Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File:                     W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier:          6tdhvoI1lSrPcQ6NYR5N66ExJj30C7tt8YNJKlNlReE=
Subject key identifier:   B2:D5:6F:3F:B6:F3:6B:2A:CB:14:58:EE:A0:55:01:34:0C:C0:1C:A1
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer:       /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial:       019D2772884BD95680FE7A2D84D6B71C8B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number:          0C5F
Signing time:             Thu 26 Mar 2026 00:01:50 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:50 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:50 +0000
Files and hashes:         1: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: p8JBXmX+31BKBRmHJmyKrmlcHK1lQHNDVR6o+0JYcWQ=)
                          2: hANHew_LKnwXLhQEqSyCSLozpjo.roa (hash: dvAoBldq4IsXBYE3jIxDiPUa2vvECDMQ4VTSUJ1/ngo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:88:4b:d9:56:80:fe:7a:2d:84:d6:b7:1c:8b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
        Validity
            Not Before: Mar 26 00:01:50 2026 GMT
            Not After : Mar 27 00:01:50 2026 GMT
        Subject: CN=b2d56f3fb6f36b2acb1458eea05501340cc01ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:9e:f5:c4:13:b5:a6:ea:b9:7a:9a:6a:a6:
                    f1:21:40:ad:98:fe:57:c7:6f:87:e5:88:4d:8f:56:
                    73:84:3e:30:ec:90:60:c2:da:71:7f:9d:30:10:28:
                    69:61:c1:b0:99:e3:49:53:a4:19:61:f9:6e:01:06:
                    d4:08:ac:c9:3b:c9:e6:ed:dc:d7:e2:18:c1:ee:72:
                    9f:25:78:cd:e2:3a:d0:00:df:d6:b6:b7:ab:74:44:
                    92:78:14:af:25:26:30:b3:99:5c:a6:fe:ae:74:22:
                    57:80:d6:f8:24:bd:d8:69:89:75:92:a8:8f:3f:04:
                    26:cd:51:9d:35:05:68:a3:e3:b6:97:fd:33:19:c5:
                    6a:85:c1:fa:0d:b0:44:4c:c1:e9:2b:50:1a:a2:7a:
                    14:10:d1:95:72:91:e4:5c:7c:9f:2c:2c:85:8f:f7:
                    54:a0:b9:9e:22:b4:15:25:88:3f:9c:69:b6:47:43:
                    14:10:93:83:d8:14:e8:fb:4c:c3:5f:76:5b:b8:74:
                    2d:ca:31:5e:af:f5:f3:1b:dc:e0:d2:84:6c:1e:d6:
                    1b:50:2a:26:f8:04:8f:12:8a:32:7e:0a:b0:d6:0c:
                    27:67:df:10:f7:c5:32:34:6e:95:b3:96:5e:83:d2:
                    7c:65:cd:63:ec:e7:fd:05:52:e5:39:cf:8b:77:7d:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D5:6F:3F:B6:F3:6B:2A:CB:14:58:EE:A0:55:01:34:0C:C0:1C:A1
            X509v3 Authority Key Identifier:
                keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:df:dd:09:16:e8:a8:ec:8c:7c:af:02:fd:6d:ef:30:cb:
         d5:37:3e:4e:bf:a5:32:95:64:d4:28:3e:38:59:87:bf:4e:84:
         81:77:ee:3e:b7:5b:1f:3e:52:66:f4:95:eb:a5:8b:4a:b9:32:
         99:cf:21:3d:43:02:85:02:5d:6c:18:4d:8a:f0:3d:5e:e6:2e:
         c3:42:d1:f4:43:52:2b:7e:18:6d:6e:ab:18:45:12:e3:8d:81:
         38:58:64:64:66:d5:16:c0:eb:cd:41:03:96:9d:69:24:8a:f1:
         e2:a7:13:8d:f2:95:44:dc:8d:89:e5:5d:23:88:2b:e9:b9:29:
         18:8d:6d:bc:47:d8:8b:66:4c:cd:fc:ed:16:bc:77:b9:29:84:
         c3:36:7a:02:6d:32:0c:bc:da:c7:f7:d0:14:7e:3e:b9:30:f9:
         a5:89:3e:62:7d:93:ae:f0:52:bd:ac:bf:a1:ac:e3:c0:51:ac:
         cc:b2:38:a1:45:d7:f1:1c:99:81:2f:52:58:e7:f0:3a:64:58:
         46:31:77:86:2e:63:08:85:86:df:6b:12:11:7e:65:85:b3:74:
         89:52:d2:54:e5:41:c7:01:d8:e4:05:d4:58:b2:e4:33:cd:e8:
         d2:c6:5f:a4:09:a6:05:65:d3:19:e3:c4:6e:27:28:05:60:38:
         71:e4:7d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncohL2VaA/nothNa3HItGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYWJjYWExMGEzMzYwNzJlYmMwODIwYTZkZjBiZmE0ZGM1
Y2ZkYWEwHhcNMjYwMzI2MDAwMTUwWhcNMjYwMzI3MDAwMTUwWjAzMTEwLwYDVQQD
EyhiMmQ1NmYzZmI2ZjM2YjJhY2IxNDU4ZWVhMDU1MDEzNDBjYzAxY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbqe9cQTtabquXqaaqbxIUCtmP5X
x2+H5YhNj1ZzhD4w7JBgwtpxf50wEChpYcGwmeNJU6QZYfluAQbUCKzJO8nm7dzX
4hjB7nKfJXjN4jrQAN/WtrerdESSeBSvJSYws5lcpv6udCJXgNb4JL3YaYl1kqiP
PwQmzVGdNQVoo+O2l/0zGcVqhcH6DbBETMHpK1AaonoUENGVcpHkXHyfLCyFj/dU
oLmeIrQVJYg/nGm2R0MUEJOD2BTo+0zDX3ZbuHQtyjFer/XzG9zg0oRsHtYbUCom
+ASPEooyfgqw1gwnZ98Q98UyNG6Vs5Zeg9J8Zc1j7Of9BVLlOc+Ld33DlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLVbz+282sqyxRY7qBVATQMwByhMB8GA1UdIwQY
MBaAFFuryqEKM2By68CCCm3wv6TcXP2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEt
MTAwZTViNjVlNjcyLzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEtMTAwZTViNjVlNjcy
LzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv3f3QkW
6KjsjHyvAv1t7zDL1Tc+Tr+lMpVk1Cg+OFmHv06EgXfuPrdbHz5SZvSV66WLSrky
mc8hPUMChQJdbBhNivA9XuYuw0LR9ENSK34YbW6rGEUS442BOFhkZGbVFsDrzUED
lp1pJIrx4qcTjfKVRNyNieVdI4gr6bkpGI1tvEfYi2ZMzfztFrx3uSmEwzZ6Am0y
DLzax/fQFH4+uTD5pYk+Yn2TrvBSvay/oazjwFGszLI4oUXX8RyZgS9SWOfwOmRY
RjF3hi5jCIWG32sSEX5lhbN0iVLSVOVBxwHY5AXUWLLkM83o0sZfpAmmBWXTGePE
bicoBWA4ceR9mg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:54 2026 by rpki-client