Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier:          JriMCuntB5r8L1o3qMkvdx9qOBJ5R+lkj9ZX7vl9k7Y=
Subject key identifier:   88:F2:21:63:B3:F6:7A:6C:CB:C2:BB:AA:AE:44:E1:52:2F:32:79:C6
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer:       /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial:       019D2BBC218DC7FCC142F874C871D854813A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number:          1568
Signing time:             Thu 26 Mar 2026 20:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 20:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 20:00:42 +0000
Files and hashes:         1: VFUebJHke8z497d8CsxvyTmvo_k.roa (hash: oFEmGcOuTt+GtkbTIY5IyWCbIjXB6VmI7strCzOauV0=)
                          2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: DNgUsYBoiNH7mGE+xzigph8i2RDeB2wZA6PTQqNvXLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bc:21:8d:c7:fc:c1:42:f8:74:c8:71:d8:54:81:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Validity
            Not Before: Mar 26 20:00:42 2026 GMT
            Not After : Mar 27 20:00:42 2026 GMT
        Subject: CN=88f22163b3f67a6ccbc2bbaaae44e1522f3279c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:9a:27:5d:44:89:79:e7:3b:cf:13:06:5a:
                    72:38:fc:de:ab:c0:13:b4:91:53:9e:a0:09:84:4f:
                    a1:07:95:4c:c2:8a:e7:09:e2:da:82:15:a9:8e:67:
                    32:e0:c9:57:49:4c:cc:02:41:5a:34:31:37:77:21:
                    60:4f:e9:ab:8c:85:f3:2f:68:db:8f:ba:0e:ff:cc:
                    a8:89:39:f8:03:bb:2d:84:a2:fd:5d:5d:41:a1:9b:
                    bb:68:1d:9c:a3:41:52:ae:21:a5:1d:b5:ac:c1:a6:
                    2f:e0:f0:6e:49:02:c3:89:00:f4:2e:b9:81:e4:b5:
                    14:95:80:7a:4d:19:17:35:59:50:01:7f:c7:0c:77:
                    92:3b:86:78:ae:bd:b7:2a:db:d4:3f:5b:6e:b7:f2:
                    51:da:27:df:90:b9:c0:22:c4:6c:43:51:65:01:25:
                    06:5b:ff:84:ed:54:1b:3c:9e:1e:1b:86:19:f1:3f:
                    cd:ae:0d:a2:4f:4b:88:5b:90:44:39:a4:48:96:4e:
                    7d:ca:0e:45:d4:8c:3d:98:4c:3f:73:41:98:cf:23:
                    51:9c:f4:34:1d:4c:96:3f:62:a5:7b:17:09:6b:30:
                    a2:85:ac:9c:4d:ff:d6:e0:d4:91:c7:98:77:48:4f:
                    c6:c4:66:a5:8a:6c:46:a9:b3:30:13:4c:97:e0:cb:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F2:21:63:B3:F6:7A:6C:CB:C2:BB:AA:AE:44:E1:52:2F:32:79:C6
            X509v3 Authority Key Identifier:
                keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:67:8f:8d:62:75:9d:70:cb:9f:da:d4:7c:62:d4:20:0c:
         6e:59:30:7c:3a:ca:ae:c9:27:f3:5c:63:c4:93:c6:ea:7b:bd:
         3a:6f:55:d4:de:a3:8c:fa:a6:3d:03:aa:87:f1:5a:98:62:e5:
         44:b9:3b:8b:c8:20:a5:a1:95:48:26:a8:f8:ab:c3:75:63:ff:
         de:5e:12:bd:45:6c:8b:93:13:47:9a:b7:0d:9a:6f:67:70:77:
         21:a6:e7:78:4d:f9:fa:4a:38:c0:f9:67:60:3d:9d:d6:d6:6f:
         b8:30:84:07:d5:46:62:ad:ce:65:1f:75:e7:57:5c:73:82:fe:
         f2:39:16:bb:95:00:f3:2f:ac:ff:d6:5f:05:b1:80:07:8c:3d:
         5e:e4:45:1a:83:d0:e8:09:8e:01:72:80:11:0b:7d:f0:a4:19:
         fe:9b:22:3d:4e:0d:00:60:43:4f:e4:83:f9:13:b3:5f:4f:bf:
         bc:2c:00:73:fa:d2:21:e6:bd:7f:a0:21:12:0f:bd:7b:44:ef:
         b9:eb:9a:f6:9e:14:10:8c:9a:b0:6a:ca:68:d1:2f:b1:b3:03:
         26:c6:12:f5:97:6a:7f:8a:7c:d7:27:39:3e:1e:bb:15:2d:31:
         96:61:0c:e4:0c:e9:b9:11:19:e0:e0:65:13:1a:90:1f:92:d1:
         f5:56:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:48 2026 by rpki-client