Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
File:                     6W0H10zRSlpDn0g3WMQk260zl3o.mft (raw, json)
Hash identifier:          wvA3sl/haHqlDWNnBjSdmHXlKQ7UBpv89BkYqJj4VVs=
Subject key identifier:   31:DA:B0:1A:30:49:AC:8B:EC:EE:2E:78:9A:9B:FF:13:98:0A:D1:5D
Authority key identifier: E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A
Certificate issuer:       /CN=e96d07d74cd14a5a439f483758c424dbad33977a
Certificate serial:       019CEFDE6872FAB2AC6DA5015C7A4186A51F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
Manifest number:          11CB
Signing time:             Sun 15 Mar 2026 05:00:56 +0000
Manifest this update:     Sun 15 Mar 2026 05:00:56 +0000
Manifest next update:     Mon 16 Mar 2026 05:00:56 +0000
Files and hashes:         1: 6W0H10zRSlpDn0g3WMQk260zl3o.crl (hash: vJn1jmghdE+QL7L3yePx9H7soyIy0r+pfKwVNnpIwzY=)
                          2: SNgL8rvjJqg2aFiXrEkC_Vir6sI.roa (hash: srcSZ4EZA95vUyoU1thiVbrEjrxydwLoH54pZVsz5Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:de:68:72:fa:b2:ac:6d:a5:01:5c:7a:41:86:a5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d07d74cd14a5a439f483758c424dbad33977a
        Validity
            Not Before: Mar 15 05:00:56 2026 GMT
            Not After : Mar 16 05:00:56 2026 GMT
        Subject: CN=31dab01a3049ac8becee2e789a9bff13980ad15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:db:91:f1:d3:33:91:42:57:98:c0:a6:16:
                    1a:87:10:81:47:c7:e7:53:d9:ee:a8:0b:1d:23:9a:
                    b7:62:e3:19:2a:fd:c5:8a:b8:e0:5b:ec:7d:54:2f:
                    98:c5:5b:7d:c8:9d:7e:51:a6:dd:9b:71:7d:6d:33:
                    e2:88:7b:75:38:d0:0e:6c:15:a9:63:7a:93:29:58:
                    e2:2f:ae:8a:c7:38:22:57:08:16:b5:94:0c:97:37:
                    32:70:a5:26:6f:3e:39:b1:70:50:4d:ef:16:02:eb:
                    e6:71:8e:98:a6:5f:2f:e1:37:7e:41:8b:33:c7:07:
                    e3:97:c4:80:90:5e:93:66:62:bd:da:af:42:ea:29:
                    bf:b5:13:cd:ad:5b:ee:61:c2:d4:b5:be:cf:a2:24:
                    18:b8:00:52:bb:7d:f6:e2:eb:a5:c7:de:d1:93:6a:
                    6c:74:ad:eb:cb:c8:64:0f:25:af:d2:a7:a6:ef:10:
                    bd:76:40:9a:4a:f5:95:d5:74:9c:97:ec:a6:fc:55:
                    13:93:84:83:d9:9b:24:46:8f:c5:15:2f:c8:09:66:
                    16:41:9b:dd:6d:fa:76:e8:37:19:72:88:9f:35:93:
                    2a:0c:27:cc:ad:9f:ac:ba:f2:a8:a8:67:89:88:3a:
                    43:80:30:a9:22:53:e1:19:24:65:bb:f1:a4:f5:44:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DA:B0:1A:30:49:AC:8B:EC:EE:2E:78:9A:9B:FF:13:98:0A:D1:5D
            X509v3 Authority Key Identifier:
                keyid:E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:35:89:d9:a2:ad:99:fe:01:60:ac:01:f7:e8:7a:4f:68:4a:
         2b:e1:7d:a5:e8:1d:f9:2b:f1:4c:b7:ec:2a:1f:76:c5:61:65:
         9f:9e:7e:62:bb:06:2a:20:63:a4:ae:65:22:a8:4e:62:48:63:
         3f:cd:63:1b:2a:8c:9e:d3:78:07:3a:f1:0f:a7:18:9b:03:4f:
         7b:d7:df:1d:21:87:d5:d3:bd:20:9a:d7:aa:a7:e2:99:e6:15:
         bc:48:e8:a2:40:2c:34:57:18:79:7d:c8:2c:8a:32:f2:e1:e8:
         a8:d9:38:48:42:91:cd:db:45:b9:9f:b7:a9:4a:19:b6:2d:62:
         12:b2:1c:20:b3:d5:6c:95:8d:49:49:69:92:fa:89:97:b3:e4:
         cc:cd:a0:75:1a:61:34:82:1e:03:8a:93:88:bd:1c:1e:e2:09:
         bd:7c:8c:47:cf:29:9b:0a:dd:bd:c3:2e:ce:74:bd:0b:3c:14:
         c1:6f:1a:0c:5f:ba:2b:b3:47:cc:be:a9:f7:b5:9d:f7:f6:99:
         cd:19:1d:26:be:00:0a:31:16:2f:60:e1:ed:71:db:61:37:ef:
         76:d9:fc:eb:63:47:5c:5d:e2:a3:35:ec:64:20:c6:4c:88:f8:
         d6:7d:69:c0:86:59:69:ed:79:88:87:fe:f6:00:f7:83:e2:54:
         11:05:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 11:49:59 2026 by rpki-client