Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
File:                     re6JwT1t5zqJRAS_fq-e5eQN6jM.mft (raw, json)
Hash identifier:          2iOWtuGbLDw5+h0CGj8M9QXmMPAsbm8lU1HhJQhJ2lo=
Subject key identifier:   73:48:47:FA:17:AC:3D:E0:B3:F2:FB:84:1A:AB:41:DA:CA:D3:C7:9A
Authority key identifier: AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
Certificate issuer:       /CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Certificate serial:       019D284D9BBD07A2029E77F3E262AB5A8DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
Manifest number:          08F5
Signing time:             Thu 26 Mar 2026 04:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:07 +0000
Files and hashes:         1: KSqwo9S6GeFD2Ql4Sfck8r97txM.roa (hash: 3pucYZVIvYlLfAtBYm6XXIdeR53B8iQcCe0JSNaoycQ=)
                          2: re6JwT1t5zqJRAS_fq-e5eQN6jM.crl (hash: T0mDShfFX/kZbmzNEy0paXu32mQD9xIN0wrH+xex/N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:9b:bd:07:a2:02:9e:77:f3:e2:62:ab:5a:8d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
        Validity
            Not Before: Mar 26 04:01:07 2026 GMT
            Not After : Mar 27 04:01:07 2026 GMT
        Subject: CN=734847fa17ac3de0b3f2fb841aab41dacad3c79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:70:40:77:74:b0:b4:c5:d8:92:f3:63:f1:
                    60:0c:44:42:b5:a8:95:a6:82:1a:ad:66:31:2c:ea:
                    2a:be:0e:cc:a0:01:9c:a2:67:2b:a0:08:de:77:3d:
                    d9:e1:07:b0:ae:68:4c:72:f3:d6:1e:6b:2b:3c:d9:
                    ab:ea:ae:55:64:eb:29:23:98:7c:79:54:10:c8:f7:
                    f6:1f:95:64:5b:d7:7e:62:ae:6a:54:7f:a3:6b:53:
                    da:f6:f5:44:c6:0d:31:a5:65:53:76:12:40:79:ef:
                    f9:fc:aa:53:b3:50:ef:7a:48:bc:1b:b3:2d:8c:3a:
                    4e:23:48:6e:e6:3c:7a:d6:1f:e6:6f:39:9d:0b:c6:
                    52:22:8d:59:25:a1:2c:08:2a:6c:b9:33:69:39:7d:
                    53:0b:0d:8a:77:14:3b:d3:2e:57:fd:d8:5e:30:a6:
                    49:1f:f7:bf:21:f9:5e:9f:c8:9c:8f:43:6f:99:69:
                    8d:cc:0c:ff:4b:d1:53:68:ba:51:f7:28:1b:37:17:
                    c3:c8:33:5c:79:80:cd:17:27:56:0d:ef:f3:2e:dc:
                    c6:30:53:9d:03:49:94:8e:db:bc:56:5f:49:29:4d:
                    90:01:5f:bc:6e:33:33:c5:de:00:e7:46:0f:16:4d:
                    4c:6a:d3:09:d0:69:9c:90:cd:b7:12:48:58:4d:58:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:47:FA:17:AC:3D:E0:B3:F2:FB:84:1A:AB:41:DA:CA:D3:C7:9A
            X509v3 Authority Key Identifier:
                keyid:AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:96:22:b7:2e:04:d8:94:e5:f5:a1:92:1b:62:7b:b2:ec:
         d2:b8:cc:eb:b8:5d:9a:72:2a:9d:e5:1f:0c:92:60:bb:b1:2a:
         a2:f2:d0:4b:20:6f:02:0a:aa:6a:a6:25:e2:b6:37:74:e5:7a:
         d1:63:56:75:0f:c2:c1:67:31:ac:3e:67:1e:94:7f:53:3b:f6:
         76:75:eb:a7:6e:ff:bd:f1:ab:05:d3:81:38:3f:64:d7:b7:4f:
         6d:d9:8c:a9:61:38:04:e5:e6:90:b1:5f:6c:aa:b1:02:26:b1:
         09:8d:79:76:aa:a4:5d:1e:85:d8:ab:5a:76:7a:55:87:d7:46:
         b6:dd:22:79:b7:6b:90:70:2a:7d:81:d4:44:09:8d:20:23:fb:
         bd:20:fa:7b:fc:cb:1c:7f:ab:bb:01:f0:85:27:6b:20:f6:73:
         8f:38:9d:c9:a3:69:ea:34:b8:43:0e:62:cb:0e:ad:21:b5:fa:
         03:44:35:3c:7c:99:2f:7e:1e:31:0f:11:3f:07:99:84:73:ce:
         f9:15:cf:54:66:40:43:a9:20:79:c0:02:94:c2:4d:2f:f6:38:
         79:bb:b8:c5:de:d0:ea:89:9d:dc:d1:22:5e:80:28:29:2b:05:
         9b:ff:05:69:25:38:23:36:0d:e8:c0:f7:6a:3a:43:5a:4c:03:
         9d:5f:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client