Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
File:                     6ySQqKEzr8STmogtt1JsFfiS6Mg.mft (raw, json)
Hash identifier:          EO6Fl9BX4V2PDW+uwruIeJSnQKsKKloE5LWwwRcrwdY=
Subject key identifier:   98:15:10:34:50:8A:37:E4:D8:85:0C:06:E3:8B:22:04:08:47:66:87
Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
Certificate issuer:       /CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Certificate serial:       019D38D3B6BC197CF2696900F4712AAED9FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 09:01:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:32 +0000
Files and hashes:         1: 6ySQqKEzr8STmogtt1JsFfiS6Mg.crl (hash: uDlzQgdvuiBMn39iyQ7+ZBiRj03nZgz6i15+DNSv0F0=)
                          2: UJf4_P_HgJzabu0LnEclJumCjc8.roa (hash: VSvI1FeKgDQdCR70tOpSWEeSm4kYs6wd4/52sT1ucD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:b6:bc:19:7c:f2:69:69:00:f4:71:2a:ae:d9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8
        Validity
            Not Before: Mar 29 09:01:32 2026 GMT
            Not After : Mar 30 09:01:32 2026 GMT
        Subject: CN=98151034508a37e4d8850c06e38b220408476687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:fd:53:e1:81:cc:f8:39:29:4d:8b:f1:31:
                    ef:ec:43:b6:05:41:96:c6:70:f1:2f:75:2e:16:35:
                    bc:e4:0c:90:39:f4:b0:f1:84:68:d3:06:20:e0:cf:
                    6e:d1:bb:91:aa:9c:74:f9:2a:ea:95:74:67:ab:1d:
                    35:54:6e:7c:93:e2:6b:ec:12:14:c2:06:f0:b8:4e:
                    9b:5c:75:f2:53:fe:db:54:8c:1d:a0:c1:6b:e5:16:
                    34:98:e9:dc:a7:36:0a:55:bb:cf:e7:e3:e4:f5:a4:
                    86:45:6d:8a:25:38:12:6d:2d:36:ce:e5:5a:7c:73:
                    1f:b7:26:6c:05:30:21:a9:84:41:55:95:92:6a:c1:
                    52:31:fb:0d:75:fe:87:b6:1d:73:44:01:86:86:90:
                    29:83:70:b9:f7:10:f6:5e:b2:6d:ca:e6:c5:b0:6a:
                    1e:ca:c5:c6:65:d9:66:06:a4:e9:ad:f7:7e:9d:ca:
                    61:b6:18:ed:bb:61:22:d1:78:9f:2a:87:ae:58:22:
                    d3:81:66:c1:1f:39:65:ee:c1:34:a7:ab:4f:20:45:
                    bf:c2:72:3a:db:05:ed:19:65:fe:0d:95:ac:04:d4:
                    9b:0e:e6:3c:89:0a:7a:d7:c1:a2:94:fa:99:b0:6e:
                    5c:54:d7:97:b4:99:8b:a8:ad:12:e4:f7:e4:da:33:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:15:10:34:50:8A:37:E4:D8:85:0C:06:E3:8B:22:04:08:47:66:87
            X509v3 Authority Key Identifier:
                keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4d:51:d4:44:d3:05:80:2b:cb:6c:5c:d6:5b:33:1e:74:21:
         17:a1:dd:1c:05:44:aa:c7:1a:87:7f:62:8b:4d:76:a3:5e:b0:
         ab:a2:64:9f:d6:76:72:df:c2:24:e0:94:ce:5b:02:83:8a:a4:
         de:04:68:9b:7d:d1:ed:c2:3b:4a:00:cb:90:a0:af:bb:68:4d:
         d1:57:43:96:ee:0e:fc:dc:90:28:f4:10:db:cc:6b:8b:21:83:
         66:2d:0d:9a:9a:1d:fa:ff:cf:f0:66:5f:89:57:8d:dd:22:72:
         8b:55:07:cc:1c:be:fe:86:89:ce:39:4e:88:9b:2f:13:e6:58:
         39:61:70:8e:2b:68:ad:a0:b2:76:9e:d6:5f:a7:d8:a4:db:be:
         d1:32:7a:b0:4f:35:68:60:4b:02:4d:8c:f9:d5:9a:89:1d:ef:
         08:99:9a:7c:07:95:a5:88:eb:aa:23:3e:fa:15:53:de:cd:15:
         61:e2:a6:c0:d0:28:21:37:7d:77:cb:0f:bc:9c:86:2d:fe:00:
         04:84:08:8c:8e:d4:52:9f:55:33:73:4d:f2:fd:21:82:a2:2a:
         71:52:e3:43:5f:bd:fd:8b:c1:2c:26:86:a4:d4:09:c8:f5:a6:
         e2:89:37:eb:b1:fe:5f:76:be:7d:b3:e0:27:35:23:e0:df:e9:
         2d:80:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:27 2026 by rpki-client