Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File:                     6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier:          lbgvWESytWzfBLJKrvWDuSjn3GLNMtGrxN/dg4eGhE4=
Subject key identifier:   9C:2F:9E:7A:A9:FE:72:9E:57:7B:9D:A7:02:B9:7F:9B:D4:0E:09:5D
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer:       /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial:       019CF3161D264028D090AEB11F77844DDBBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number:          0B29
Signing time:             Sun 15 Mar 2026 20:00:38 +0000
Manifest this update:     Sun 15 Mar 2026 20:00:38 +0000
Manifest next update:     Mon 16 Mar 2026 20:00:38 +0000
Files and hashes:         1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: qdTQPxrGWTBMuUQuMNk9jKtqrX33fw9sBNj85AEmn8I=)
                          2: b_tsB2psJkgmiZaOr3w-QgtEJZw.roa (hash: JEjqJzbCuRhzhys3DkYfGTwD4aP+4P2Txn/0Mjz9ZOQ=)
                          3: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (hash: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:16:1d:26:40:28:d0:90:ae:b1:1f:77:84:4d:db:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
        Validity
            Not Before: Mar 15 20:00:38 2026 GMT
            Not After : Mar 16 20:00:38 2026 GMT
        Subject: CN=9c2f9e7aa9fe729e577b9da702b97f9bd40e095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:ec:03:3f:bc:d3:2d:27:6f:3e:30:14:4f:
                    19:93:d0:1e:ed:92:71:ee:09:7d:2f:88:36:23:8f:
                    fa:2b:d9:fb:c1:57:9a:2b:43:0e:80:ff:c5:66:ab:
                    a6:ff:9f:8c:ec:04:49:4f:0b:af:a9:96:bc:17:ac:
                    8f:3e:ad:8b:9c:6a:11:1b:95:68:9b:fa:70:e0:f4:
                    26:11:f2:9f:4f:b4:f3:79:c6:54:ba:84:f5:2c:43:
                    45:db:9a:be:93:4c:23:c1:d5:db:11:ab:88:a3:da:
                    0b:2b:7e:15:85:8d:14:b4:87:39:ad:ff:2b:f6:58:
                    bd:fa:c1:06:72:23:44:db:b2:c1:21:7b:85:e6:e9:
                    11:f5:76:d2:23:94:7b:d7:10:6b:b0:05:25:56:80:
                    ca:eb:da:96:63:ce:8b:b2:32:e8:f7:c3:64:94:4f:
                    73:82:5a:88:1c:53:e3:75:a6:c4:21:8e:ac:92:ee:
                    cc:5e:8a:f7:5b:01:04:f0:38:94:89:96:10:61:45:
                    cd:9a:2a:f3:b2:51:fc:04:5d:cb:f5:4b:38:6e:cd:
                    68:86:f9:1e:91:47:f5:49:30:08:6a:b3:6c:46:7e:
                    3b:5e:cc:c4:bf:fa:c6:fa:be:ce:3f:c6:ef:9d:b9:
                    b2:76:3a:77:e4:cf:12:99:77:8f:ad:0e:1f:32:4a:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2F:9E:7A:A9:FE:72:9E:57:7B:9D:A7:02:B9:7F:9B:D4:0E:09:5D
            X509v3 Authority Key Identifier:
                keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2a:ad:d5:77:8a:18:f9:71:2c:46:d2:ba:dd:f3:a8:2c:9c:
         60:8f:25:e0:97:c1:5c:28:0b:28:70:cb:9e:3d:2d:62:fc:76:
         4b:ac:48:df:d3:94:c0:5d:9a:06:b6:6b:f2:ca:03:3f:21:d1:
         8d:16:a2:b8:d8:a1:eb:0c:06:73:74:e8:45:36:9d:16:13:60:
         b0:86:8a:e8:90:d3:5f:f6:27:83:61:38:fd:d9:87:ae:c2:17:
         30:12:b8:92:fc:6d:54:91:7c:2d:71:ba:5f:31:3c:42:1e:27:
         c7:26:59:03:4b:e8:54:b9:fe:f6:3f:d6:69:98:ad:09:c7:9e:
         fc:e9:8b:b0:77:f3:a4:15:4c:8f:1b:2a:c4:7f:76:86:72:40:
         d9:78:f3:df:54:63:09:05:68:1c:da:97:04:4e:88:4b:e0:1b:
         ae:82:5b:9a:77:1a:e6:30:70:40:d4:3d:c9:05:19:7e:95:5d:
         4a:4f:51:9f:1b:3a:eb:bb:bb:85:2e:37:c6:4e:ff:d6:d2:ee:
         0c:cf:a7:23:05:5c:d7:36:6d:6a:b2:b8:27:60:b1:60:e9:a4:
         e9:e8:7a:22:61:f0:be:b1:eb:3b:95:1c:ae:98:3c:20:08:c0:
         51:33:a7:ce:cd:92:a4:bf:f4:c7:44:4c:69:c4:1c:70:7a:60:
         2a:e8:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 02:02:20 2026 by rpki-client