Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
File:                     F_V0MLEEipI6idbPoqPLO_wvElg.mft (raw, json)
Hash identifier:          DoQtERvIlIiBjZJCiYYBQbysUskWqVRww9qBfulDVDM=
Subject key identifier:   E4:FF:9F:07:D8:07:3C:6E:45:26:64:84:DB:53:5C:B2:54:AC:0A:B7
Authority key identifier: 17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58
Certificate issuer:       /CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
Certificate serial:       019D292954CA60942700F0F4CBC3BA6FDF6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
Manifest number:          06E0
Signing time:             Thu 26 Mar 2026 08:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:07 +0000
Files and hashes:         1: F_V0MLEEipI6idbPoqPLO_wvElg.crl (hash: yI0aQXfSpcIQSI2BHVQZwtUT8FVtHMWhhDf49wnP6Fc=)
                          2: aLE9Xir0DQLHULbNjLo9iWRYT6g.roa (hash: zs+F0F3OMU0sN5swTUcnHITKcwgAiJ03ypADrOpExWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:54:ca:60:94:27:00:f0:f4:cb:c3:ba:6f:df:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
        Validity
            Not Before: Mar 26 08:01:07 2026 GMT
            Not After : Mar 27 08:01:07 2026 GMT
        Subject: CN=e4ff9f07d8073c6e45266484db535cb254ac0ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:55:62:d3:39:d3:c2:a8:8a:86:a2:12:24:
                    5b:03:97:6d:d6:4d:92:de:8b:33:85:47:c1:c1:1b:
                    48:f1:d9:aa:63:ef:d9:0b:53:69:b2:3f:34:f1:85:
                    bd:b9:03:74:45:0a:6c:39:69:c1:9f:4e:50:9b:9a:
                    1d:02:d2:9e:8c:aa:ec:d1:e8:b9:87:15:8c:b9:19:
                    9e:12:e9:bb:b8:d0:e8:3d:60:c6:f9:59:d0:45:5e:
                    9f:c6:19:11:bf:e1:d3:fc:ae:58:ed:59:db:8a:8b:
                    7c:1f:83:df:2f:42:64:c1:e7:9d:56:25:a4:fa:04:
                    2c:9e:f4:93:c5:57:d4:82:82:54:48:e7:b5:19:ec:
                    24:63:9e:06:55:44:55:1e:8b:b4:31:7f:e3:c4:b6:
                    34:ce:63:18:de:2f:4c:63:5d:0e:5c:55:03:90:f4:
                    56:14:5c:23:7c:a6:f2:b9:41:ed:d6:2d:26:f3:92:
                    e0:5c:ce:8f:a0:29:92:6e:16:2a:b2:bb:40:66:b6:
                    d8:cb:b6:75:e1:8b:0e:2e:b5:bd:de:a6:cd:5d:35:
                    81:47:85:8f:5c:d7:f4:58:53:b2:b7:7e:8f:84:ae:
                    36:7c:65:1f:a8:f2:42:29:d0:be:ee:08:e9:53:ec:
                    6b:51:c9:c0:53:e7:b0:40:78:b8:4d:76:49:0f:e7:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FF:9F:07:D8:07:3C:6E:45:26:64:84:DB:53:5C:B2:54:AC:0A:B7
            X509v3 Authority Key Identifier:
                keyid:17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:60:5d:f4:8e:b3:9b:ca:db:6d:5a:58:55:8e:a5:b7:d9:
         d6:99:96:2c:df:bc:00:2e:33:1f:a2:8a:c5:b9:10:89:c2:f2:
         f8:09:ae:ef:5a:fe:06:60:a7:1e:9c:f1:da:62:07:b8:70:25:
         98:33:d8:3b:8e:ef:0a:6e:b0:fd:5f:0d:c5:4b:86:7f:f2:ba:
         3e:da:16:e3:9c:92:bf:ed:17:aa:30:3b:25:b3:f3:2f:07:73:
         9f:3f:62:a1:99:62:b0:11:7e:e1:3f:93:96:7a:d1:b7:3d:26:
         5f:20:7e:4a:34:64:db:0c:de:99:9b:1d:56:29:82:72:1b:c6:
         79:2e:99:80:ba:2a:32:6b:9c:36:a0:90:e6:2a:2e:cc:e2:ca:
         d6:28:ab:c1:d8:b7:e2:3f:2e:4d:6a:81:01:a2:ad:3a:a8:28:
         cd:3b:90:fa:b7:d6:3e:c2:23:60:d9:5e:d3:2f:f6:0b:29:a7:
         c6:90:df:28:e8:42:0e:ea:62:bf:eb:8e:f2:b1:63:8d:61:a1:
         a2:3c:20:11:36:71:e1:6f:20:4d:1a:90:f5:cb:8f:00:cd:ae:
         80:db:37:9e:44:05:27:58:c1:ee:73:c5:f6:22:00:1f:13:ea:
         f6:3a:57:b4:bf:f7:09:9f:75:3b:bd:c7:29:a0:c4:9a:ae:df:
         0b:f4:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:08 2026 by rpki-client