Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          BXxRk2dhZOyxMuyVXgh1N4XvW7OoBw487oQ6TFcMlys=
Subject key identifier:   21:49:1D:15:96:35:67:E3:9A:8F:33:FA:C7:73:2D:5A:C7:8A:83:C3
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       019D262806F5E3BEA48074E9A477146F2113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          07E6
Signing time:             Wed 25 Mar 2026 18:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:50 +0000
Files and hashes:         1: 4yAos7CZgWKf3gn3IrsDl-srEto.roa (hash: APm7pBB8tOvmNKA+K6EEmrpwAa/2uNe5vUUzyTIaj0k=)
                          2: Nytw89CcyDRmKPPk4sKcPeBej7k.roa (hash: /jX42tEK2pmI+UdQCYDIPEu34ud01Vw41VxxvhWNQ5Q=)
                          3: TEcoleUmbWQj5i2gknCSKR9Cd0E.roa (hash: 3NdzNvymYr9jRWoDUYOh9npss+lpEBY+eYb2MluLWK0=)
                          4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: cqCQOfr+/tRz9PUZmU9cfFzHfnGe+HaT8OiZiYL2PI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:06:f5:e3:be:a4:80:74:e9:a4:77:14:6f:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Mar 25 18:00:50 2026 GMT
            Not After : Mar 26 18:00:50 2026 GMT
        Subject: CN=21491d15963567e39a8f33fac7732d5ac78a83c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:66:fd:b0:66:19:0b:22:4c:9d:bf:23:d5:
                    9c:7d:18:0f:46:49:cf:97:d2:2d:28:8d:16:b2:8c:
                    3e:be:be:2e:3e:78:ae:86:44:25:6e:65:be:88:90:
                    3c:3b:08:a6:85:e1:82:c1:f6:8f:7b:96:16:c2:05:
                    06:df:88:c2:b8:e4:75:2f:a5:32:0f:65:c9:0e:ea:
                    91:a7:c0:b3:ec:82:e1:1c:16:a6:91:39:aa:56:19:
                    6c:d1:65:ed:4c:f5:15:da:cd:30:20:7a:dd:56:df:
                    7a:93:62:94:db:1b:3e:89:63:eb:d1:0f:30:67:8d:
                    f3:12:df:4c:88:1c:01:0a:4c:57:17:db:39:f8:42:
                    7e:97:1e:47:e6:2d:da:c6:f1:1b:14:99:84:da:4c:
                    48:4a:d3:8d:0f:68:56:4d:bf:46:ed:2b:99:54:03:
                    b7:92:4e:7c:e4:87:8f:5a:6c:71:45:41:0c:98:d6:
                    30:a9:77:a8:92:00:25:69:31:db:18:01:cd:14:8c:
                    be:b0:38:1b:63:f5:6e:98:44:c5:88:29:a2:44:93:
                    df:51:c8:f9:79:22:a2:15:69:02:51:c0:d8:e4:b7:
                    63:dc:67:c5:90:e8:b4:51:5c:b7:d3:7a:13:b4:f3:
                    df:a8:67:56:3f:2b:40:00:8f:ca:d0:dc:a7:a5:40:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:1D:15:96:35:67:E3:9A:8F:33:FA:C7:73:2D:5A:C7:8A:83:C3
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ea:a0:86:29:1f:7d:52:b7:07:51:86:36:31:70:fc:c0:3e:
         d1:c7:93:21:c9:c6:0b:2b:ad:4e:ca:bf:62:b3:7b:1e:b6:aa:
         43:99:0f:c0:ef:95:eb:d9:f5:36:08:50:ca:80:2f:18:e6:24:
         86:2e:aa:f3:4a:2e:37:1e:b3:4f:78:e4:1e:1a:12:a9:98:0c:
         e7:b2:18:c2:d3:7a:9a:3d:24:f8:bb:0d:c5:89:85:7a:e1:d9:
         46:c7:d4:a9:99:75:ec:04:1c:ed:a0:77:22:35:e8:81:91:f9:
         28:34:3f:91:28:1c:59:58:cc:13:1b:54:00:31:b8:33:6a:22:
         c7:6f:63:90:14:fd:b3:a0:49:76:76:39:a2:8f:72:be:67:37:
         0a:da:fb:24:98:3f:8f:1a:44:eb:b7:bc:a2:98:39:07:56:f4:
         17:1a:ee:01:9e:40:01:73:5d:ad:d9:86:6f:14:24:4c:0c:4d:
         c3:d8:a0:07:b6:7c:63:2b:47:08:a4:47:51:60:c8:46:df:ac:
         40:61:c9:32:3a:72:a4:c1:2d:5a:5f:a8:46:7a:0b:be:dc:21:
         12:b9:97:af:53:ad:df:78:61:c9:e2:26:09:ab:1f:18:ce:d2:
         3a:b7:b0:c7:8c:57:6c:48:20:6c:1f:3c:e0:35:11:ec:b7:86:
         ed:b8:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:14 2026 by rpki-client