Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
File:                     RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json)
Hash identifier:          pCRqVqYUZuIRyZUtUGhqW4m+H9TvDq+2YOm6bUnoTRw=
Subject key identifier:   6B:A4:50:88:DA:E5:7C:E7:70:09:B3:79:98:CE:2F:CC:61:62:90:EE
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       019D378995FFC76C568507E9BD6FD9F8BBF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
Manifest number:          12B6
Signing time:             Sun 29 Mar 2026 03:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:56 +0000
Files and hashes:         1: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: 6+zu8mcP2oH+5FyzCsGJ4J8Iz+QNhH+otb0pj8BPUQQ=)
                          2: XhC0wvZVbOgmnkqmdg5TkjK_jkE.roa (hash: NxUjDJP+gkzyC6qL8mUykman5N4DTp6Y5GNrm0hEdsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:95:ff:c7:6c:56:85:07:e9:bd:6f:d9:f8:bb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Mar 29 03:00:56 2026 GMT
            Not After : Mar 30 03:00:56 2026 GMT
        Subject: CN=6ba45088dae57ce77009b37998ce2fcc616290ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:5e:c5:fd:57:7a:cf:65:0f:f7:7e:a6:76:
                    e0:d4:a0:ea:9b:55:3c:ec:7a:3e:8a:d1:fd:7b:4c:
                    49:0d:6f:4a:4a:3e:0e:d7:b9:b3:8b:d3:f6:fd:ec:
                    7d:bf:e0:27:1e:c8:c7:4c:9d:33:45:64:f6:43:1a:
                    5c:47:39:f0:b4:b4:2f:07:72:08:68:c8:e0:e0:5c:
                    24:70:99:4d:fd:bb:aa:21:3d:b8:e6:51:55:e8:8a:
                    9d:dd:4d:1b:29:45:e1:cd:21:73:39:a4:17:b6:73:
                    90:8a:34:af:af:b5:f5:36:76:ca:ff:57:68:a5:d2:
                    a0:f3:87:aa:6c:20:75:7e:94:b6:68:03:93:3d:f8:
                    c0:42:7c:82:bb:5f:c1:a7:8d:88:de:f4:5f:15:eb:
                    f4:0b:5a:8c:14:f6:6a:43:f4:5e:ed:ac:c9:aa:cb:
                    c3:ac:2a:11:9a:8c:b1:b6:30:61:ca:5c:b3:0f:a6:
                    12:6c:72:0a:50:94:56:36:4a:1f:85:04:1f:a7:8e:
                    5b:3b:be:05:b0:dd:bb:c0:c8:c5:05:10:77:63:ed:
                    be:16:54:7b:0e:50:fd:d3:b5:e0:9f:39:e2:61:39:
                    1b:f5:0b:95:c4:9a:af:b1:82:e6:6c:c1:9d:71:a9:
                    33:be:54:17:9c:f7:8a:c6:fd:4a:d6:7e:47:07:5b:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:50:88:DA:E5:7C:E7:70:09:B3:79:98:CE:2F:CC:61:62:90:EE
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:78:ac:e5:48:9a:41:e3:0e:6f:b5:69:e5:03:b8:c6:09:b3:
         b7:85:29:ba:3d:e4:80:e2:0d:c8:fc:30:93:2d:d8:59:1f:0f:
         97:ea:89:c9:f1:41:a6:74:37:d3:d6:68:8c:8e:6e:0d:4b:61:
         79:23:e8:65:e8:cc:d8:79:f2:21:b0:fa:15:19:d7:ab:1f:40:
         56:2b:60:04:a7:19:84:c0:ec:3e:23:68:30:43:e0:b2:7c:7e:
         1f:17:6b:94:ec:d9:ab:60:f1:2e:ce:bd:17:5f:22:a7:7f:0e:
         6f:f3:9b:18:d3:89:45:16:94:94:97:54:a1:aa:15:ee:73:7f:
         a1:31:52:6c:fb:5f:3e:cf:c6:78:60:2b:b0:aa:81:52:2f:ec:
         8c:a4:e6:ad:2f:d2:34:2f:ee:83:08:a9:c0:d7:38:ef:bd:78:
         c6:bb:47:25:37:ac:d5:71:d0:74:5c:b3:c1:64:67:68:ec:83:
         a9:60:82:fe:b1:3b:cd:80:a5:ab:6c:a6:0a:fc:69:1a:91:2d:
         c8:5f:3b:fe:c3:4b:21:71:08:73:48:97:86:3e:c1:39:cf:30:
         c1:4f:f1:d2:19:33:97:0b:be:2f:a6:56:18:10:6f:13:94:43:
         fe:3b:35:5e:ad:49:e9:7e:68:1a:70:24:a8:e6:ff:d4:ea:11:
         f1:b3:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:39 2026 by rpki-client