Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          7NTX7w3Z16E0n1A5oRlntPMsb9PrHNuAluDxgFr2sEw=
Subject key identifier:   D8:80:FE:85:AB:D7:A8:65:CB:52:09:E8:F4:58:D0:CF:69:34:C1:53
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       019D3A1CE3B0F2779DA37666A4B4C745D36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 15:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 15:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 15:01:04 +0000
Files and hashes:         1: XxtWaMM5sBfFC2sC8FpjDL8Ge7Y.roa (hash: HWIQrBtT9vbpCee5Xkd6bp75O2LIMTf2r4JmS0NQHJ4=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: ujnfxwtHmBzh3FJhrLu9+/ynd1WopcCEq3sw0STuKrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:e3:b0:f2:77:9d:a3:76:66:a4:b4:c7:45:d3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Mar 29 15:01:04 2026 GMT
            Not After : Mar 30 15:01:04 2026 GMT
        Subject: CN=d880fe85abd7a865cb5209e8f458d0cf6934c153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:42:6f:db:b3:9e:ca:4f:4d:0f:0a:a2:f3:
                    d2:4c:11:ed:29:f9:1a:f7:ea:1e:c7:29:5d:37:bf:
                    52:9b:57:53:b0:cb:2b:f0:d9:09:74:89:fa:7c:47:
                    51:24:58:a5:14:0a:cc:d2:dd:b1:0c:f7:4a:05:ef:
                    f2:6d:a1:fb:02:5b:6d:52:b9:8c:d7:ce:5d:2c:cf:
                    b0:53:20:c1:62:91:58:3f:07:f3:56:74:26:25:34:
                    94:d5:32:35:7d:ae:85:4f:a8:10:fd:ba:c4:1a:4d:
                    c8:26:1d:67:75:76:a8:87:84:f7:d5:f3:28:55:04:
                    bc:ed:b5:0e:76:2b:da:31:76:af:ad:f2:67:4a:c5:
                    94:1a:ff:c1:f6:78:01:0c:3b:85:70:bb:bc:fd:9d:
                    8d:db:56:bc:23:46:68:f0:e2:4d:04:9c:fb:31:0e:
                    13:f8:94:b9:06:56:f8:65:1d:a7:c1:2c:51:61:06:
                    df:80:36:18:c7:86:cf:42:5e:50:92:13:c5:34:b6:
                    12:fd:2c:5b:28:b7:b8:ff:bc:5f:39:c5:bd:95:d4:
                    a9:ce:6c:39:2d:06:68:a1:25:47:ed:73:10:a1:a5:
                    24:3f:e1:96:c1:67:e2:79:7b:ae:78:df:77:da:a9:
                    fc:a0:71:d6:d3:bf:27:67:4d:9b:ae:6b:d1:97:6c:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:80:FE:85:AB:D7:A8:65:CB:52:09:E8:F4:58:D0:CF:69:34:C1:53
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:e4:88:23:0c:dc:cc:4e:ec:d4:d0:de:dd:2d:1e:e6:16:
         65:3d:bc:e2:be:05:bb:f5:fd:cc:ac:60:92:0a:71:ae:3d:7a:
         94:28:b6:60:71:fb:18:fa:54:94:09:94:33:79:07:9d:b5:ad:
         3e:3a:4e:09:0f:66:36:66:9a:0c:0d:a7:22:a9:89:00:b1:6a:
         8d:d7:41:33:5d:8b:b4:48:5e:2c:5b:a7:53:54:77:db:f8:73:
         71:00:dd:cb:8e:41:28:81:aa:46:2c:40:13:54:a9:cf:85:9b:
         14:b4:e9:a6:0c:e2:00:e0:fd:82:00:4b:f7:39:60:29:28:ea:
         ab:b4:30:4e:47:bb:59:9e:11:0b:29:d3:31:b0:1e:90:c6:02:
         c5:4d:f9:3a:81:2d:6f:99:d5:14:2d:4b:0c:b5:06:ea:52:37:
         c3:d2:3e:0a:10:cd:0a:c6:26:29:2a:76:ee:69:17:35:c8:07:
         d5:a9:77:c1:5a:11:f0:23:b2:d7:5d:df:0e:c0:ba:79:dc:8f:
         43:27:b9:20:31:59:d9:e5:5b:a4:36:2d:d6:16:ec:e7:fb:39:
         66:32:55:6f:6b:93:75:83:89:d1:95:20:77:52:66:5f:71:a0:
         02:7a:f5:b3:29:75:02:cb:37:ab:b3:ba:47:08:3b:e0:d3:f6:
         72:cc:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:06 2026 by rpki-client