Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File:                     cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier:          en8KuA2SVfQ45WpNI7+k/JnZsOs8ygwkQi5g81DZko4=
Subject key identifier:   69:0E:A0:E0:07:3C:32:78:E4:32:A5:4C:FA:39:E0:F7:A2:80:FB:2F
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       019D284E793DD13BE1272A7F49A97F6B35BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number:          0F83
Signing time:             Thu 26 Mar 2026 04:02:04 +0000
Manifest this update:     Thu 26 Mar 2026 04:02:04 +0000
Manifest next update:     Fri 27 Mar 2026 04:02:04 +0000
Files and hashes:         1: JjXMuecgBzxuqyS3slTwiSnr5mE.roa (hash: wyze/y0gn9suGrltw+Ca8tC8dvYUzoHSpwIJPVVFCho=)
                          2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: JjDq1OXmhPwVp16D6SBjhbYwHrVbV76fa1jX79F74HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:79:3d:d1:3b:e1:27:2a:7f:49:a9:7f:6b:35:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: Mar 26 04:02:04 2026 GMT
            Not After : Mar 27 04:02:04 2026 GMT
        Subject: CN=690ea0e0073c3278e432a54cfa39e0f7a280fb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:e7:b0:ab:7f:7e:73:49:5c:14:38:55:20:
                    1d:58:0e:f2:2a:43:69:c6:24:83:f5:e7:2c:93:7a:
                    7f:4c:32:5f:b5:0a:49:87:a9:61:f2:39:0a:a3:f3:
                    28:2d:e4:db:02:c6:04:a0:a1:f4:fa:40:64:00:16:
                    e1:28:fa:a7:fd:1f:b7:f0:f4:a1:f8:a2:82:c3:08:
                    98:e5:c4:5e:99:42:34:80:ef:97:d2:d2:e5:90:69:
                    a6:7b:dc:5a:15:f2:0d:c5:fa:bd:de:c5:38:e9:a7:
                    9e:11:a5:54:1b:45:50:92:a8:e6:a4:d1:11:a4:c8:
                    e4:13:26:49:9a:4f:b2:66:00:88:2d:ef:61:64:ed:
                    15:7d:e1:65:80:11:43:21:be:bf:ac:fc:e1:9b:2b:
                    8e:ad:a2:28:57:42:bb:44:8a:db:c8:14:f7:78:b6:
                    0c:06:a9:e6:3a:45:a7:e4:2f:3f:3c:55:58:b5:49:
                    06:b5:03:57:5c:1e:2e:e4:16:64:6d:85:c9:b0:72:
                    ec:9b:50:56:13:f8:68:70:3f:d2:66:80:59:35:eb:
                    a9:5c:df:05:e5:5c:a3:a2:84:d4:92:2f:ad:a6:6e:
                    f8:56:47:b6:fb:c6:38:37:19:09:1e:3c:cd:26:1d:
                    92:15:4e:4b:cc:07:b1:ae:35:a7:40:26:7b:b1:a5:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:A0:E0:07:3C:32:78:E4:32:A5:4C:FA:39:E0:F7:A2:80:FB:2F
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:d8:3b:cf:e1:05:f3:93:e6:a1:cf:73:0f:a8:61:49:95:
         f0:7b:95:d1:a3:dc:17:bc:aa:00:32:91:b4:53:de:9e:7f:81:
         44:fd:cd:31:28:d6:30:9d:6d:98:3a:42:38:8a:8d:db:7b:b2:
         22:74:9b:72:e5:0c:80:20:9c:31:d2:9a:81:6e:3a:f8:46:a9:
         e3:f2:cf:d7:3c:fb:18:1a:a2:28:86:64:0f:75:ae:12:ec:27:
         04:7a:2e:dc:e3:82:26:e0:a7:9a:f6:2d:bc:a6:bd:3d:0a:90:
         be:07:9a:4f:36:b3:2f:81:34:a2:bb:d9:24:73:41:18:6f:35:
         e9:2c:f5:f7:fc:84:85:e6:d9:ef:02:5f:89:ae:f8:8c:3a:c2:
         33:e6:71:ad:8c:f0:7f:2e:09:94:2f:54:34:3f:22:f4:61:28:
         26:91:14:bf:f4:36:7d:51:56:1f:87:32:67:ad:16:29:11:40:
         0a:a1:5e:31:52:d5:3f:f8:0a:33:e5:50:b3:dc:cb:e4:ca:13:
         a3:8c:3a:a1:b9:97:1a:88:2f:70:b5:d0:b7:56:06:d5:65:b5:
         8c:c1:d1:42:dc:87:08:a8:28:5a:7c:69:21:26:be:a2:c5:61:
         9a:10:b6:3e:1c:81:c0:36:45:95:b6:b5:f3:7d:80:2a:4d:ac:
         09:5d:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:21 2026 by rpki-client