Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File:                     6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier:          cT6NuG5KodoPTmNJPcVy6V2j6cYXG0EvIFsbnxo5Q4s=
Subject key identifier:   54:5B:94:15:7C:38:30:04:CC:96:03:C4:90:7D:E1:84:7A:D1:19:AC
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer:       /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial:       019D284D5BE55702BC31D29F083B5D537594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number:          118A
Signing time:             Thu 26 Mar 2026 04:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:51 +0000
Files and hashes:         1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: wxXt65D8R7Tn/gTV1Q5OImZpWTZ54EBrFs56EK+SVu8=)
                          2: SEhILHygTvrckViFuTbzVqD8wFo.roa (hash: YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=)
                          3: mb-aWZ5_d3ag789UTUZQ7IaflbA.roa (hash: hsap3kqEKhxhExKW9nXN0i5BJCJKmqUW77rfHPyUXL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:5b:e5:57:02:bc:31:d2:9f:08:3b:5d:53:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
        Validity
            Not Before: Mar 26 04:00:51 2026 GMT
            Not After : Mar 27 04:00:51 2026 GMT
        Subject: CN=545b94157c383004cc9603c4907de1847ad119ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:7b:a2:36:44:80:2f:a2:c6:07:bc:47:46:
                    d3:52:07:f5:f1:09:1d:32:4a:2b:ef:22:84:1a:a5:
                    50:64:77:06:c2:ca:ec:f5:60:bc:c9:f0:62:5b:44:
                    d4:d7:1e:98:61:01:dc:e0:9f:49:70:0c:a2:e4:ab:
                    a8:ac:27:bf:c9:11:69:12:0f:49:5a:ba:5f:d9:72:
                    59:56:e9:3c:ec:26:46:fd:ba:e5:80:59:cf:a5:ae:
                    60:20:50:d1:fc:de:70:47:59:03:1d:ce:f0:b4:63:
                    85:09:de:48:b7:d5:b0:57:e8:14:34:75:18:34:a1:
                    71:a9:78:cd:0d:66:a2:54:03:c9:61:a4:bb:09:2f:
                    79:01:46:19:13:86:bf:68:55:77:a1:20:d0:39:f6:
                    0f:e1:78:21:cd:21:f1:85:ab:d8:49:ab:60:49:b3:
                    fd:fd:15:8d:a8:4b:f1:93:cb:a4:4b:c2:ca:1f:16:
                    17:6c:15:f2:9a:87:e2:fc:92:01:92:a4:31:a3:b8:
                    5f:83:74:23:33:c1:80:bf:7c:84:c7:74:7a:fe:49:
                    3a:10:2d:96:3e:47:ed:64:10:d4:f7:2f:e5:32:5c:
                    86:64:3c:f8:e2:bb:a0:43:7a:22:2c:58:01:88:ee:
                    4e:67:d9:0c:c7:f9:7d:c0:54:98:a2:75:ed:e3:b5:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:94:15:7C:38:30:04:CC:96:03:C4:90:7D:E1:84:7A:D1:19:AC
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b4:b0:45:5a:0f:74:bb:67:8a:89:b7:1a:50:ea:27:e9:b6:
         b6:3e:6f:23:78:30:27:3f:b3:b8:d9:02:4e:86:28:c0:a5:72:
         5e:8c:d7:f6:3b:20:e0:5d:c3:72:94:44:92:6f:f4:cd:51:c0:
         b2:73:26:22:55:59:1d:b7:23:2c:0a:bd:9c:0c:6e:4f:41:2c:
         43:b1:64:34:fd:b1:c3:05:91:7e:00:5a:81:a8:2d:d2:55:da:
         fc:c9:77:cf:0c:ca:b7:4d:95:7a:15:d1:d1:5a:09:3b:15:5f:
         f8:9d:e7:47:b1:93:5a:36:40:3f:59:72:02:25:dd:a7:c7:30:
         56:e7:8d:b4:ba:80:01:97:74:f8:57:85:a6:6f:62:4f:1c:37:
         d3:c1:ee:54:73:5b:31:3f:96:18:40:70:f8:55:e7:c0:4b:e0:
         0c:e5:51:97:ce:39:b4:58:9a:6e:fe:83:03:f4:f3:a7:48:aa:
         1e:8e:fb:b2:c0:8b:b7:5c:5f:fa:81:0d:6d:ef:e8:5e:de:71:
         45:e7:44:50:6d:4d:73:9d:44:ed:d8:05:15:c5:af:2f:0d:9f:
         9c:4d:80:ad:66:29:e5:f2:16:f2:2b:1f:df:a2:bf:ae:2f:71:
         7c:a8:07:72:6f:b8:42:bf:f5:1a:72:92:79:0f:50:16:81:1a:
         61:9a:36:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:19 2026 by rpki-client