Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          PS4j7d6WJJOgnlSLh0SPNbymRzP+uac4doi4zjgwJd4=
Subject key identifier:   70:4D:09:DD:3D:3B:63:1E:91:00:77:CB:36:7F:A0:B3:39:A7:DD:43
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       019D0AE892FF09B05DDA979CA1EC445ADED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          1877
Signing time:             Fri 20 Mar 2026 11:01:47 +0000
Manifest this update:     Fri 20 Mar 2026 11:01:47 +0000
Manifest next update:     Sat 21 Mar 2026 11:01:47 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: dP7WbedGzQyc1at/jc8CNynKz53lVEaaGkiiCcscX6c=)
                          2: HICvEHKXiwO8tUnXw2THhezIHTg.roa (hash: m259oPsH+iF/F010gAj+3VHPjH7EbopMEIXrwuwaC7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0a:e8:92:ff:09:b0:5d:da:97:9c:a1:ec:44:5a:de:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Mar 20 11:01:47 2026 GMT
            Not After : Mar 21 11:01:47 2026 GMT
        Subject: CN=704d09dd3d3b631e910077cb367fa0b339a7dd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:ca:96:fd:4b:ac:1b:76:82:a5:1a:5f:e8:
                    f1:12:4e:71:c1:80:d6:3d:13:4d:33:52:21:3f:76:
                    62:43:27:c3:3f:c0:e2:b7:ea:f3:14:54:ff:82:ca:
                    d8:f9:e3:f4:c5:24:9b:35:cd:12:5e:86:88:7f:9d:
                    f9:35:2e:72:ee:bf:cb:c2:82:44:e0:d0:e7:1d:cc:
                    c6:5c:f4:5b:85:53:1c:53:62:af:20:46:9a:d5:3a:
                    b3:09:3a:23:2c:6e:25:eb:3d:81:8f:99:ac:c0:2a:
                    f5:c7:42:de:ed:e1:21:80:48:0e:40:81:f0:a2:dd:
                    1e:e1:51:fd:fa:34:f4:4a:6b:d9:de:d2:08:a2:c3:
                    a7:ca:1d:bb:72:d3:51:50:47:12:75:31:5e:c3:4f:
                    7e:26:66:f5:54:4b:71:ff:0f:f2:35:4d:50:14:d3:
                    7e:4f:53:42:2c:c0:9a:51:45:d0:8b:d8:4d:37:f5:
                    a8:bb:80:a9:b8:c3:3b:c6:04:5e:a0:5c:45:2a:89:
                    08:4d:19:f1:da:ba:a5:3e:84:69:2e:4a:35:8a:9d:
                    fe:05:a6:5d:02:96:92:2d:a4:8b:2f:37:d5:ab:4a:
                    22:54:d3:55:9f:e6:28:45:b6:3f:39:07:01:8a:25:
                    2e:41:a6:11:9c:bc:a3:a8:59:e6:a9:b5:5e:f4:67:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4D:09:DD:3D:3B:63:1E:91:00:77:CB:36:7F:A0:B3:39:A7:DD:43
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:15:6d:90:13:74:22:ac:6d:9b:72:55:f3:0a:e2:5a:5d:fb:
         6a:d8:de:7e:72:ff:a7:c6:57:8e:0a:d6:63:f7:06:cd:d6:ae:
         ba:80:36:94:46:89:d2:c2:40:81:6d:09:e7:3b:b6:41:72:76:
         f7:1d:27:d7:fe:7b:86:dd:58:01:10:8a:33:48:5e:85:1b:49:
         0f:9a:64:66:4a:8a:36:17:dd:ab:f0:de:da:9d:d4:f2:ba:79:
         f8:9d:e3:53:e2:04:2e:6d:ed:75:39:37:38:08:c3:f6:55:b6:
         57:d4:ea:03:74:e8:bb:8c:4c:bf:6d:c6:8f:09:57:f5:1d:95:
         12:94:ec:69:fb:4a:36:05:47:f0:7b:e1:91:56:b6:a1:9a:d9:
         74:de:36:d6:6b:68:ce:04:69:b2:df:df:87:f7:c0:63:b6:68:
         b1:e0:3e:e7:61:87:3f:e1:6d:2e:05:27:6e:96:6d:3f:95:db:
         b3:66:34:8d:88:c8:18:86:a2:11:cd:0a:ce:6e:8a:f0:59:b7:
         b7:87:18:69:96:10:73:8d:30:eb:af:c0:3c:9d:76:be:72:e1:
         21:2a:2f:32:3e:c5:96:d7:89:79:61:e6:67:6c:4c:36:f0:07:
         07:3b:99:72:96:11:3e:f1:cc:48:79:8c:1f:9b:71:cf:ec:d6:
         09:a5:f1:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0K6JL/CbBd2pecoexEWt7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTY1MDU3ZjRhYTA5OWIwYTkxOWYzZjBiZDRhNjQ4OGUz
MGMzNDgwHhcNMjYwMzIwMTEwMTQ3WhcNMjYwMzIxMTEwMTQ3WjAzMTEwLwYDVQQD
Eyg3MDRkMDlkZDNkM2I2MzFlOTEwMDc3Y2IzNjdmYTBiMzM5YTdkZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBHKlv1LrBt2gqUaX+jxEk5xwYDW
PRNNM1IhP3ZiQyfDP8Dit+rzFFT/gsrY+eP0xSSbNc0SXoaIf535NS5y7r/LwoJE
4NDnHczGXPRbhVMcU2KvIEaa1TqzCTojLG4l6z2Bj5mswCr1x0Le7eEhgEgOQIHw
ot0e4VH9+jT0SmvZ3tIIosOnyh27ctNRUEcSdTFew09+Jmb1VEtx/w/yNU1QFNN+
T1NCLMCaUUXQi9hNN/Wou4CpuMM7xgReoFxFKokITRnx2rqlPoRpLko1ip3+BaZd
ApaSLaSLLzfVq0oiVNNVn+YoRbY/OQcBiiUuQaYRnLyjqFnmqbVe9Ge/kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBNCd09O2MekQB3yzZ/oLM5p91DMB8GA1UdIwQY
MBaAFOiWUFf0qgmbCpGfPwvUpkiOMMNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEt
ODYzN2FiZjczMWYzLzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEtODYzN2FiZjczMWYz
LzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRVtkBN0
Iqxtm3JV8wriWl37atjefnL/p8ZXjgrWY/cGzdauuoA2lEaJ0sJAgW0J5zu2QXJ2
9x0n1/57ht1YARCKM0hehRtJD5pkZkqKNhfdq/De2p3U8rp5+J3jU+IELm3tdTk3
OAjD9lW2V9TqA3Tou4xMv23GjwlX9R2VEpTsaftKNgVH8HvhkVa2oZrZdN421mto
zgRpst/fh/fAY7ZoseA+52GHP+FtLgUnbpZtP5Xbs2Y0jYjIGIaiEc0Kzm6K8Fm3
t4cYaZYQc40w66/APJ12vnLhISovMj7FlteJeWHmZ2xMNvAHBzuZcpYRPvHMSHmM
H5txz+zWCaXxtA==
-----END CERTIFICATE-----
Generated at Fri Mar 20 14:05:00 2026 by rpki-client