Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier:          Ob43oRENkl0kd88LmhZnbiU38gaarAH74/RbjAs8KMs=
Subject key identifier:   22:69:F0:E2:69:A7:E5:84:1E:51:90:78:29:84:54:68:52:B8:E9:5C
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       019D26CD66CBF093789CBA6E003931AE8E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number:          1231
Signing time:             Wed 25 Mar 2026 21:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:28 +0000
Files and hashes:         1: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: UXewWhNkE7BvrB/luFh1Hp+5Ozo96dP0usMbVqexjTk=)
                          2: t0AVsfA9UiQqjW_t5dPb3nmC2rs.roa (hash: fCkC5bZnOUjJ4RgM4loxWys//SbXBNG4IrH2ok9kPJQ=)
                          3: uPlVBkUpo1ExrOH-ryhMZzzg4VE.roa (hash: i7u4A65jcZSKUSSb+jR2XNvvNO6njReiGIDIfrcj8i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:66:cb:f0:93:78:9c:ba:6e:00:39:31:ae:8e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: Mar 25 21:01:28 2026 GMT
            Not After : Mar 26 21:01:28 2026 GMT
        Subject: CN=2269f0e269a7e5841e5190782984546852b8e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:b6:49:02:92:ba:9f:86:ee:25:ce:4e:56:
                    db:84:52:e2:7d:8b:ba:9f:c8:94:46:d2:60:a6:1b:
                    ed:84:a7:d2:fd:6e:8b:af:8a:08:b0:56:e6:e6:05:
                    2f:73:28:39:98:28:89:31:81:8c:fc:c4:8d:ac:74:
                    f2:21:0f:11:de:a3:90:7d:50:ff:5e:4f:63:93:e8:
                    e8:6b:a9:ed:13:62:14:73:8a:28:b6:82:98:14:b4:
                    df:65:ef:af:d0:46:a8:f7:3e:92:46:f7:4e:63:8e:
                    e7:5e:87:25:d2:60:56:5e:ec:af:ed:28:6f:3f:c9:
                    4e:00:be:38:55:45:a6:66:34:f1:40:8f:b0:dd:ac:
                    44:44:58:83:57:5e:1d:c0:44:f7:18:b9:3e:03:57:
                    62:c0:f3:88:09:2c:ba:ea:61:c8:7a:31:a6:e5:9d:
                    ac:82:70:c7:d8:3f:fa:10:11:e7:c3:61:7b:70:68:
                    13:30:ad:9e:f2:18:8e:da:31:3d:58:05:6b:e8:b8:
                    ef:6a:97:b2:b4:52:9e:e4:3d:3d:b4:c7:fc:ea:66:
                    a4:44:6a:9f:b0:6f:3c:eb:e8:4a:bb:9c:b0:a5:61:
                    c1:0b:4f:c5:71:22:57:59:91:dc:c1:92:02:d2:b5:
                    d9:6e:9b:4c:ac:2b:8e:fa:49:89:f4:ef:09:21:3f:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:69:F0:E2:69:A7:E5:84:1E:51:90:78:29:84:54:68:52:B8:E9:5C
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8e:04:0e:d1:2b:d3:db:46:e9:b4:fc:a9:fc:ef:64:06:4f:
         6a:5f:38:93:ff:8f:61:66:b8:ed:c1:1e:cf:26:21:47:fb:60:
         82:b7:8c:ec:f4:50:11:77:47:0c:66:c1:82:c0:a4:6c:49:d3:
         1e:fb:3b:15:c7:6a:16:b5:ff:d2:23:c6:41:93:82:3d:18:9f:
         74:7f:5b:cf:d8:c9:e9:a1:34:a8:62:47:d6:a0:f9:23:73:20:
         fd:19:fe:c6:d0:58:17:e7:28:0d:2d:cf:13:92:50:67:9b:0e:
         62:14:41:0b:0e:5c:39:11:e4:0b:9d:01:71:ac:7c:14:71:18:
         aa:20:ce:0e:9d:8d:cc:74:00:99:63:0a:54:ef:0f:3d:f8:77:
         b5:24:36:1e:55:bf:58:53:91:02:20:61:ef:0d:ca:f1:c3:37:
         0e:6d:7c:bb:0d:e2:26:3c:e3:b2:60:e1:5b:80:c3:b8:8a:5a:
         07:c1:6c:1f:b7:85:52:0f:be:74:cc:8d:54:ef:30:c7:8e:d2:
         3f:3e:7f:bb:f7:8d:b0:3c:70:ec:01:0e:be:0a:2a:2c:5f:a0:
         e5:52:05:a0:67:86:de:41:20:0c:cf:2b:1a:97:c6:46:7f:8c:
         a5:4a:fc:ce:b0:c3:c0:8f:01:62:06:ea:a2:e8:e0:15:09:b2:
         b7:bd:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:19 2026 by rpki-client