Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File:                     r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier:          /ac4smR53uYLF4l4p/s/sBFFamd6Eq/jOqmdrE4APYk=
Subject key identifier:   63:BD:FD:85:27:1E:66:09:FD:68:C4:3C:19:A6:E8:55:1D:69:B8:15
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer:       /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial:       019D382E3584CF46AD32ECFD2BF71F0278E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number:          0F63
Signing time:             Sun 29 Mar 2026 06:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:45 +0000
Files and hashes:         1: 7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa (hash: AUUlni3UcNfoUVifNt5f8cw2030rnuTziXI1bU77ERs=)
                          2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: 7ezu46suuGqoXi06c0o19C2kKgoH+ssxkRzl18rHLMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:35:84:cf:46:ad:32:ec:fd:2b:f7:1f:02:78:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
        Validity
            Not Before: Mar 29 06:00:45 2026 GMT
            Not After : Mar 30 06:00:45 2026 GMT
        Subject: CN=63bdfd85271e6609fd68c43c19a6e8551d69b815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:4e:e9:05:8c:9e:9c:7e:2d:22:45:ed:3c:
                    fd:58:98:48:54:84:97:06:3d:21:2e:87:64:38:8a:
                    89:70:e2:35:9f:0a:7e:d2:11:6c:fd:d3:5f:9e:e9:
                    6a:b5:30:03:4b:ea:77:0b:5d:e8:f6:9f:4b:d0:37:
                    30:a8:fa:26:5b:6a:ec:97:b7:ae:60:42:16:c2:e7:
                    14:18:ea:eb:05:09:83:30:b2:58:49:3a:89:e2:be:
                    bf:4b:62:10:58:bd:8b:91:50:f6:99:c0:4d:02:dd:
                    c0:f4:57:80:2c:4c:8e:c5:84:83:76:f6:e7:f6:37:
                    e8:4f:c6:6c:68:c4:77:f8:38:fa:16:9d:b6:1d:e1:
                    e8:c4:86:6e:65:1f:03:19:82:f2:42:f4:4c:2d:1f:
                    bc:f1:4d:89:55:f5:74:bc:61:68:fc:ef:5e:66:1a:
                    df:51:3b:53:77:4a:e9:ee:35:d6:67:c7:4f:46:b1:
                    71:1e:2c:db:f0:d1:10:79:5c:e6:a2:19:d4:cc:5c:
                    ed:93:c9:73:a1:79:ad:52:36:14:74:54:08:0f:60:
                    66:76:b3:f4:67:bc:1b:20:b4:e6:8f:f0:fb:05:40:
                    f3:85:36:48:38:f5:64:ed:3b:0f:a6:dd:ad:be:a5:
                    96:09:83:da:bb:ab:9d:f8:c0:8e:e3:27:d3:25:e6:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BD:FD:85:27:1E:66:09:FD:68:C4:3C:19:A6:E8:55:1D:69:B8:15
            X509v3 Authority Key Identifier:
                keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f9:e5:6b:ae:37:e7:c5:df:f4:91:f8:48:bb:01:c0:15:e7:
         43:f8:1b:6e:c6:64:df:b7:7c:56:74:3a:16:dd:a7:8a:b5:42:
         f3:f8:dd:49:c3:59:81:e8:d2:6c:43:6f:d4:8c:7a:ca:ee:13:
         81:2b:b0:62:18:26:4b:14:d7:70:db:dd:24:c6:c0:35:92:51:
         2e:f3:1a:f5:36:3b:94:d5:0c:a5:be:c9:cf:11:b1:dd:60:0f:
         a4:ac:60:6d:64:98:3a:68:8c:f5:f2:f8:c2:24:b9:5f:34:a0:
         5e:63:c0:c5:aa:5d:f6:c4:d6:43:9e:8a:0d:6b:b4:e6:57:2f:
         2f:48:c7:f2:4c:72:2b:34:0b:5c:62:af:ca:da:f9:c0:06:51:
         04:0c:99:20:14:22:2d:54:dd:37:4e:fb:89:04:cc:bd:22:61:
         c8:60:ca:63:0a:40:b7:05:d7:ac:73:9c:59:73:a4:f7:87:3d:
         84:2b:eb:9d:6b:71:30:61:b7:c0:bd:f6:de:80:85:2c:09:cf:
         ae:ff:e8:b7:92:10:78:a2:ab:16:34:9b:65:fd:45:93:37:da:
         f6:51:88:b2:d5:bf:aa:0b:c9:30:b7:bf:4b:a1:e7:4a:0c:39:
         75:82:1b:b3:b1:82:b1:5d:b0:41:1e:df:00:ad:3a:8b:ea:85:
         9c:d0:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:59 2026 by rpki-client