Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          7+4SI53OeHqGL3Kqq6lJV56plOM3RUVj+HDeBSPlJ5Y=
Subject key identifier:   A6:FD:30:C1:5D:02:48:2F:4A:51:C4:38:59:12:85:89:55:0C:49:E2
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       019D37895654466851943AF17F5B52476A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          061F
Signing time:             Sun 29 Mar 2026 03:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:40 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: CnpCxlvkPWeqKAIC9TKaBDOIaIGC0dnjr6+lazcbgHI=)
                          2: oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa (hash: FGb9nSTivNu/mVtaJHoZo1Y7HN3bgy2TP4MFuiqpk7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:56:54:46:68:51:94:3a:f1:7f:5b:52:47:6a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: Mar 29 03:00:40 2026 GMT
            Not After : Mar 30 03:00:40 2026 GMT
        Subject: CN=a6fd30c15d02482f4a51c43859128589550c49e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:8c:5d:fa:6f:33:fa:a4:ce:4d:2f:25:c8:
                    8d:7c:10:6a:a0:ac:dc:9f:ac:b1:24:69:a7:12:e8:
                    ae:86:37:51:94:5c:88:9d:d6:8d:58:d5:0a:f4:38:
                    b0:05:b0:0a:61:ef:06:cb:3f:98:cd:26:6a:2e:67:
                    cb:ec:77:d2:e2:a6:b7:4b:9c:5e:00:95:86:ee:70:
                    d7:dd:4a:44:1e:3d:dc:0b:dd:31:0c:48:9c:f8:b9:
                    a7:7e:ee:1a:3e:e9:4a:07:03:c7:d6:a7:be:ea:2e:
                    56:83:21:d2:3e:2b:97:d9:9b:39:67:b7:2c:2a:e3:
                    25:43:ca:e2:8c:bd:6a:d0:fe:51:82:68:82:d4:c2:
                    cc:ea:03:6a:c5:3f:88:86:a4:3c:73:16:4f:d4:90:
                    00:d9:32:ea:2e:b8:d1:ff:93:b4:c6:cb:21:cd:92:
                    ba:bb:32:18:01:aa:d8:b0:66:c1:7a:d4:20:75:51:
                    93:fb:db:25:80:89:99:fd:3a:ba:5a:72:35:9c:36:
                    8f:59:d8:3c:19:de:43:11:ee:51:27:0f:18:8d:bf:
                    64:38:de:77:82:04:27:07:0a:44:41:f0:02:ed:03:
                    bd:cf:10:1e:4a:a6:cc:52:47:da:74:e2:4e:f3:11:
                    6f:a6:a1:bb:89:e3:52:e6:52:6d:d4:46:d0:38:8c:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:30:C1:5D:02:48:2F:4A:51:C4:38:59:12:85:89:55:0C:49:E2
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:99:69:2b:88:45:d8:c3:f5:af:4f:cc:5f:15:82:82:99:
         7a:73:75:a4:3a:a1:41:8f:3d:b7:6c:41:3c:4c:07:76:d0:43:
         e0:e2:6a:ab:80:6e:a7:2b:78:31:ce:da:3b:74:b4:5a:bf:3e:
         2f:2b:2b:af:c8:49:8b:de:9a:aa:a1:6e:c8:52:95:bb:62:27:
         7e:80:51:e2:33:75:f3:e4:46:12:ff:8e:f1:ca:19:d4:3c:8d:
         99:2b:4b:fc:fb:0e:70:5a:3b:68:7c:d1:b5:37:54:ed:cc:71:
         b5:73:f7:c2:38:fe:6a:22:0f:de:cf:e5:21:bd:43:cb:eb:42:
         da:83:b3:6a:4c:20:51:75:55:34:6c:2e:b5:15:f5:fb:a2:c5:
         01:fd:52:0f:de:7a:7a:2c:0b:4d:09:be:e1:8a:8a:23:e6:26:
         d6:fa:b4:d1:58:05:a9:d5:87:0d:6d:2e:04:c4:88:72:c0:89:
         0e:db:ef:ac:9d:35:49:90:f1:ae:af:2d:06:af:46:bb:4b:32:
         d0:0c:86:e4:c9:15:49:e5:25:fa:ac:8b:d4:71:5f:f3:b2:48:
         8a:36:26:12:24:c9:29:5e:84:6b:a5:d0:e8:10:af:a6:fc:db:
         60:ae:e9:f2:bb:7e:db:df:f7:f8:ef:c5:da:f3:06:7e:29:92:
         1d:10:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:32 2026 by rpki-client