Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          6JFrEK5hf0krByuIydLUyDihd1DnUOtjVyV/JBPZxnI=
Subject key identifier:   74:63:2C:6B:AA:92:3E:07:9F:96:B5:4C:77:84:DC:1F:94:DC:AB:20
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019D3752EFF93CF9EECA51BFE3D4321F567F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          185C
Signing time:             Sun 29 Mar 2026 02:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:15 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: B41VgKM+mtx4DlB4hDVkGHWn779Uu0mWXIp/WZvUL0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:ef:f9:3c:f9:ee:ca:51:bf:e3:d4:32:1f:56:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Mar 29 02:01:15 2026 GMT
            Not After : Mar 30 02:01:15 2026 GMT
        Subject: CN=74632c6baa923e079f96b54c7784dc1f94dcab20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:cc:4f:02:d6:c2:c7:f8:2b:7c:77:59:e2:
                    5b:9f:37:a8:33:3c:37:58:d7:7f:74:27:95:fa:f1:
                    b8:67:c3:c9:32:44:67:a3:3f:ea:96:c0:3b:5c:09:
                    02:c4:e4:25:dc:6c:50:2a:a8:dd:05:91:a4:3e:21:
                    37:65:7b:ea:80:45:2d:a4:c4:0e:de:14:58:34:42:
                    f1:6f:2f:93:3c:60:eb:2b:32:eb:01:f1:9a:5a:db:
                    46:a3:4e:4f:80:52:b1:42:58:ba:dc:a2:6c:16:35:
                    e1:1d:f5:fc:dd:03:39:e2:94:f1:66:9b:33:2c:a8:
                    cf:13:d5:4d:bd:3a:c4:e5:08:4c:50:63:87:5a:d3:
                    48:14:9d:db:dc:ab:c3:25:f8:ff:f2:13:6d:6a:bc:
                    7e:ef:54:8f:77:11:f0:a8:52:3d:0b:44:77:f0:f3:
                    e4:5b:15:cd:2c:c5:0c:58:30:86:90:67:e6:91:bb:
                    3b:1d:10:b8:54:b4:66:92:f2:41:81:6b:a5:ab:d7:
                    12:dc:1e:71:08:72:ea:b0:8e:5a:cf:1b:25:50:72:
                    ce:fb:d7:a6:67:77:24:9b:17:96:84:19:39:4d:eb:
                    be:36:7f:e1:8d:b8:aa:31:ff:b9:a9:03:ac:65:e7:
                    bd:34:b4:7d:87:c6:62:5e:75:88:07:97:be:62:46:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:2C:6B:AA:92:3E:07:9F:96:B5:4C:77:84:DC:1F:94:DC:AB:20
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:4c:77:76:91:e5:8c:eb:4c:b8:09:d8:d7:16:ad:69:db:
         62:53:f5:54:72:f0:60:2d:7e:91:52:3c:0b:99:00:81:be:b0:
         df:1c:78:d1:d7:35:2a:04:ed:c0:81:01:94:04:91:07:fd:9f:
         7f:a1:54:0d:3f:d3:c4:fc:dd:0d:45:52:fd:ba:06:05:74:0f:
         1c:1c:50:71:90:3f:12:19:b0:ea:08:e8:51:e7:9f:1c:5e:8e:
         6d:c9:c2:64:9d:fc:10:69:6c:08:71:1f:db:49:4b:46:7a:d1:
         bc:c5:45:2e:e4:ae:59:ac:86:bc:50:a1:07:54:21:0b:15:14:
         f8:c5:2f:6e:10:57:ad:4f:7d:76:57:43:4f:0e:ce:eb:b6:bd:
         8c:7d:3c:5f:2d:ba:b7:6c:1d:74:e0:d1:eb:f7:70:b8:e4:13:
         2c:25:24:59:59:2f:b6:1e:6c:a4:2d:9e:d3:f5:9d:29:ca:5c:
         06:6f:fc:79:e9:3a:83:76:b9:97:4c:46:39:4a:8a:bd:52:be:
         1c:9e:78:20:46:a9:52:23:d2:5d:1e:3d:3a:15:9b:c8:ba:d8:
         cd:d6:9a:35:1b:07:fe:eb:49:23:94:6a:86:c1:52:29:a4:07:
         df:94:ff:7b:a7:23:6c:bb:2e:9a:91:ab:34:0f:c1:cc:a6:13:
         f5:88:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:53 2026 by rpki-client