Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          RU+pYcr7uGGmmZ1XRcCxHG228oyXzQfRssrb8U3sGb0=
Subject key identifier:   0E:64:BA:2C:7F:41:C9:8C:A8:1A:74:6E:8C:E5:87:60:21:FE:6A:A6
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       019D2816F5F99715A25839D61C3B66880965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 03:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:26 +0000
Files and hashes:         1: 3DCZ-Mv186YLYlz12p43qxYrdsQ.roa (hash: MAo0fMa4FAhaSrzzVpFcgzHGhsEEGECkBY0BEzNu0vE=)
                          2: E5SHZgdxifg4-rxz4DglmtrwprA.roa (hash: 0xdEKgQxPN2OpEvUqOddmXgAqhJN1IK8nPrXEJoW1Cs=)
                          3: J1ydi4Et1q8uYKr7Ygish278DLI.roa (hash: C9aTweYfWQpV7Wk0pD8HIPWyDKNMHmNZmmSHmVruHaI=)
                          4: PND82GDJi5vegTIdci62s9dAQqc.roa (hash: jkmmCqkHC2UjkaUZ86j5LXiFG7IRKzk8SsnGsOu6+ec=)
                          5: REMrVft6-3BwYQLK6fqYfOn2QWw.roa (hash: GZrljwugshzBvr1+cT1OWZSlqZAHUQOjzX24grxVfmI=)
                          6: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: HAKsNC4UBH6DHndWnbkya7BcuGqNRLeWO6VNYEVYt4k=)
                          7: tPefU0s5JWS-GwxuGYkWVr1R9EY.roa (hash: rPOxfcwdSw3acy+hgzTKa3QcAYlRDAhIxoaqGNxcfGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f5:f9:97:15:a2:58:39:d6:1c:3b:66:88:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Mar 26 03:01:26 2026 GMT
            Not After : Mar 27 03:01:26 2026 GMT
        Subject: CN=0e64ba2c7f41c98ca81a746e8ce5876021fe6aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:60:f1:91:c3:67:da:0c:ef:d3:79:e4:f6:
                    c2:be:0d:5f:45:d1:4e:cf:19:06:06:82:d2:6b:0e:
                    ad:9c:72:7c:64:73:36:7d:cd:55:e2:c5:e7:55:ac:
                    c0:67:d4:59:17:41:13:e6:18:4e:aa:10:3a:28:98:
                    1f:6e:e2:97:12:74:10:02:e9:75:9d:6d:9f:fe:1b:
                    cf:24:4d:8a:73:cd:ea:93:c4:03:2e:a4:e1:d2:58:
                    78:e9:62:aa:13:9c:b9:84:d0:8a:16:04:2d:45:f4:
                    86:02:98:2b:3c:6b:e9:4b:58:8f:14:f9:69:4d:ff:
                    d6:db:2a:51:43:e3:b5:0d:49:9d:0c:02:64:f7:f8:
                    52:9c:5e:d7:d1:d8:03:19:e2:b4:16:78:90:4e:75:
                    73:46:b3:6c:c9:21:58:09:cc:e9:b5:29:7c:24:65:
                    06:7a:52:d7:ea:26:05:30:88:a9:2f:65:f2:bb:62:
                    00:05:9f:e3:3f:32:9a:b8:70:a4:f8:13:87:7e:9b:
                    8e:fb:b9:ba:90:50:de:05:05:e5:0c:d4:b5:27:2a:
                    9a:4e:4d:1d:b7:57:b9:78:af:39:a3:f6:d0:4b:dc:
                    14:62:0f:ed:8d:52:25:20:8b:38:a1:a5:98:5f:0c:
                    f2:69:9b:99:ee:7c:70:05:5d:07:43:b2:00:7a:36:
                    4c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:64:BA:2C:7F:41:C9:8C:A8:1A:74:6E:8C:E5:87:60:21:FE:6A:A6
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5a:50:30:86:f6:64:34:ea:9a:d4:8d:13:06:68:8c:c6:22:
         c9:70:84:ea:78:d6:68:7d:02:25:2c:10:01:27:d2:4f:1b:d7:
         98:6b:c9:6b:31:8b:26:70:83:7c:2f:3c:75:c1:ea:76:e5:09:
         ef:f8:64:85:08:b8:2b:f8:95:05:66:69:a8:c0:68:93:a2:c5:
         48:bc:7e:54:17:79:23:98:1f:4f:cb:7d:c2:d0:14:5a:f9:c3:
         d1:6c:25:3a:a6:d6:9c:4b:8d:db:00:a5:1d:3d:79:df:45:a2:
         3f:49:4b:12:92:86:bb:2a:5e:0e:dc:80:7f:b8:6a:53:1f:c2:
         25:e8:c3:14:be:89:d1:f3:06:53:de:e5:b6:37:48:f9:73:12:
         62:ff:d4:72:e0:a0:e0:bb:37:68:75:4c:7f:3e:44:2a:a0:51:
         69:84:73:8c:92:8e:bb:33:78:a1:7f:98:e6:be:ae:4f:57:29:
         76:67:be:3e:b0:17:7c:5c:4f:5a:3a:c0:a7:34:94:2d:88:62:
         62:10:2f:c3:6d:92:d6:7e:bf:db:17:0e:19:b5:23:0a:f3:3a:
         7d:33:27:20:c5:33:71:82:ed:5c:3e:fb:87:fc:26:9f:36:35:
         2a:38:63:6c:88:4f:eb:f2:85:e1:68:8b:b7:8c:7a:7d:aa:ab:
         58:2e:99:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvX5lxWiWDnWHDtmiAllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm
ZjBlNWIwHhcNMjYwMzI2MDMwMTI2WhcNMjYwMzI3MDMwMTI2WjAzMTEwLwYDVQQD
EygwZTY0YmEyYzdmNDFjOThjYTgxYTc0NmU4Y2U1ODc2MDIxZmU2YWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Zg8ZHDZ9oM79N55PbCvg1fRdFO
zxkGBoLSaw6tnHJ8ZHM2fc1V4sXnVazAZ9RZF0ET5hhOqhA6KJgfbuKXEnQQAul1
nW2f/hvPJE2Kc83qk8QDLqTh0lh46WKqE5y5hNCKFgQtRfSGApgrPGvpS1iPFPlp
Tf/W2ypRQ+O1DUmdDAJk9/hSnF7X0dgDGeK0FniQTnVzRrNsySFYCczptSl8JGUG
elLX6iYFMIipL2Xyu2IABZ/jPzKauHCk+BOHfpuO+7m6kFDeBQXlDNS1JyqaTk0d
t1e5eK85o/bQS9wUYg/tjVIlIIs4oaWYXwzyaZuZ7nxwBV0HQ7IAejZMvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5kuix/QcmMqBp0bozlh2Ah/mqmMB8GA1UdIwQY
MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt
NmFhYjJiMWI5MjJjLzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj
LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVpQMIb2
ZDTqmtSNEwZojMYiyXCE6njWaH0CJSwQASfSTxvXmGvJazGLJnCDfC88dcHqduUJ
7/hkhQi4K/iVBWZpqMBok6LFSLx+VBd5I5gfT8t9wtAUWvnD0WwlOqbWnEuN2wCl
HT1530WiP0lLEpKGuypeDtyAf7hqUx/CJejDFL6J0fMGU97ltjdI+XMSYv/UcuCg
4Ls3aHVMfz5EKqBRaYRzjJKOuzN4oX+Y5r6uT1cpdme+PrAXfFxPWjrApzSULYhi
YhAvw22S1n6/2xcOGbUjCvM6fTMnIMUzcYLtXD77h/wmnzY1KjhjbIhP6/KF4WiL
t4x6faqrWC6Zeg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:38 2026 by rpki-client