Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          21ngMX7bSWeJ4OFaDmuKuk1hSS7TjsZiJv6BTTvV8Bo=
Subject key identifier:   71:29:79:53:B3:26:68:77:47:A0:CC:F9:F8:9B:90:8D:DE:2E:A3:DA
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       019D29297317B956F7C650F4E9EC7D6620A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          0367
Signing time:             Thu 26 Mar 2026 08:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:15 +0000
Files and hashes:         1: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: 1wWvRawpYTxpTuoKhxIiShYbYvB4E0Ffcka4IOh8EUk=)
                          2: Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa (hash: JdPihEsZ6tT2+sczntCGGr/PDdYGd+kbINCzgVJa7xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:73:17:b9:56:f7:c6:50:f4:e9:ec:7d:66:20:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: Mar 26 08:01:15 2026 GMT
            Not After : Mar 27 08:01:15 2026 GMT
        Subject: CN=71297953b326687747a0ccf9f89b908dde2ea3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:27:80:3c:8d:3c:14:43:18:07:f9:b4:11:
                    79:98:d1:b6:65:e3:e3:da:18:c2:8a:07:66:f4:1f:
                    ca:4c:40:7c:07:3d:9b:2f:3b:f6:7c:4c:9a:1f:e5:
                    53:a8:52:94:8c:96:80:ea:c5:ee:17:f0:9f:ed:08:
                    ae:b3:9c:be:d4:8c:38:a4:d6:eb:2d:1d:bf:62:6b:
                    b8:5c:dd:45:8f:d1:43:73:82:36:75:77:b5:62:63:
                    d9:a5:6f:6d:a9:19:33:f0:d0:1b:0c:d1:9f:a6:a5:
                    34:d0:7f:83:a0:8a:df:44:55:c9:4b:fa:83:24:d5:
                    a1:a9:02:1f:53:b4:9c:33:c3:69:69:86:3c:14:d2:
                    15:2a:b9:d9:c2:0e:b6:a2:44:72:e0:57:a7:79:8c:
                    73:33:5b:ba:bc:fc:8b:52:5a:62:05:6e:ca:05:5a:
                    d4:2a:35:2b:86:1b:e6:5a:c4:29:19:79:55:fa:a9:
                    f1:01:9f:d2:d8:b8:b7:e2:31:cb:b7:62:81:ac:72:
                    ba:0a:36:b0:e4:33:aa:fe:ff:1e:c0:17:ed:62:d9:
                    72:62:13:9a:49:fd:f2:7e:66:8b:fa:4f:32:22:c4:
                    83:e5:fe:4a:c3:51:f9:89:18:ba:ba:1c:8f:25:27:
                    f1:16:9b:f5:96:bf:06:ef:26:eb:b9:ae:52:d6:f6:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:29:79:53:B3:26:68:77:47:A0:CC:F9:F8:9B:90:8D:DE:2E:A3:DA
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:7c:51:ec:08:c4:50:d3:98:f0:e5:7a:9f:80:c3:79:8f:
         f9:47:19:e7:aa:88:17:f8:10:26:54:ad:d6:39:ab:8b:00:98:
         a9:61:21:4a:e2:b7:64:85:40:bc:67:5a:f3:10:d0:89:74:7a:
         2f:e1:74:07:50:a0:2c:e8:bf:06:0d:b4:aa:c4:8d:d6:fd:ac:
         04:16:07:c1:26:f5:ad:57:9b:57:d6:dc:c0:50:39:81:51:68:
         bc:c6:19:45:49:52:8a:e3:8c:ce:bc:b3:0b:21:64:4e:24:6a:
         d3:25:7f:c1:6b:3b:8e:10:b2:55:8a:b8:d8:2b:12:c0:d9:d6:
         04:4a:5d:61:d5:fb:85:39:3b:0f:ee:bf:c0:2a:2f:fb:3e:f2:
         22:da:db:44:b0:5d:35:ea:98:a8:ba:f6:9e:c1:2a:bc:21:d3:
         f9:be:35:a6:b3:c6:a7:5a:bd:9f:1a:69:3c:86:ad:58:17:d4:
         2a:7a:49:92:68:1d:9f:74:2c:48:88:23:b7:0f:bc:48:a3:95:
         c1:55:1a:2a:bf:c0:f1:bb:d7:db:69:0d:ac:65:c5:da:51:d8:
         bc:e9:1c:c4:62:65:13:85:6b:77:6e:b4:f0:3c:3a:ec:a3:dd:
         bd:01:11:be:1f:f1:92:21:8c:a1:8c:88:10:dc:5d:96:c3:34:
         96:2a:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:09 2026 by rpki-client