Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File:                     6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier:          JPd22ymZ29/pYjgkPRQuQ0JPzriSsVmVgFXFLqDSF7Q=
Subject key identifier:   C0:A9:1B:AB:ED:E8:62:42:8A:EE:DE:90:43:C8:5B:CC:27:B2:0B:20
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer:       /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial:       019D3977F547A0C4D9E5B1035352BFBFD531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number:          0DDE
Signing time:             Sun 29 Mar 2026 12:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:55 +0000
Files and hashes:         1: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: EUgecpQdP2ijW6GE3BaqtE1JWh19+fXOj46bLsiSq0o=)
                          2: J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa (hash: lUuNT1eBBa+JpXs3fEVcImBW6pOF6M9gLS5SJiJaWOc=)
                          3: T5t2lrc6vZSWtfpj81F8OW76GS0.roa (hash: yORkG5zj/0zcAQ3RthIBP3CwZBqbHhAwf4IAuGcnaRQ=)
                          4: _ciy-lTi4OPOE4H7jBh6iVeSzM0.roa (hash: UoO0miY2aliagEe8/7pX67pSC1+YIe4R/lR+1wd4LX4=)
                          5: t5_VYPZ1lf_CKZMBh1bjbEMFTgM.roa (hash: /soIDtSH0BbDEeEeE6xQsPK1zrhevJxy2QjQT/OIR/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:f5:47:a0:c4:d9:e5:b1:03:53:52:bf:bf:d5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
        Validity
            Not Before: Mar 29 12:00:55 2026 GMT
            Not After : Mar 30 12:00:55 2026 GMT
        Subject: CN=c0a91babede862428aeede9043c85bcc27b20b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:a2:93:aa:95:84:cb:83:ec:8d:22:4a:00:
                    15:c9:6f:c5:59:07:3c:fd:6b:ec:eb:df:a9:71:36:
                    a0:95:d5:84:d2:f9:2b:73:be:ee:57:f6:98:73:35:
                    70:e1:e3:1b:a0:6a:ba:b8:86:0f:e6:8c:58:00:01:
                    5c:fa:62:5d:10:d7:7f:e3:ad:f2:fa:0f:e1:68:78:
                    a0:19:a0:95:50:b1:f7:3d:a6:dd:d9:12:cd:f7:a2:
                    e0:24:e1:75:65:3f:71:ee:62:11:ad:db:7f:15:ad:
                    73:c7:47:94:89:9e:b1:10:9d:eb:a3:14:23:6f:54:
                    cd:b1:57:1e:14:75:04:4b:78:5b:a0:f1:71:be:78:
                    13:63:58:f8:3d:2e:80:11:04:5f:57:ae:d1:fc:3d:
                    cb:c5:f7:ca:7c:70:b8:50:24:c5:c9:de:b1:99:1b:
                    ff:99:d5:52:57:82:98:5e:15:73:11:ee:b1:d0:42:
                    93:43:9e:e0:8f:c7:3a:9e:06:26:4a:a1:39:c4:a5:
                    02:a2:ef:a9:58:10:6c:2e:9c:6c:5b:cc:64:14:bf:
                    66:b8:8a:83:ca:85:66:aa:58:f4:60:55:73:ce:04:
                    8e:27:bb:d3:f3:27:71:be:1e:96:ad:66:98:a6:4a:
                    ee:0f:07:40:32:9a:5b:82:c9:35:a0:e7:da:c8:86:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A9:1B:AB:ED:E8:62:42:8A:EE:DE:90:43:C8:5B:CC:27:B2:0B:20
            X509v3 Authority Key Identifier:
                keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:2d:70:36:19:c8:2d:d1:0b:8e:72:a0:3f:3a:56:ab:da:a7:
         46:c1:3a:7a:33:7a:9d:fc:c3:c6:46:a2:4a:dc:58:c4:ea:24:
         26:b9:5f:9d:e3:14:cb:b5:09:41:72:46:b6:1e:3d:08:9c:9c:
         d1:99:66:2b:4a:9b:f9:1a:0d:0c:4c:9f:32:de:14:b8:d8:ed:
         36:47:a7:4a:f8:a6:ee:d1:fd:11:a4:f6:75:a6:13:cd:da:50:
         50:54:b5:0b:20:88:a9:2b:ab:f2:af:f3:df:0b:8d:3e:04:83:
         5c:6b:78:a8:3a:41:f0:ba:7f:91:07:0a:43:82:1d:f7:c7:a9:
         af:79:3c:d7:9e:9b:86:d2:51:53:a5:f8:ae:18:b7:d5:aa:08:
         18:89:01:ce:85:b8:ad:54:4a:c8:c9:21:27:a9:8c:e4:04:aa:
         3a:35:c5:1f:c6:bb:37:fb:ed:d5:10:7c:86:1f:aa:e9:95:95:
         5a:1e:2a:19:e0:f3:e9:8a:69:a5:e6:50:c6:13:ff:b8:ee:37:
         13:d5:b5:04:5a:ec:97:b5:5b:07:c2:c0:a8:90:b0:0a:84:0a:
         c2:f2:a8:ce:53:ab:05:2b:e4:4a:46:9b:01:77:9c:4c:9e:33:
         76:56:85:b5:d6:c2:be:69:23:57:31:b0:68:ef:15:6f:2b:bb:
         20:a6:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:21 2026 by rpki-client