Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
File:                     6uYgsFna8H5G_DUi0JsZCVFs_O8.mft (raw, json)
Hash identifier:          LZMWlZS/srTYwm38s1n202vXQpUz4ftGTwGvWJjacJU=
Subject key identifier:   90:5E:EB:B1:43:30:75:9F:F7:1A:EC:02:80:4A:F2:F5:E1:64:DD:DA
Authority key identifier: EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF
Certificate issuer:       /CN=eae620b059daf07e46fc3522d09b1909516cfcef
Certificate serial:       019D37522529F599E959C1DAABE2B83686FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
Manifest number:          A3
Signing time:             Sun 29 Mar 2026 02:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:23 +0000
Files and hashes:         1: 14k9WBYTwB5rY8Es6FCkuGE_LQ0.asa (hash: EbDiuMLMeOTXlBB/rfAnpSziN3nz5jdOmMgYker4Qok=)
                          2: 6uYgsFna8H5G_DUi0JsZCVFs_O8.crl (hash: zS4yKETE9KPic4THt2CtwvxSVIQ7KWz7RGF3QDNskvQ=)
                          3: JufwG4y3MsIG7jxqVGEbh3ksTPA.roa (hash: fJpYP0RGygpZ8ZQop6IUb72Uh29ffAUMjbeCaPVw2Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:25:29:f5:99:e9:59:c1:da:ab:e2:b8:36:86:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae620b059daf07e46fc3522d09b1909516cfcef
        Validity
            Not Before: Mar 29 02:00:23 2026 GMT
            Not After : Mar 30 02:00:23 2026 GMT
        Subject: CN=905eebb14330759ff71aec02804af2f5e164ddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:0c:1f:fa:a2:c0:f6:de:4e:4b:62:59:57:
                    9a:ac:38:7f:0c:62:b3:b2:f9:dc:9a:e1:86:30:32:
                    c4:93:bb:d3:bb:a4:bb:a4:c8:f8:6b:ae:5f:c6:0c:
                    58:a0:93:cc:cf:5a:17:84:33:dc:55:f5:31:6e:ee:
                    3e:73:d7:dd:88:8f:38:25:ad:59:9d:03:bd:59:83:
                    4c:57:e9:f6:4e:2e:35:ee:58:41:44:01:03:03:6b:
                    48:e5:9f:73:f0:6e:7e:69:d3:cf:4a:65:eb:d0:e4:
                    05:48:9a:60:e6:11:4d:3e:e2:eb:be:f3:b4:b2:4f:
                    3c:ad:75:56:14:97:fe:10:41:42:0d:a2:1b:9c:40:
                    ed:d7:28:b1:43:b3:c0:3f:69:14:06:83:49:d0:30:
                    de:6a:b6:1a:73:ac:ab:52:31:91:8d:db:81:4e:0d:
                    2d:85:90:8f:99:69:c9:d1:d2:dc:64:37:bf:98:a8:
                    e9:c1:65:2b:a8:70:a2:d4:37:6b:df:1f:b8:8b:cc:
                    ac:6b:ef:40:51:d8:2f:69:c6:ae:f1:3a:e8:01:c5:
                    67:d4:4b:84:e8:9b:5b:27:84:f4:cf:3f:3d:14:e7:
                    ba:a6:45:7a:2b:16:92:18:42:15:94:2b:29:c6:ed:
                    d1:8c:3a:b1:e0:2e:b8:96:c3:b6:b4:c8:e4:6a:ae:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5E:EB:B1:43:30:75:9F:F7:1A:EC:02:80:4A:F2:F5:E1:64:DD:DA
            X509v3 Authority Key Identifier:
                keyid:EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:eb:6c:5e:0d:da:4f:36:87:18:2e:0d:3e:e2:3f:75:fa:
         7a:ec:8a:45:da:82:f7:b3:1e:28:40:d4:0b:a7:d6:83:c7:ab:
         f0:3b:1d:2a:fb:b8:59:ae:9f:b4:d2:48:a6:d7:bd:61:6e:53:
         96:69:57:06:1f:70:81:ab:85:d9:6a:5b:b3:d8:bb:1a:02:59:
         ee:59:ac:57:e3:7f:6a:b2:64:33:9d:08:2e:76:f9:76:7e:33:
         bc:68:fa:94:b3:ea:5c:29:eb:69:c7:73:f2:03:88:93:b2:55:
         bd:59:89:62:e0:de:d4:5c:3a:3c:b1:66:a1:7a:71:fb:8a:31:
         04:2a:d7:25:c0:52:18:17:77:32:df:96:91:09:3e:a1:09:b6:
         07:bf:a9:42:1f:f5:60:ea:10:23:98:f7:b9:c6:65:cc:fb:5f:
         18:73:aa:05:27:43:66:65:4d:20:61:4b:6b:c7:ef:59:2b:c1:
         11:21:0a:e9:bd:13:9e:b5:06:bd:70:f6:35:b2:a9:2d:79:be:
         e2:ad:e4:68:ee:e1:7e:6b:69:1c:63:5a:3d:7c:a8:ec:fc:af:
         e3:0c:29:a7:cf:d7:fb:87:4b:81:c4:98:14:31:a0:e5:57:49:
         7f:77:14:18:08:64:b1:c1:c9:12:b2:03:e6:53:68:f7:5b:a6:
         6b:23:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:48 2026 by rpki-client