          097B
Signing time:             Thu 26 Mar 2026 02:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:26 +0000
Files and hashes:         1: 1tT6-zSUf6pEClW_lKEL7VHiKiE.roa (hash: X43xYghLS0syhIw7JXoh8hzfwP6Xl71o8J3+Q4661gM=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: x1P0kLw8k+WB3EcMRD7IRvkCPma+YNsES4KfpNq+8X0=)
                          3: DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa (hash: 6F6Qg6kxedLXKk4s17Vv0in/fOumsyERMHRreHir8U4=)
                          4: dIlVX31KigJ6uzmopk-08_s9BaI.roa (hash: qfVMhGQ1p1bTL3qJOPoO+zrwFToB6+GUrIK7ZBJ8Guo=)
                          5: pRYI-6UQ3yoFuethzPMKeOEwBNs.roa (hash: 9Jr2qQjo4i1NAgsOB4ab/Qa+eaYNGkm+we9jGg2Kgcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:06:4c:67:14:6e:26:5b:34:38:c6:21:f7:9a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Mar 26 02:01:26 2026 GMT
            Not After : Mar 27 02:01:26 2026 GMT
        Subject: CN=f99668b1d5e966ac2a92d5696c909b6fd1579eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:27:55:da:63:77:bc:73:51:04:d6:5d:e1:
                    18:d4:75:26:fe:53:2e:7a:8f:ed:91:2d:1b:6f:1f:
                    f3:4a:ba:6b:f3:78:0d:27:9c:58:31:b0:13:8b:75:
                    35:b4:9d:42:12:88:3f:e2:0f:b5:83:fd:cc:86:d3:
                    5c:ff:c5:33:94:34:b3:3b:b7:d6:1c:e4:2b:71:85:
                    46:55:fd:24:76:15:1d:58:de:03:50:ac:6c:b3:99:
                    a2:40:c6:ac:30:7d:11:7f:f1:86:1f:28:83:dd:4d:
                    35:d5:56:97:2c:f8:f8:9e:35:2f:8e:bf:0c:45:01:
                    c8:96:69:2e:19:86:be:96:02:b9:06:cd:a0:58:dc:
                    e4:bd:9f:7d:ca:73:ea:d4:37:dd:1d:d4:e1:f8:9e:
                    c3:15:d7:f9:b3:2e:0d:4f:c5:65:47:4d:73:d6:34:
                    bc:db:c3:de:75:4a:65:c7:cb:ba:7a:56:9d:8c:32:
                    10:d3:f7:f8:a7:39:0f:a9:d4:4f:43:49:4d:e6:85:
                    c1:36:e1:c0:22:4a:b1:d3:f3:2b:fb:b4:5b:81:5d:
                    e7:50:9a:89:d3:c0:3a:cd:18:a3:4a:ab:8a:5b:f4:
                    a3:ad:20:f1:5c:43:cb:c8:72:79:18:61:48:d0:a3:
                    bd:fb:57:db:f8:a3:a4:a0:26:e2:65:45:63:99:2e:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:96:68:B1:D5:E9:66:AC:2A:92:D5:69:6C:90:9B:6F:D1:57:9E:FF
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:96:10:07:27:0e:28:ac:c3:b3:e9:3d:c5:bd:4d:88:6c:
         d0:f2:6f:39:f2:b0:b4:7a:0c:7d:9f:72:69:56:ce:78:f3:7a:
         df:cc:54:71:b6:4a:79:bf:b2:01:b4:b3:46:c4:aa:bc:e4:0b:
         f2:35:40:6b:d9:d4:5c:fd:07:5f:6e:00:d8:85:53:59:71:70:
         7e:ff:97:f5:2d:39:1d:3d:f4:9a:00:60:f2:77:93:79:7d:06:
         7b:fd:d3:bc:60:8e:77:3e:00:f8:a6:cf:54:3a:7e:6e:3e:24:
         0c:0f:87:5c:c1:c8:16:9f:66:58:3e:c7:df:9e:39:49:39:95:
         74:3a:c3:da:19:14:58:16:34:d5:63:6c:00:de:b5:83:b1:23:
         ce:f7:1b:1a:d7:cc:d8:8c:14:f3:57:62:7f:8c:4e:e3:75:a7:
         78:08:9f:1b:5c:c4:2e:a8:0c:18:70:e6:89:6f:31:7d:6c:06:
         99:ff:e0:6f:0d:6f:8a:0d:e4:bd:8c:43:d6:b2:8a:28:fe:3a:
         f0:71:36:89:a4:ad:0c:3e:e9:32:ba:66:09:33:24:71:50:98:
         3d:f2:c2:d5:f8:dd:16:43:29:59:f1:87:e5:d6:87:5c:74:a9:
         81:a2:19:9d:ac:91:92:f7:e0:2f:d7:4a:07:29:26:bd:26:e4:
         da:04:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:36 2026 by rpki-client