Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File:                     r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier:          snM1oIIxNfC6vP1JS1VQ4NXgbNG7b1c81rMf5+U55cc=
Subject key identifier:   AE:14:7D:CC:C9:F3:27:FF:6F:26:84:66:58:C6:1F:D2:2C:A8:74:2E
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer:       /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial:       019D2AA9BD3D136B2DE09DC773D6F0014489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number:          0F5C
Signing time:             Thu 26 Mar 2026 15:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 15:01:00 +0000
Files and hashes:         1: 7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa (hash: AUUlni3UcNfoUVifNt5f8cw2030rnuTziXI1bU77ERs=)
                          2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: tEgmhLPRh0j/5hSS/EH7HKiZPjBo18REFtVUIe0T+E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:bd:3d:13:6b:2d:e0:9d:c7:73:d6:f0:01:44:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
        Validity
            Not Before: Mar 26 15:01:00 2026 GMT
            Not After : Mar 27 15:01:00 2026 GMT
        Subject: CN=ae147dccc9f327ff6f26846658c61fd22ca8742e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:9e:bb:ee:5e:79:aa:7d:7b:a3:83:52:45:
                    88:75:99:81:e6:c2:a4:49:8e:ab:da:72:04:53:91:
                    12:ce:0e:d0:34:e1:d6:86:74:37:b2:0c:41:65:1a:
                    7c:6a:24:07:4a:ca:a4:3e:48:c6:51:69:ee:f7:b6:
                    fd:67:89:a2:88:b6:d7:b3:8d:12:3a:fd:21:13:fa:
                    b9:7f:ed:14:1e:50:f9:d7:ae:28:38:06:06:5c:5b:
                    13:ff:3d:a4:3a:7e:39:c1:8b:93:49:3b:39:cd:5e:
                    6d:fa:95:47:72:f1:13:7f:d9:28:73:a7:b2:cf:2f:
                    37:8c:f0:d8:fd:39:4b:10:e5:7e:4b:10:c6:e3:85:
                    41:80:5c:25:0e:09:bd:52:8d:26:2c:4b:95:7d:ef:
                    6f:2c:ff:5e:39:fb:b6:0c:f4:e3:eb:a9:03:df:be:
                    4f:50:76:8b:ce:54:0f:6d:76:56:dc:02:f9:ce:aa:
                    02:23:cf:88:30:da:f5:8c:e2:ab:eb:5b:f2:34:e1:
                    27:61:7b:b5:6d:48:54:30:d2:0c:ef:1e:12:c6:88:
                    e9:d9:65:6b:f5:7a:f5:9b:df:7f:e6:6d:e4:6c:87:
                    09:e7:06:42:6a:6a:53:66:af:73:d8:a1:c2:65:b0:
                    55:40:9c:58:7d:1e:ef:03:a6:56:59:18:1d:4b:8e:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:7D:CC:C9:F3:27:FF:6F:26:84:66:58:C6:1F:D2:2C:A8:74:2E
            X509v3 Authority Key Identifier:
                keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:32:52:52:8f:d8:9a:de:a6:f4:c6:14:89:55:cd:5d:8e:
         00:cd:c6:0b:03:fa:34:99:cd:89:76:12:d5:13:0c:d9:1e:57:
         9d:e3:e3:b1:94:5c:08:76:91:f0:83:96:f1:02:06:e3:e1:1b:
         d8:ca:c2:80:73:07:09:fd:dc:9d:84:32:5b:49:91:47:90:03:
         ae:22:ab:d4:c2:1e:a4:1a:19:62:e6:d8:bc:65:6c:99:01:1b:
         e5:07:8c:3b:26:e5:53:7b:9a:60:2b:fd:9f:19:6e:d5:df:f8:
         64:d4:d3:e1:c1:68:39:62:88:19:76:d1:0e:8f:8e:79:a4:dd:
         1c:f6:dc:0c:43:d9:81:6e:1f:61:d7:b8:c7:d8:cd:34:40:1c:
         80:0b:6d:02:04:17:5f:cf:40:3f:ca:78:09:47:dc:53:0e:3f:
         95:bc:bf:99:eb:46:55:16:48:6a:a8:6e:3e:4d:c0:4d:40:2f:
         3f:fd:b5:3b:02:27:49:2d:fc:ad:cd:70:68:de:b5:e9:e5:2d:
         bd:4a:2c:12:ad:98:e2:e6:62:3b:f8:a2:d8:f7:71:8a:ba:33:
         c1:2f:45:b3:8a:35:35:0e:bd:eb:d6:55:7e:c7:56:e8:5b:5d:
         32:1d:02:a0:aa:81:35:59:e6:56:25:fb:7d:c1:a6:43:72:30:
         7d:75:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:08 2026 by rpki-client