Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          36aKE4muhEGuiHc1vTzf/cjXKoRppR1C4OFj2UlXEFk=
Subject key identifier:   85:F8:9B:1B:81:0E:50:96:F2:5D:7B:83:EC:8C:40:EA:BA:C2:61:97
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       019D262824096927928439A04AF843456FFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0E6A
Signing time:             Wed 25 Mar 2026 18:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:58 +0000
Files and hashes:         1: 4PMv8_ymAb6gmQxdDs7h5SW_fe4.roa (hash: k8WIMVFcRpJlyoFhqw0jvwfZZEEvQUGCcnVD6bn529U=)
                          2: JlsqZ6riHbHZDT1nfft-TTbSWJw.roa (hash: kmDoBIgAR0ST5nz2Xe1yvElvTFNkMoNTPUVA43pptOA=)
                          3: PGilyYWIAdJXl1Z4a7mDUWcc6hY.roa (hash: OyU3lX3y+vevyB1v8G/5Shvc1n4shWouA9CyTHgNWTA=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: SbJ8cRvrLC4f8rjldXiE5hSRAqdR+j0ck1eeNG/V+Y0=)
                          5: oca5XIEdccD_mFy30LwMDBppQlc.roa (hash: oOccAqwZohR6NOKyRdyvweUbqEHR+Ucd2tYEtvhmMDk=)
                          6: v6fpbc3f88fzRgqHWXPj9c1L4JU.roa (hash: r6mtMFirgqkFt30+Dwt74KwfgRsel57h9zfbWTjXGm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:24:09:69:27:92:84:39:a0:4a:f8:43:45:6f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Mar 25 18:00:58 2026 GMT
            Not After : Mar 26 18:00:58 2026 GMT
        Subject: CN=85f89b1b810e5096f25d7b83ec8c40eabac26197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:ba:0e:19:27:08:70:b9:bc:8f:56:d8:9a:
                    e5:8e:21:67:d7:46:f3:91:2f:7e:d7:d4:d2:fd:70:
                    0e:ab:1c:4d:a5:5b:95:15:5a:0b:23:7c:f5:44:bd:
                    33:25:5f:50:88:72:50:e9:1b:34:c2:12:a8:dd:ba:
                    30:f2:cc:73:02:5c:f7:16:a4:c4:f3:23:f5:ee:c5:
                    ba:57:d2:f8:bf:55:47:c1:f0:4c:bc:a0:d5:b6:1d:
                    e3:36:c5:12:9f:fc:6f:b7:00:e5:cd:73:05:17:dc:
                    9f:d5:34:f7:9a:50:c7:c2:35:c2:0b:dd:c0:a4:7d:
                    10:dd:f6:e3:4c:45:b8:99:58:a7:af:f3:38:10:ab:
                    52:a6:1a:00:d1:d3:3f:0a:1e:03:73:3f:67:24:8c:
                    68:40:26:2c:5f:0f:80:48:80:ce:d7:91:91:42:16:
                    7b:d9:6d:36:1a:7e:e7:7a:ba:2f:94:99:b8:c3:43:
                    8b:37:38:17:cf:5b:21:27:95:75:ff:4f:19:dc:6b:
                    df:31:dc:5e:9f:3d:eb:1f:3a:a1:9e:07:ec:fe:73:
                    d6:b2:c8:76:a7:40:55:3b:6a:37:d7:94:62:fd:40:
                    98:a5:05:9b:86:49:3a:ca:a6:57:5d:cc:69:42:77:
                    35:60:64:64:fc:13:2a:e9:70:86:cb:7c:91:0e:77:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F8:9B:1B:81:0E:50:96:F2:5D:7B:83:EC:8C:40:EA:BA:C2:61:97
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:24:d2:e4:ab:c1:f9:88:17:a2:90:09:b2:14:ab:2a:ae:be:
         46:f5:90:ac:97:9b:7e:a3:94:81:88:44:84:96:33:f9:a2:80:
         3e:89:55:cf:ed:57:f1:c5:9f:ef:42:4d:34:6e:d5:1e:c0:e4:
         1a:d5:0d:bd:b3:a7:0c:b3:72:41:a4:d4:94:05:a2:9e:9d:06:
         c1:38:7d:a7:51:c4:30:20:2d:dc:2c:f5:7a:0f:00:3f:94:29:
         04:b6:d2:7b:bc:5e:2d:32:d1:89:0a:62:c5:5a:e2:e4:a4:47:
         d3:50:01:72:af:1d:37:49:f1:4d:ec:76:15:ab:74:46:c2:56:
         5a:56:90:a8:b0:cf:f3:bf:f0:88:f7:69:bf:30:78:6f:54:58:
         30:c1:48:53:97:c4:ff:00:dc:a5:0e:50:37:99:c0:e9:11:3d:
         e0:49:88:74:30:fa:76:30:24:c2:1b:4e:bb:c8:cf:0a:bf:2d:
         55:59:57:f5:32:38:8b:31:df:6e:42:7f:b3:b0:9b:bc:b7:56:
         88:06:82:66:27:b1:e1:c3:3f:04:ec:2d:17:4d:af:00:32:d7:
         82:e0:e8:ca:59:22:14:62:75:d4:e1:6a:49:ed:67:a5:d0:e2:
         1f:1b:78:a4:e2:2f:32:db:ca:31:a5:f4:8e:15:30:94:32:39:
         00:39:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:57 2026 by rpki-client