Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File:                     6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier:          UuVgUDefnPIpqMikWNQkK2cSeNwFdNmxrNeUW2CziKo=
Subject key identifier:   45:B0:0F:D9:55:85:54:6C:71:58:9B:8F:85:D6:CD:74:10:98:DF:9B
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer:       /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial:       019D25BAB6088EE2769DA363542DD610275F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number:          0629
Signing time:             Wed 25 Mar 2026 16:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:26 +0000
Files and hashes:         1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: BCBC15e7rRu8JdybbR2MLcuhCmDKcqxXe/osiPHA7Qo=)
                          2: XXpcSIWvTG-ujhC6WFKAP7xbCew.roa (hash: 8DYns3VAIMoO5AUluTPjCUWoA3CUpaSLrzipyJ93fJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:b6:08:8e:e2:76:9d:a3:63:54:2d:d6:10:27:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
        Validity
            Not Before: Mar 25 16:01:26 2026 GMT
            Not After : Mar 26 16:01:26 2026 GMT
        Subject: CN=45b00fd95585546c71589b8f85d6cd741098df9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:d8:95:71:06:c6:ed:af:81:57:99:15:55:
                    eb:0b:ab:4a:cf:bc:e6:c0:a1:61:27:df:52:40:51:
                    7d:64:1b:84:e2:94:32:41:84:f9:51:15:1f:dd:e6:
                    cf:a6:ce:72:37:68:61:7a:ec:5f:93:68:62:e2:16:
                    d8:74:0c:90:75:ca:76:37:07:54:a5:7d:32:d0:88:
                    c9:aa:c2:c6:b7:5a:04:60:0e:13:b1:ac:3b:38:60:
                    23:c9:5a:7b:4b:d3:e6:d6:bb:87:b1:fb:52:9e:d7:
                    ec:66:c1:7b:d8:0d:d3:86:e8:ca:91:af:1a:53:09:
                    35:d1:c2:33:08:eb:50:b6:68:e6:7d:f4:c1:34:a7:
                    66:2c:b5:02:88:60:76:8f:25:95:c6:80:66:29:13:
                    b0:67:3a:9e:b4:50:6d:71:2e:5a:c3:d1:42:d3:37:
                    4f:33:19:11:58:29:70:5a:22:32:ec:05:07:eb:f1:
                    1d:48:04:16:b9:28:38:69:4e:ef:b8:d1:0e:1e:b3:
                    b9:8d:5b:68:42:1c:91:e7:0f:f2:50:9e:a8:59:93:
                    72:23:59:c2:aa:97:a5:85:9e:ae:7f:d4:ce:19:ba:
                    64:c7:66:10:03:a0:5c:5f:86:9e:89:88:72:42:18:
                    6b:ec:9f:b9:b1:37:ba:f4:fd:b4:b7:ff:3d:3a:80:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B0:0F:D9:55:85:54:6C:71:58:9B:8F:85:D6:CD:74:10:98:DF:9B
            X509v3 Authority Key Identifier:
                keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:a5:d7:3e:82:05:46:18:09:bd:5f:fb:6d:18:52:c8:d3:
         7c:f5:8c:ce:48:14:3d:da:7e:41:8c:a5:67:ec:1a:52:ff:f8:
         f5:1d:8b:ba:96:44:28:73:7a:52:aa:cd:fb:0b:80:b9:11:9d:
         45:06:2a:d4:97:aa:c2:a1:16:1e:05:1f:99:06:6a:04:d0:52:
         13:bb:a7:4b:29:64:a4:31:62:ec:76:03:fc:6f:8c:d8:78:f9:
         65:45:a8:65:7e:c4:32:90:86:0e:19:4d:57:e0:92:fc:51:00:
         29:be:5f:f9:fa:f7:d4:83:cf:45:ce:95:f1:35:cd:44:05:68:
         6f:b9:2e:1a:1a:cc:93:60:0c:22:69:e3:87:10:18:39:ee:e3:
         87:f2:ea:4e:e3:44:23:f4:88:bc:90:86:d5:c9:c6:86:16:76:
         03:61:84:9c:08:79:22:45:5b:7a:0f:43:ad:74:bd:e9:f1:78:
         1e:cf:4a:0e:c3:23:b0:98:b6:41:a2:56:2f:bc:0a:d1:3f:44:
         f6:1f:4c:2b:c2:fe:4f:54:07:41:d9:86:60:80:2d:b9:19:6c:
         3d:a1:a8:86:20:3d:47:fd:1c:bd:7d:3f:8a:33:20:70:ba:8b:
         ca:64:57:0f:b2:04:99:da:54:f7:25:5e:ae:ce:a1:5d:48:f3:
         28:c0:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:29 2026 by rpki-client