Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          KJUm/7gkcOUH6K+qI8U/x7ZitEm/nw+Plc9wNUymPPQ=
Subject key identifier:   4E:98:83:B4:64:A5:FA:20:DB:5A:86:F7:E8:F2:9B:9D:31:C3:FE:85
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019D37895060D915EA729CB7A8FCEEA071EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 03:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:38 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: PPrxNtFxwKzUhQPP+jYq3NvNMF9Y+2qx/Fq/fVQ20fQ=)
                          2: CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa (hash: EDn78xn+p6oMFAEmlxUOHaCSYp4j7S763nhsCUw2Kv4=)
                          3: H9CdRCLLB89FGC_P99zvO9bw22M.roa (hash: /+D8bia7Or2I7xsqu4Z5whu7vt5QZWNJo6zSPqWl4CQ=)
                          4: ORyyWOYfH2nmHuG5PcDCFlq-wYQ.roa (hash: OirWDledNDa67ty/dKSFYukThzm9V2btotcDCbLF1o4=)
                          5: Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa (hash: gtJSWV6dJGPToJtFvmcUYQb8AcDhxr2Bne8t1GW0tKE=)
                          6: zcCiixqCklulb_B107CrpvzF08M.roa (hash: I58sikhQ3Ff9PunOEcBamQjNVvG5kDBAQWFHprNeKL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:50:60:d9:15:ea:72:9c:b7:a8:fc:ee:a0:71:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Mar 29 03:00:38 2026 GMT
            Not After : Mar 30 03:00:38 2026 GMT
        Subject: CN=4e9883b464a5fa20db5a86f7e8f29b9d31c3fe85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b2:e6:44:8e:1a:b4:60:35:60:c9:50:e4:96:
                    10:a5:28:7a:5c:68:8a:97:d5:8e:22:14:e6:2d:ff:
                    1b:7f:2d:f6:1b:ed:36:41:e2:8b:fa:09:fb:57:2c:
                    f1:07:26:0a:31:2b:0e:a0:59:80:c8:8a:34:04:a6:
                    98:3f:79:ea:4f:1c:e9:61:0c:66:50:14:9b:f1:cc:
                    8e:67:74:33:5b:51:80:4e:a0:8a:4a:61:04:ac:74:
                    8c:a3:56:5b:43:b8:bf:a9:4a:65:31:16:8f:68:1c:
                    86:8d:59:99:ab:a2:8f:ec:9c:96:84:31:ce:cb:ac:
                    46:e0:67:ca:4a:94:57:3a:71:2f:10:ba:9f:52:bc:
                    2b:86:ff:67:ea:77:9a:c7:24:28:0c:09:2d:d1:8d:
                    2c:8c:03:c4:6b:6b:de:2d:d0:06:e2:8e:8e:6b:55:
                    63:f0:c5:8e:40:c2:0f:ab:28:f1:68:b5:08:b1:3d:
                    44:9d:28:a5:0d:41:06:3f:df:45:49:c5:3a:4f:64:
                    f2:d7:b9:fd:52:fb:00:cb:6e:17:fa:0d:cb:43:e6:
                    ba:3a:7a:36:96:0b:63:c5:65:cc:c1:6d:b7:e3:4a:
                    0e:b4:3c:b8:b6:6d:c9:ef:11:6e:c9:fd:c7:42:3d:
                    bb:ab:4d:dc:ac:5d:fb:b2:bd:a9:49:b5:e7:00:9a:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:98:83:B4:64:A5:FA:20:DB:5A:86:F7:E8:F2:9B:9D:31:C3:FE:85
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:3d:32:30:29:96:f1:cb:32:32:b9:7b:aa:39:ba:c6:f7:
         2f:e8:79:71:b0:06:8b:fc:eb:b8:37:b0:73:67:16:48:60:1c:
         2b:bd:d3:81:15:b3:c6:88:f2:1b:a6:2d:5a:7c:7a:3b:34:5d:
         fb:11:d1:5e:29:93:fe:bf:fb:d4:0b:80:30:ed:f8:2c:49:53:
         f1:22:84:56:7e:d4:ea:5e:1f:5c:17:09:5b:82:4c:69:5b:3f:
         0a:40:cb:31:12:57:f9:c4:c8:02:41:d7:50:13:8c:ff:fa:09:
         b6:c0:e4:c7:26:bb:65:8e:ea:2e:67:0a:e0:3b:49:90:73:97:
         99:02:65:30:e2:26:91:12:d6:bf:cf:0b:44:2c:61:7f:11:ff:
         b4:a3:d6:c7:0e:2c:3e:4b:2c:2b:5b:93:f2:7e:51:3d:91:9c:
         d9:7a:99:2f:66:68:2c:5d:fb:65:56:54:24:7b:6d:c5:4f:98:
         8e:84:d7:ad:3f:e0:5e:b2:db:87:7d:50:f0:84:12:e2:81:d6:
         6a:c9:f0:3e:33:55:66:ae:55:a5:84:de:ea:76:aa:34:0b:36:
         3c:e7:be:fd:d2:09:a0:1e:b8:15:b9:c9:f9:15:d6:89:29:00:
         61:2e:83:d3:51:78:97:ef:1a:db:65:d6:bd:63:10:da:52:f6:
         d5:5e:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:07 2026 by rpki-client