Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
File:                     6p_5HGsceo7QKEKyXJsNBjipBCQ.mft (raw, json)
Hash identifier:          TnGEUlL908/Ne3bKRhPcQjxzUmtgojmwlR9hF6hvGhE=
Subject key identifier:   DF:DF:E2:EA:53:32:23:48:41:F7:65:14:FC:7F:07:2A:DF:E9:06:A2
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Certificate issuer:       /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial:       019D32D0FCA2CAA979537D1AF95E18DFEF90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
Manifest number:          125F
Signing time:             Sat 28 Mar 2026 05:00:50 +0000
Manifest this update:     Sat 28 Mar 2026 05:00:50 +0000
Manifest next update:     Sun 29 Mar 2026 05:00:50 +0000
Files and hashes:         1: 6p_5HGsceo7QKEKyXJsNBjipBCQ.crl (hash: jRoV8YWKjIakfXXuVLs75J+mLq3A45DQ3fNRqVrbnAE=)
                          2: DDzoLugVKHUosG6LnSil1zPyskM.roa (hash: JyTfSK96wfTfZYA0hAe3wAK9JdqgYlzHq8L5Cr8t14Y=)
                          3: bLtqLTgyo3jayEk8nrvrKrCEoZ0.roa (hash: NexaJDA35Gn2YwrlEltRLjOpLBsw+HT7zXIl0vhUiEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:d0:fc:a2:ca:a9:79:53:7d:1a:f9:5e:18:df:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
        Validity
            Not Before: Mar 28 05:00:50 2026 GMT
            Not After : Mar 29 05:00:50 2026 GMT
        Subject: CN=dfdfe2ea5332234841f76514fc7f072adfe906a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:93:cc:05:9f:50:7f:a9:c8:9f:9b:af:98:
                    ec:c0:f1:18:3e:04:43:4a:76:e8:0e:5f:94:be:e5:
                    4c:22:c7:55:bc:56:58:8b:7f:63:ea:3c:7d:dc:7a:
                    ab:f1:ce:50:0f:95:0d:c3:05:01:49:ca:5f:ce:83:
                    ab:d5:35:7e:35:a3:cd:df:55:e4:67:c4:0f:7e:96:
                    9e:fe:97:f3:2e:98:90:f2:e1:41:90:6a:c7:59:9f:
                    f3:6b:a8:d5:16:03:f6:d4:7f:51:c7:26:ad:7d:e3:
                    55:36:9d:8d:a5:68:89:1f:22:a9:38:3a:95:e0:d7:
                    6c:81:12:58:dc:b8:71:52:ec:c4:1e:33:0c:66:2e:
                    7c:b3:18:d7:9f:6f:c7:c0:59:fc:a3:7e:ef:65:8e:
                    58:d8:b9:5e:fd:67:0a:7c:b3:f9:72:9a:d7:61:99:
                    30:38:81:7c:c8:f5:24:de:a2:7c:33:48:39:b1:a9:
                    c5:85:fb:99:46:a3:2c:ee:19:43:42:cc:1d:d3:81:
                    f2:93:39:79:95:7d:a8:1d:c7:52:fa:a4:9c:29:d5:
                    fc:b3:0c:43:63:e7:7f:c2:db:6a:a6:90:27:4e:f2:
                    bd:67:9d:a6:e9:c2:fd:b5:53:2d:c4:62:df:b1:10:
                    a8:65:35:28:5b:3f:50:60:ea:f9:42:aa:3c:a6:2d:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DF:E2:EA:53:32:23:48:41:F7:65:14:FC:7F:07:2A:DF:E9:06:A2
            X509v3 Authority Key Identifier:
                keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:04:a0:7e:7f:69:a4:e0:00:be:08:9a:8b:2c:d0:09:d8:
         9c:5c:ea:7a:60:a5:13:a5:f1:f5:6f:60:cc:59:ec:12:4e:7f:
         21:f5:10:0f:22:16:06:f4:a0:f6:84:16:30:88:ad:bf:f4:af:
         63:c6:28:60:12:63:f8:45:a4:00:dd:bb:83:95:50:16:d1:08:
         10:2f:66:01:a4:f3:83:36:30:11:3e:1f:11:18:d6:25:61:35:
         38:d2:20:fa:ac:cb:b8:e2:ab:36:ec:6e:05:4a:fb:d9:07:20:
         d5:df:dc:fa:37:e4:a8:ff:5f:1f:92:83:45:1f:a1:a2:77:cd:
         b1:a9:47:8b:de:83:6e:86:3b:11:5a:aa:72:80:39:b1:60:36:
         3e:07:5e:06:b3:b0:e4:00:79:ae:e2:77:81:01:de:04:06:cd:
         04:5e:42:b1:16:a0:05:5d:d2:03:63:1c:3c:3b:ae:35:e4:46:
         41:6a:e1:47:72:1c:bb:6f:e1:91:f4:5e:ee:ec:cb:98:cb:93:
         4e:ae:35:e3:85:23:6a:cf:f5:36:2b:64:4f:fe:27:38:d5:e5:
         3a:fc:a2:62:e8:57:db:15:0f:bd:ff:61:8f:24:90:40:de:79:
         09:85:18:2d:7a:3b:9f:73:fc:e2:c5:02:55:51:80:8f:12:c9:
         b8:d3:5d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0y0Pyiyql5U30a+V4Y3++QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWZmOTFjNmIxYzdhOGVkMDI4NDJiMjVjOWIwZDA2Mzhh
OTA0MjQwHhcNMjYwMzI4MDUwMDUwWhcNMjYwMzI5MDUwMDUwWjAzMTEwLwYDVQQD
EyhkZmRmZTJlYTUzMzIyMzQ4NDFmNzY1MTRmYzdmMDcyYWRmZTkwNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux2TzAWfUH+pyJ+br5jswPEYPgRD
SnboDl+UvuVMIsdVvFZYi39j6jx93Hqr8c5QD5UNwwUBScpfzoOr1TV+NaPN31Xk
Z8QPfpae/pfzLpiQ8uFBkGrHWZ/za6jVFgP21H9RxyatfeNVNp2NpWiJHyKpODqV
4NdsgRJY3LhxUuzEHjMMZi58sxjXn2/HwFn8o37vZY5Y2Lle/WcKfLP5cprXYZkw
OIF8yPUk3qJ8M0g5sanFhfuZRqMs7hlDQswd04Hykzl5lX2oHcdS+qScKdX8swxD
Y+d/wttqppAnTvK9Z52m6cL9tVMtxGLfsRCoZTUoWz9QYOr5Qqo8pi3WiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/f4upTMiNIQfdlFPx/Byrf6QaiMB8GA1UdIwQY
MBaAFOqf+RxrHHqO0ChCslybDQY4qQQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgt
MDBiN2JmMzJlY2Y4LzEvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgtMDBiN2JmMzJlY2Y4
LzEvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxsEoH5/
aaTgAL4Imoss0AnYnFzqemClE6Xx9W9gzFnsEk5/IfUQDyIWBvSg9oQWMIitv/Sv
Y8YoYBJj+EWkAN27g5VQFtEIEC9mAaTzgzYwET4fERjWJWE1ONIg+qzLuOKrNuxu
BUr72Qcg1d/c+jfkqP9fH5KDRR+honfNsalHi96DboY7EVqqcoA5sWA2PgdeBrOw
5AB5ruJ3gQHeBAbNBF5CsRagBV3SA2McPDuuNeRGQWrhR3Icu2/hkfRe7uzLmMuT
Tq4144Ujas/1NitkT/4nONXlOvyiYuhX2xUPvf9hjySQQN55CYUYLXo7n3P84sUC
VVGAjxLJuNNdGg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:16:59 2026 by rpki-client