Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File:                     6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier:          LWcDh56rKlWKIVZwSLvd81KDs92esRxKNx+rmDlseak=
Subject key identifier:   CC:59:B6:B9:3A:8A:5F:E6:A6:FF:09:A1:A4:92:84:AA:5D:EB:70:00
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer:       /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial:       019D265F92B2F53FDBC5A893EEEE75812523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number:          0FE0
Signing time:             Wed 25 Mar 2026 19:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:30 +0000
Files and hashes:         1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: HIL79msVzOXSQHAud2Wg7InL37ZJpCv0Me5Ao9d5Xjc=)
                          2: CdMLNjkWN_LbBmbtyqVRIvBxVHQ.roa (hash: 86QotpjDcKjFxnBx3ug0BvDhMYnHrgdBwrKCM9Nq8eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:92:b2:f5:3f:db:c5:a8:93:ee:ee:75:81:25:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f4510444a17add7327146152943495ababb968
        Validity
            Not Before: Mar 25 19:01:30 2026 GMT
            Not After : Mar 26 19:01:30 2026 GMT
        Subject: CN=cc59b6b93a8a5fe6a6ff09a1a49284aa5deb7000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:60:69:97:08:36:b9:13:86:82:b0:d5:e1:
                    57:c1:93:00:9c:98:72:b7:28:10:f0:24:99:bc:c7:
                    ed:5c:c4:6a:b4:e3:ea:75:42:85:d7:b8:16:05:dd:
                    24:56:11:7a:f4:28:db:64:50:41:a0:34:45:c8:4a:
                    b4:46:ad:4f:c4:ec:14:62:11:79:13:d0:23:aa:db:
                    72:60:7a:c1:90:c1:b4:cc:fa:dc:39:43:f3:97:e9:
                    ee:09:8b:65:be:8d:56:8d:dd:7e:ff:8c:fd:21:a5:
                    7f:92:bd:d0:f3:60:18:a5:ec:9e:f7:bd:18:4c:86:
                    2d:13:48:ea:fc:78:fe:15:23:87:0f:24:80:2f:2d:
                    d2:fd:e3:73:62:b7:ce:91:85:15:3d:70:06:ac:70:
                    11:1d:58:05:2a:99:e3:e9:9b:60:79:bb:9a:5d:d0:
                    34:35:82:0c:78:42:e7:0b:4b:26:2c:9c:42:4a:ba:
                    42:59:82:6b:88:c8:a7:c9:c5:e3:08:42:d9:f8:46:
                    4a:84:38:47:3c:5b:d5:e1:a4:9d:fb:40:9d:2b:05:
                    da:ac:79:64:a5:a7:e3:09:73:0a:86:ff:5e:c3:3d:
                    d2:76:84:34:3b:85:73:9d:40:f7:33:1d:ab:61:8c:
                    92:92:0d:fa:0c:c1:db:32:4c:f1:2a:f4:d0:95:3f:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:B6:B9:3A:8A:5F:E6:A6:FF:09:A1:A4:92:84:AA:5D:EB:70:00
            X509v3 Authority Key Identifier:
                keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:b3:a0:be:e4:b2:05:b8:b0:8b:dd:2e:5b:b4:36:5f:da:
         2b:30:11:c1:7e:f9:15:d7:0f:e0:24:24:02:cf:5b:c3:44:cf:
         b7:a5:37:27:5e:a2:e3:2b:d5:0e:41:64:5f:ad:8a:61:4b:64:
         da:2b:c2:9d:62:86:6b:47:3d:e4:aa:8e:ef:95:93:62:e2:96:
         bd:c8:8a:b5:58:3d:0a:cc:e6:ea:f4:a5:8b:76:a2:e4:16:6b:
         50:64:90:7d:8f:ac:82:36:51:f0:49:10:56:ed:49:2c:ee:2a:
         1b:4c:9e:fb:1c:2e:3f:73:c7:e8:16:e7:ac:f1:42:9d:02:b8:
         c2:c5:10:30:c8:51:a4:9c:f4:f0:da:0c:9d:91:0a:0b:7a:3c:
         c9:48:b4:a4:5e:77:2b:0b:15:43:37:f0:3a:ef:f7:ed:4c:2e:
         e8:f9:32:56:a2:bd:ac:19:fc:f1:4e:2a:d8:23:4d:0a:76:5d:
         9b:86:6a:95:6c:6c:24:3f:d2:a4:06:9c:ae:3b:f7:b7:7f:b6:
         2c:a2:73:73:b3:82:ca:19:5c:5b:4d:22:29:bd:25:92:e2:33:
         2a:11:89:bf:7d:38:69:96:ca:11:bf:77:34:e6:d2:1c:d3:4d:
         ea:ca:2a:ed:6a:22:bc:78:85:55:0a:1e:fd:92:e0:9e:d6:74:
         6c:f3:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:39 2026 by rpki-client