Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File:                     aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier:          dswVu1DZbRVuZQu76DCrZD3bnj44kzHbRYQHpwmiF6Y=
Subject key identifier:   72:2C:EE:58:1D:A2:B5:CB:39:2F:58:15:B1:2D:59:8C:B5:C9:27:2E
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer:       /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial:       019D27DFB6FF2B61A32AD0DC3B746535FCB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number:          06A7
Signing time:             Thu 26 Mar 2026 02:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:05 +0000
Files and hashes:         1: 21nHooBv9-ktSOOtF_rf9bEr-vE.roa (hash: he2BZP3IQjID9ExBYsw3YnUeSyPctJDJvetlHZilXvY=)
                          2: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: wNJFdoAMwmbbbYSocig4uW+qgft7hItjC7JP0jz+Nos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:b6:ff:2b:61:a3:2a:d0:dc:3b:74:65:35:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
        Validity
            Not Before: Mar 26 02:01:05 2026 GMT
            Not After : Mar 27 02:01:05 2026 GMT
        Subject: CN=722cee581da2b5cb392f5815b12d598cb5c9272e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:80:14:6d:0b:8c:a7:90:17:e8:8b:28:41:
                    67:ff:5a:24:e8:e7:c1:76:9b:25:7f:b3:29:b3:db:
                    fb:5c:84:ca:e9:48:88:aa:21:cb:e4:b8:7d:6b:ce:
                    28:1c:97:3d:43:fd:c5:8d:9b:c7:97:c6:7f:8c:a6:
                    1a:4d:8f:78:a9:cc:54:69:d6:de:0e:61:95:4f:7b:
                    dc:f9:30:16:e2:45:29:88:e5:9b:2a:58:fc:7d:e5:
                    42:6c:8b:ff:18:9b:53:ef:7d:e6:37:ff:50:0f:e4:
                    91:e4:07:f6:07:6e:96:57:7c:6b:3e:4c:3e:30:5d:
                    bf:9e:e8:a0:ae:b8:61:b2:eb:c2:b7:cd:20:d3:be:
                    2b:07:8c:cf:cf:fb:97:60:9d:65:d4:94:cd:04:f8:
                    1d:80:aa:1f:74:03:10:32:42:c1:1a:69:d9:2c:73:
                    a9:db:6d:94:4c:a0:25:69:ee:26:6c:6e:ba:e2:f2:
                    6b:45:c1:6a:16:c6:7a:5c:e2:d8:ca:f5:0e:29:1c:
                    44:c4:81:d6:70:f8:fe:90:99:45:30:af:4e:2f:04:
                    cb:ce:c6:dd:ab:f1:84:38:29:04:80:e7:35:62:59:
                    97:cb:3a:a4:c1:85:15:e6:ad:48:76:69:c8:7a:84:
                    f6:37:2f:c7:3e:72:4a:b3:53:4e:94:aa:8f:7e:01:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:EE:58:1D:A2:B5:CB:39:2F:58:15:B1:2D:59:8C:B5:C9:27:2E
            X509v3 Authority Key Identifier:
                keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:7d:39:c1:a7:50:f2:ce:38:6d:f3:54:8a:76:13:bc:ad:
         a7:07:14:5a:02:0b:d1:15:7e:84:e8:d0:39:20:ab:fc:53:dd:
         33:47:68:86:83:3d:24:56:2f:0f:c9:01:d1:9f:03:aa:77:12:
         0c:dd:b0:ed:03:2d:a5:79:e2:05:1d:14:c0:3f:d5:ff:9a:97:
         84:1c:89:83:5e:5b:ab:b4:5d:4b:8a:42:62:e8:90:29:c7:3a:
         ba:1d:06:66:e3:5f:7c:8a:4f:07:9c:3c:58:20:8f:5e:b1:0d:
         b9:5b:09:17:c5:78:5d:79:fe:2a:74:65:7e:6a:2f:bb:7b:b5:
         7e:f7:41:43:56:62:e1:27:7e:57:7f:2b:f4:d3:75:d7:f5:05:
         e9:6d:f2:78:f1:87:2d:40:b4:65:2d:e8:31:ac:fb:f5:f4:b9:
         3c:8f:81:88:ca:6c:97:e4:9a:3b:9c:89:5c:2a:16:1a:dd:23:
         33:9e:b5:01:af:33:57:5b:f2:03:04:cd:f6:34:e3:4a:fc:c2:
         6f:68:12:40:82:54:4e:0d:d1:e3:17:45:5d:72:b4:07:a7:b9:
         75:d5:46:d0:1c:b9:6a:38:9f:ff:ca:ed:55:0d:ce:be:44:9e:
         5f:c7:1a:a4:30:69:50:76:50:dc:73:ad:fb:f6:55:07:18:44:
         ff:db:7f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:31 2026 by rpki-client