Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
File:                     6_WDiMYxyXfqUfyttQzSCnSS9ec.mft (raw, json)
Hash identifier:          lKnbOhrrgFiH9QBgG4U0PYjBB0TTKkukQZHzKGAxiH4=
Subject key identifier:   8B:E4:E9:CE:D6:B4:84:1B:ED:6A:73:DC:67:E3:A4:67:B2:32:9A:0B
Authority key identifier: EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7
Certificate issuer:       /CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7
Certificate serial:       019D2884E465712353C4C07323D637930FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
Manifest number:          1706
Signing time:             Thu 26 Mar 2026 05:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:30 +0000
Files and hashes:         1: 6_WDiMYxyXfqUfyttQzSCnSS9ec.crl (hash: mM5iYpDBnSMB5Uz0DUd9gmSAUx2v7PkYfA7OR1ZPCA8=)
                          2: pKf2y4mr6SwsdioJuyeT8C1GN7A.roa (hash: nd+rjt63wQ19eLVnNpkeTlDLfV8bsIzijEILJh9lv58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:e4:65:71:23:53:c4:c0:73:23:d6:37:93:0f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7
        Validity
            Not Before: Mar 26 05:01:30 2026 GMT
            Not After : Mar 27 05:01:30 2026 GMT
        Subject: CN=8be4e9ced6b4841bed6a73dc67e3a467b2329a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:07:fb:09:53:37:4d:73:dd:0b:73:f6:e4:
                    31:e8:96:36:b5:9a:d0:82:b0:54:7f:0e:bd:58:39:
                    6d:2c:d7:4e:a4:89:3d:b4:b5:bc:18:93:40:f3:6f:
                    e8:a1:09:42:c6:73:75:22:c2:6a:57:17:6c:fa:c5:
                    99:6e:1d:9d:54:9c:65:28:28:e6:67:e8:90:76:40:
                    03:c5:1c:96:ee:d1:e2:1f:b8:64:35:ad:31:c0:71:
                    85:15:77:1e:a3:a5:2d:58:9d:37:01:64:62:b4:a2:
                    8c:38:74:ad:09:ed:4b:af:60:45:fb:04:c5:5b:6c:
                    77:18:47:9a:92:6e:a5:ab:50:65:72:93:cd:e4:a5:
                    76:d6:f4:c5:ca:53:a7:7a:36:8e:94:71:df:4b:4a:
                    8a:c3:08:4e:9f:7a:ee:7c:49:19:7b:c2:98:c0:ab:
                    6f:ca:9a:a5:95:c0:28:0a:01:a1:c2:2e:a5:4d:d3:
                    0c:f3:9d:e2:2a:40:cf:4e:cc:8a:d3:60:92:d4:47:
                    05:4c:d6:b0:46:d6:eb:28:a6:c8:25:fd:ef:69:8a:
                    24:8b:5b:f4:3e:bd:9b:a7:b4:44:44:8f:e1:fe:e1:
                    ea:fd:e9:eb:a2:1a:25:e1:5c:e9:ac:e6:48:e7:1f:
                    43:17:d2:bf:1c:fb:20:31:ea:7c:a2:3b:2b:b6:5f:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E4:E9:CE:D6:B4:84:1B:ED:6A:73:DC:67:E3:A4:67:B2:32:9A:0B
            X509v3 Authority Key Identifier:
                keyid:EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:47:58:ff:c8:e8:d4:e0:98:42:7a:db:2c:bc:38:b3:37:50:
         c5:15:fe:6e:69:e6:4c:cf:f4:c5:32:56:47:dc:2f:58:d1:7c:
         08:93:e8:a3:81:a0:a3:5b:1c:92:d3:fa:2e:db:30:47:ed:fa:
         71:ed:db:f1:2f:0b:0f:97:52:30:8d:8d:ec:05:95:92:69:ff:
         98:46:c9:52:c8:2c:cb:a5:f9:d7:4e:a6:9b:19:5c:b4:21:3a:
         a0:a9:9f:16:05:8f:fd:b8:1f:af:36:0b:04:ec:6b:b7:05:f9:
         69:e6:0e:74:22:5a:f7:74:a1:d9:6d:36:16:fd:56:b2:36:3b:
         71:56:17:52:ba:ac:c7:c7:28:c9:fd:56:2a:84:71:b6:d8:13:
         dd:ed:91:a7:3c:83:a5:78:3a:70:e8:fd:e0:f4:a9:ac:8e:6d:
         89:42:fd:d3:86:09:ec:07:fd:22:22:7a:fa:22:44:46:44:e9:
         05:94:77:0f:54:75:e3:6b:53:d3:33:b6:f7:9a:97:f7:c8:4e:
         d3:0f:8a:b6:5a:10:c3:8b:2d:07:cf:25:d7:9c:45:2e:d2:62:
         35:02:2d:e0:a7:e7:d3:dd:d0:c8:c8:a9:79:f6:fa:ed:06:9d:
         8e:b9:17:d9:ae:21:5f:74:7d:9a:f2:bf:ef:81:86:a2:b1:83:
         38:d7:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:22 2026 by rpki-client