Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File:                     hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier:          F4DAWoZ1E2Ws7Ut2WTBJt0tUeybUCB8Fof1mvuFdMOM=
Subject key identifier:   05:60:10:D0:A8:DF:CB:0B:09:A6:A3:EC:D5:6A:7C:86:89:7C:AE:F8
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer:       /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial:       019D273A9427DBCE25BA4179137D461D41A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number:          181C
Signing time:             Wed 25 Mar 2026 23:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:43 +0000
Files and hashes:         1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: ozENczkEgHVQGqxkIysG56Mh5hEuM55V03GAC2ISoOI=)
                          2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:94:27:db:ce:25:ba:41:79:13:7d:46:1d:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
        Validity
            Not Before: Mar 25 23:00:43 2026 GMT
            Not After : Mar 26 23:00:43 2026 GMT
        Subject: CN=056010d0a8dfcb0b09a6a3ecd56a7c86897caef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:3a:38:8f:e1:93:3a:bc:bc:ac:19:d3:9f:
                    ad:97:4d:0b:49:14:e5:87:a1:50:a6:70:42:e5:0a:
                    a2:13:3c:ad:ba:d0:86:74:58:24:62:81:68:83:ff:
                    15:eb:70:dc:f2:80:26:4b:65:a4:7d:63:e3:c6:93:
                    df:23:37:59:16:63:ce:cf:1b:0d:f2:fb:9e:df:92:
                    58:86:bb:ed:21:d7:60:53:f3:91:34:2f:a2:7d:6b:
                    48:2e:61:e6:57:0a:0d:df:48:c4:b6:d3:f3:1e:ae:
                    03:b9:15:90:77:66:71:be:64:7a:75:fa:92:b9:60:
                    8b:f4:3c:b5:8c:80:d6:da:4c:80:09:bb:ec:d1:0d:
                    d3:0f:3b:fd:00:81:80:18:4f:70:45:eb:aa:71:8e:
                    e9:48:94:34:10:6c:4a:ec:7a:f3:9a:0f:27:78:9a:
                    2e:a5:ce:b1:4f:7c:7a:7f:8a:75:c1:7f:12:fe:cb:
                    58:ce:9d:79:d6:91:8e:73:e5:30:0c:95:67:2d:a2:
                    bd:de:b6:17:42:ea:83:e0:1e:09:be:38:d2:8e:60:
                    bc:ef:cb:84:76:54:fc:64:7c:49:2d:45:d5:cf:1b:
                    9c:a1:5e:26:1f:64:0f:9a:b1:4f:fd:fc:d6:81:28:
                    87:09:fb:ac:21:1e:ab:30:49:7e:a8:91:cd:41:7e:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:60:10:D0:A8:DF:CB:0B:09:A6:A3:EC:D5:6A:7C:86:89:7C:AE:F8
            X509v3 Authority Key Identifier:
                keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:38:0f:b3:3c:d3:30:8e:3c:4e:d3:bc:27:fb:b3:78:99:1d:
         83:03:78:27:06:bc:31:5e:a2:aa:e7:d9:cd:2c:15:b2:fe:f6:
         25:48:2a:cd:4d:7c:d9:3e:9d:42:9d:98:c9:c8:ba:e3:f0:2b:
         11:78:f8:2e:fd:05:c1:04:30:0b:c9:ec:53:af:14:d4:63:a7:
         92:e1:09:7b:de:b8:aa:aa:ca:71:d7:a8:ef:df:17:81:44:f7:
         58:17:dd:44:60:11:f5:ae:d2:cf:b0:05:70:5d:a6:e5:eb:40:
         98:ae:22:3f:5c:84:95:64:3e:86:46:b3:72:6d:9f:a9:6b:4d:
         05:7e:67:9e:7f:b1:32:f5:11:21:e7:95:76:ec:d2:fe:dc:e1:
         7c:42:61:c5:5e:24:3a:b0:3c:d1:d6:3d:4f:fd:2a:06:3b:cc:
         f8:4f:0a:ce:82:49:34:1c:9c:07:25:24:6c:b0:7f:c9:ab:ea:
         fe:c2:b3:37:61:6e:b0:a3:81:c6:35:6b:c3:ab:c7:1d:aa:e8:
         3f:8f:eb:26:77:6c:12:9e:e4:c3:d3:4e:e7:3e:8f:91:80:0f:
         70:6d:69:3c:f0:5e:86:9f:1d:48:ee:65:0e:45:b9:f9:0c:31:
         e0:3d:3b:59:d5:63:17:c4:ad:5d:5c:d9:d1:8e:cd:02:1c:a5:
         72:dd:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:46 2026 by rpki-client