Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File:                     cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier:          T2hfMQ0MIQbSuu3PvLCan37T7YfMvoWH9IaTuSe9JnY=
Subject key identifier:   AB:77:5C:1E:36:20:9C:46:E9:D4:44:3D:C0:42:86:93:83:F3:5E:BD
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       019CE4B60361E086D4C1AD2F804587984B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number:          0F60
Signing time:             Fri 13 Mar 2026 01:00:59 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:59 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:59 +0000
Files and hashes:         1: JjXMuecgBzxuqyS3slTwiSnr5mE.roa (hash: wyze/y0gn9suGrltw+Ca8tC8dvYUzoHSpwIJPVVFCho=)
                          2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: zICB6Phi/23ssL2sJsQRTv5PDjgKw3DF7dMnc72QkSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:03:61:e0:86:d4:c1:ad:2f:80:45:87:98:4b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: Mar 13 01:00:59 2026 GMT
            Not After : Mar 14 01:00:59 2026 GMT
        Subject: CN=ab775c1e36209c46e9d4443dc042869383f35ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:23:53:21:3f:78:a0:65:85:03:6e:72:a5:
                    5c:e7:5d:df:6c:4d:41:6d:4a:ae:44:58:2d:f5:d5:
                    39:48:a7:aa:04:e4:9e:16:d5:87:15:53:ee:f5:b3:
                    6b:ec:d5:29:1a:4e:eb:50:69:04:08:39:6c:ec:42:
                    1a:d4:37:d1:dc:8a:fa:b0:ce:2b:57:07:2a:1f:53:
                    db:99:5c:33:26:89:f6:d9:37:08:19:db:17:dd:8a:
                    b4:19:c7:61:19:0e:56:45:0c:58:6d:39:72:a4:49:
                    46:e7:d3:54:18:6d:3f:c8:99:bb:cb:82:2e:5b:cb:
                    8f:cb:96:d7:e3:02:7d:57:20:51:94:35:74:6d:06:
                    57:94:ba:5b:99:ed:fe:87:fc:53:41:73:4a:63:67:
                    7c:ac:63:df:42:17:79:3e:54:a1:18:64:f5:38:65:
                    cb:83:62:2b:cf:8a:1f:16:78:2d:b0:44:97:8b:1e:
                    14:f2:15:b6:10:df:55:b0:db:77:6e:a2:c7:a4:39:
                    6e:ab:e4:0f:60:40:21:07:d0:db:c4:a7:7b:5a:e8:
                    96:4a:f2:a8:9e:94:c3:5d:35:25:6e:0c:dc:87:51:
                    72:0b:37:18:f3:ed:70:47:2b:58:67:c6:78:97:e6:
                    26:b2:63:d5:09:30:71:bc:65:90:da:14:ee:64:c8:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:5C:1E:36:20:9C:46:E9:D4:44:3D:C0:42:86:93:83:F3:5E:BD
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:56:f1:a3:0d:0c:90:04:5a:4d:8e:e8:14:b5:e7:13:ed:ad:
         58:db:e5:35:e9:76:c7:ba:d1:a6:03:44:fc:7a:e4:95:18:44:
         2f:2d:b3:49:38:6e:90:5b:26:d9:84:95:12:a1:b6:65:e4:6c:
         f0:dd:d1:cd:b5:74:80:8f:60:03:ca:b2:31:b9:df:34:fb:f8:
         d2:f0:3b:d1:51:71:3d:55:a9:6d:1d:14:5f:a3:ed:a1:5d:d0:
         06:3a:f6:fc:1d:d2:46:8e:1a:f2:31:32:de:f3:cc:ae:0f:73:
         5f:33:83:60:8a:3a:71:11:73:14:8a:70:15:89:94:e6:5c:80:
         df:17:78:79:ff:1d:6c:8f:12:af:f6:40:b4:cc:18:b4:1c:b8:
         45:7c:21:9c:d8:af:75:1b:e6:ad:7a:03:43:87:ea:09:73:ca:
         9e:c4:9d:d0:1c:5e:f0:63:6c:8e:da:ba:c6:a7:32:6c:0d:ca:
         7c:26:2c:46:db:6d:3a:6b:73:fe:f8:16:15:4d:fe:e8:43:76:
         ff:4f:8c:7e:8b:2d:ba:70:fd:6c:01:ae:c9:8b:31:77:6d:b1:
         eb:3c:69:ec:71:cd:55:eb:44:48:1d:3d:bc:fa:8d:4f:65:70:
         68:e5:c1:17:13:bc:5c:34:12:1e:2a:f4:b8:30:2e:cf:c2:c3:
         96:b0:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:24:49 2026 by rpki-client