Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File:                     s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier:          lW/FwlwlFLwRyNCCqTy8ZcDURc/nN+ZprsjKlNAyVXk=
Subject key identifier:   71:26:9F:DD:4D:DD:53:CE:9B:2C:2C:EF:DB:5E:23:38:5B:A9:B0:40
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer:       /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial:       019D37C0AC80371758CCBC8B5CF60DD6B6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 04:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:06 +0000
Files and hashes:         1: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: A1EvGkOQJrnv0KHc/eU5hMC74DlxFYlHVgwfLA5PjbE=)
                          2: u65mmO6HRK5seaMFhAXBI1NDzRY.roa (hash: bDLwuznXJEsV9R4nt39n1oPS76JZaY8ubPqpqj3zceQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:ac:80:37:17:58:cc:bc:8b:5c:f6:0d:d6:b6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
        Validity
            Not Before: Mar 29 04:01:06 2026 GMT
            Not After : Mar 30 04:01:06 2026 GMT
        Subject: CN=71269fdd4ddd53ce9b2c2cefdb5e23385ba9b040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:2a:a2:6b:cc:af:6d:b2:57:c6:4e:8c:9c:
                    2b:ff:e5:fc:2a:ab:1d:99:70:b1:e2:f5:f1:a2:70:
                    53:46:61:1b:eb:82:41:4d:e2:85:a7:b9:62:bd:6f:
                    0d:ae:35:5e:ff:35:e2:45:2f:22:75:ae:ee:fd:97:
                    3d:ef:99:d3:d5:cd:8c:01:61:6a:21:8f:5f:42:55:
                    bd:8e:15:2b:22:3b:41:98:2e:97:c7:a8:db:e7:d4:
                    ad:6b:be:45:0e:3c:a8:4f:7d:76:8b:41:4a:95:23:
                    b0:a3:56:78:1b:ca:80:ed:0f:7b:c7:5d:7f:49:6a:
                    11:1a:b6:11:8c:20:b9:98:2b:f6:67:a9:da:d4:85:
                    f4:26:af:43:a1:6f:83:ee:42:e0:62:6c:dd:32:96:
                    6d:a7:58:39:75:d2:86:e0:84:81:28:34:db:af:17:
                    9e:01:03:c2:84:0e:47:07:d6:91:d2:62:3c:e3:90:
                    74:72:05:bc:e7:1b:3f:64:75:7f:e5:12:e4:d4:02:
                    32:4b:ac:67:a9:00:50:e4:e7:6d:85:f4:49:d7:98:
                    6a:dc:e7:71:7d:17:5c:47:a7:9b:65:c8:21:c3:f1:
                    6b:dd:b2:77:7d:a9:22:8b:da:31:c4:40:9b:7f:d9:
                    50:5d:3b:e5:10:9a:b7:1d:f7:f5:49:f2:4a:96:0f:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:9F:DD:4D:DD:53:CE:9B:2C:2C:EF:DB:5E:23:38:5B:A9:B0:40
            X509v3 Authority Key Identifier:
                keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cc:4d:2c:d1:92:44:62:06:fd:b7:2d:db:ad:98:a4:44:06:
         2d:31:8d:a9:e7:92:1e:1b:c7:b9:5b:c7:4f:6a:17:7d:52:09:
         81:eb:ec:b9:44:58:5c:f1:5d:33:5b:7e:20:74:80:5d:9b:b2:
         15:c6:84:f4:6f:48:90:8b:f4:84:de:43:3f:a4:ee:b6:a3:11:
         43:22:dc:e3:39:69:06:3f:f8:6e:5f:12:07:80:1f:f2:3e:53:
         5c:66:d4:28:d3:0e:e8:f0:17:be:42:6b:17:b6:68:36:47:c7:
         07:ac:2d:66:69:0c:cf:fb:0b:d5:4f:ea:87:2f:f7:a2:2f:b2:
         85:2e:e2:07:da:e0:9b:9a:28:86:28:47:0f:32:85:57:09:6d:
         bc:30:c1:4e:87:2a:0c:07:ab:56:ad:39:7d:ca:9c:5d:83:69:
         a5:88:61:43:31:7b:bc:d5:97:bb:96:39:1f:27:33:aa:83:b8:
         ef:a3:37:5d:2c:76:5e:16:c4:7d:d4:fb:ca:52:c3:3a:86:a6:
         7a:0e:a1:6c:e8:70:28:05:bf:d6:7c:f3:1a:fa:fc:37:54:9b:
         22:de:de:47:5a:a7:8c:b8:97:84:53:4a:c5:ae:96:3b:1d:c5:
         9a:ec:a1:e7:1f:e9:95:24:f2:d3:9a:0d:11:b5:25:e5:c1:d0:
         f5:73:5b:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wKyANxdYzLyLXPYN1rb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx
OWY3NjMwHhcNMjYwMzI5MDQwMTA2WhcNMjYwMzMwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg3MTI2OWZkZDRkZGQ1M2NlOWIyYzJjZWZkYjVlMjMzODViYTliMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDAqomvMr22yV8ZOjJwr/+X8Kqsd
mXCx4vXxonBTRmEb64JBTeKFp7livW8NrjVe/zXiRS8ida7u/Zc975nT1c2MAWFq
IY9fQlW9jhUrIjtBmC6Xx6jb59Sta75FDjyoT312i0FKlSOwo1Z4G8qA7Q97x11/
SWoRGrYRjCC5mCv2Z6na1IX0Jq9DoW+D7kLgYmzdMpZtp1g5ddKG4ISBKDTbrxee
AQPChA5HB9aR0mI845B0cgW85xs/ZHV/5RLk1AIyS6xnqQBQ5OdthfRJ15hq3Odx
fRdcR6ebZcghw/Fr3bJ3fakii9oxxECbf9lQXTvlEJq3Hff1SfJKlg+YqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEmn91N3VPOmyws79teIzhbqbBAMB8GA1UdIwQY
MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt
ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx
LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8xNLNGS
RGIG/bct262YpEQGLTGNqeeSHhvHuVvHT2oXfVIJgevsuURYXPFdM1t+IHSAXZuy
FcaE9G9IkIv0hN5DP6TutqMRQyLc4zlpBj/4bl8SB4Af8j5TXGbUKNMO6PAXvkJr
F7ZoNkfHB6wtZmkMz/sL1U/qhy/3oi+yhS7iB9rgm5oohihHDzKFVwltvDDBTocq
DAerVq05fcqcXYNppYhhQzF7vNWXu5Y5HyczqoO476M3XSx2XhbEfdT7ylLDOoam
eg6hbOhwKAW/1nzzGvr8N1SbIt7eR1qnjLiXhFNKxa6WOx3Fmuyh5x/plSTy05oN
EbUl5cHQ9XNbaw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:16 2026 by rpki-client