Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File:                     6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier:          3/1eNESQvhCYOed6HF3XxcK5q8ASzujvjhmfU5TbiFQ=
Subject key identifier:   B0:0E:C1:74:3B:46:8E:BF:25:B4:F5:A6:3F:C2:E5:F5:D5:8B:C0:B7
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer:       /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial:       019D2816808F72AC45863EF10B59A12FD5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number:          0549
Signing time:             Thu 26 Mar 2026 03:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:56 +0000
Files and hashes:         1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: PM8X61cKAzLsS2Eex/hQ0lL3nrBlS63DJdLmzjmsYuM=)
                          2: IPh_6iVNx496xq8P78NbeC5ann4.roa (hash: p/kpws4dnlRTMpuyDTof3NBBpdQNG/GFmv/G6ZFNtHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:80:8f:72:ac:45:86:3e:f1:0b:59:a1:2f:d5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
        Validity
            Not Before: Mar 26 03:00:56 2026 GMT
            Not After : Mar 27 03:00:56 2026 GMT
        Subject: CN=b00ec1743b468ebf25b4f5a63fc2e5f5d58bc0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:8e:46:3f:9c:fe:b0:41:23:66:e8:65:32:
                    27:0a:d3:53:b4:0c:c0:30:96:1a:c5:2d:3a:36:5c:
                    15:fe:0d:b9:88:20:44:5f:96:e9:a9:a5:ea:c6:bf:
                    6d:81:b9:1b:c3:76:29:9c:8e:2a:79:18:a0:7b:d7:
                    3c:80:13:27:99:1e:ad:be:c2:9b:ba:0a:4c:f6:f4:
                    a2:48:ae:95:b2:d6:bf:b7:c1:7e:0c:fe:8b:35:47:
                    b3:d7:2c:5e:e0:2a:5e:55:82:3a:4c:bb:b1:f3:57:
                    3a:b8:3d:ee:27:d3:28:f5:ea:31:44:db:15:ef:3c:
                    6a:64:7b:45:d8:de:a2:19:86:59:ae:db:45:1e:c5:
                    fd:75:2e:f9:38:01:2d:6d:55:23:b4:dd:e3:a2:44:
                    f4:b1:97:02:db:a8:e8:19:ff:9f:c4:02:c5:12:3a:
                    4a:46:db:88:09:26:83:98:24:bf:1d:1f:0f:b4:fa:
                    89:d7:dd:98:ac:cc:ea:79:85:2e:1e:35:64:96:67:
                    1f:7c:3d:03:0a:71:10:d3:48:5b:bf:b8:98:87:04:
                    c9:f8:85:0f:45:11:15:37:47:8d:95:db:74:42:e2:
                    a4:c1:48:a9:04:80:14:c2:e4:58:e9:80:3e:99:85:
                    09:a3:d9:b7:a4:38:d8:d9:e1:48:01:b1:06:e0:07:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0E:C1:74:3B:46:8E:BF:25:B4:F5:A6:3F:C2:E5:F5:D5:8B:C0:B7
            X509v3 Authority Key Identifier:
                keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:9e:3b:f2:81:43:17:1a:4c:d2:e4:e8:42:6b:39:a0:47:
         27:f9:71:9c:77:72:66:62:8f:88:2c:eb:06:72:6f:65:a4:d0:
         d6:1a:34:1a:a4:cf:24:e3:9f:64:5d:b7:74:59:00:46:9d:5f:
         e4:c6:54:ae:53:c3:d1:74:f7:f4:56:44:1f:e9:4f:9e:4b:2c:
         2d:37:e4:1c:e2:13:a0:84:15:19:a8:d1:4f:d8:25:c4:48:ea:
         d9:6a:03:9a:6f:af:fa:28:f6:84:8d:bb:e9:15:a1:41:2e:00:
         d8:1e:66:8e:ba:78:d2:64:86:21:8d:18:04:51:11:cd:c0:0b:
         95:e0:2c:16:6d:38:c4:a4:4b:62:95:0e:42:06:3e:07:c7:b2:
         c6:36:9d:a8:f1:81:db:90:6c:e3:10:5d:11:88:b2:2c:c7:b5:
         33:a8:d8:d5:9d:72:3f:2d:43:02:d3:0f:5c:67:77:29:fd:8b:
         c0:42:51:d1:85:c5:9f:52:5b:72:d9:21:4a:f7:1a:33:1c:4d:
         c1:b2:c4:59:5f:68:f6:e1:1e:f3:ec:a2:c8:3c:c1:e9:05:33:
         53:78:ba:96:89:15:57:07:c2:86:90:8a:5e:63:f6:10:c2:ef:
         72:3d:2a:fd:e3:d6:a8:14:61:9a:26:42:39:e4:5f:e0:18:52:
         ee:b7:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:20 2026 by rpki-client