Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          uS3v7XIGkqVd7dp10BXiLDAGtRo46jUJvs2amzg1w0U=
Subject key identifier:   A2:A4:3E:F8:D7:13:5B:0B:66:7A:16:66:1E:1B:03:EC:AA:FF:C8:30
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019D38D2B22764DD94DD78907FE4E499A579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 09:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:25 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: BMJqLP+S11+bTIVTdK0bjg5xpNEXlf9gVPs97kzxjqA=)
                          2: 7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa (hash: N75hWXU4tOfgUVgJErnnaShCfMougCipyHaXnV/7ZoQ=)
                          3: ojQoLkOKYxW9nl-zMiY8owgWzH8.roa (hash: pBaal272/3ElS+FK2cqrYkE2HZTuwNTmpIvmWFEPo9E=)
                          4: wW5JJp_Tw5DERjslA8f06nsNm_4.roa (hash: soIoaQ26jxMV+jXruEWHSU8upxFyddMWkhBFffhBkYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:b2:27:64:dd:94:dd:78:90:7f:e4:e4:99:a5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Mar 29 09:00:25 2026 GMT
            Not After : Mar 30 09:00:25 2026 GMT
        Subject: CN=a2a43ef8d7135b0b667a16661e1b03ecaaffc830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:2e:79:a8:52:f0:e4:e8:4a:32:a1:fb:29:
                    c6:b1:de:9e:1f:a9:19:28:b2:1a:b3:d9:72:f8:33:
                    06:3e:ac:d3:df:f8:6d:7d:1c:fc:aa:9b:4b:5f:35:
                    5e:12:80:85:5b:7b:62:03:41:d3:31:67:ad:03:0c:
                    82:63:0d:e6:f0:09:8d:93:5a:dd:f1:96:f1:3a:4d:
                    0c:17:21:74:00:5f:ab:a1:20:b4:bb:fa:54:d6:71:
                    f6:18:84:ec:08:09:6c:62:44:af:fd:35:85:67:07:
                    fa:b3:ec:8d:a0:91:66:3f:22:bc:eb:0e:71:3c:b0:
                    67:fc:63:40:1d:0d:e6:6d:d8:08:c5:20:10:5b:23:
                    34:d9:91:05:ae:0c:da:ee:e9:e2:6f:f1:ec:13:04:
                    56:d3:48:1d:9d:04:15:8d:b1:38:20:15:7f:5a:47:
                    ca:d6:f2:79:08:43:4d:81:37:62:5f:de:84:c2:da:
                    f0:8f:4e:43:8f:54:80:c7:24:ca:43:56:b1:24:86:
                    d1:d1:4c:f5:80:00:13:98:22:76:8d:5b:4c:11:de:
                    0e:25:74:28:33:8d:62:18:4c:9c:23:b4:e6:b9:8f:
                    98:39:b5:2d:8b:df:7a:f0:d4:df:79:08:0b:a9:d2:
                    44:e8:d8:a4:82:f5:f4:07:0c:e7:9e:d2:40:26:18:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A4:3E:F8:D7:13:5B:0B:66:7A:16:66:1E:1B:03:EC:AA:FF:C8:30
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:05:7e:2a:f9:e0:fb:9b:e7:a4:5b:0e:78:9c:07:a5:6d:2e:
         5d:c6:72:8e:b4:80:ad:fc:60:49:9e:11:c8:c7:46:20:f4:d0:
         39:7c:7c:10:00:2c:dc:6f:bd:2f:57:d2:b1:bc:da:f1:84:c5:
         34:57:c8:95:f4:16:7f:12:8f:03:e1:13:e1:ab:0a:45:08:80:
         65:15:b8:32:e6:9c:de:b2:fd:ad:01:3f:b5:1c:b6:57:0b:3e:
         bf:53:85:81:bd:bb:9d:30:e9:01:63:ea:27:1c:58:ae:27:d2:
         5a:99:3c:9a:b3:61:1c:a7:c2:79:b3:42:b8:53:e9:c8:f3:c4:
         ae:6e:bb:99:d8:81:bb:d6:b1:1c:c6:75:00:f0:53:6f:62:0e:
         0c:98:4b:28:07:f9:e0:20:1e:da:80:7d:69:19:3b:fe:85:7c:
         b5:4a:17:63:22:87:ac:0f:ab:66:de:a0:08:a4:a0:dd:2e:5b:
         9d:7c:c5:d5:1e:b1:e2:f8:62:8c:58:99:c5:1e:f9:06:a9:29:
         01:21:3f:95:23:65:f6:4b:e9:64:63:40:cc:8d:0d:26:cb:2e:
         f0:56:ab:03:51:e3:94:6b:07:a2:37:51:51:ea:f4:04:c5:d6:
         cb:b0:13:a9:a1:32:f1:6b:64:1a:41:10:f6:22:73:75:02:b1:
         2a:88:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:09 2026 by rpki-client