Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          F/2SnmRV+Tlr+sVTDfGUEd6MWVEj3p95Fd6Ek6DzEqY=
Subject key identifier:   24:38:77:F1:34:91:B4:17:05:D7:F9:00:C6:D0:A6:65:5F:4F:7B:EB
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       019CE9A51F5CD0AC297BC6FB19056E8184A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          0834
Signing time:             Sat 14 Mar 2026 00:00:38 +0000
Manifest this update:     Sat 14 Mar 2026 00:00:38 +0000
Manifest next update:     Sun 15 Mar 2026 00:00:38 +0000
Files and hashes:         1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: W1NidwoiwLVBrJRPZkLMR6jH3SEkgeiknKEqYTgciqs=)
                          2: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (hash: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:a5:1f:5c:d0:ac:29:7b:c6:fb:19:05:6e:81:84:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: Mar 14 00:00:38 2026 GMT
            Not After : Mar 15 00:00:38 2026 GMT
        Subject: CN=243877f13491b41705d7f900c6d0a6655f4f7beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:11:18:8e:61:da:a3:40:1a:1c:de:44:04:31:
                    9e:2c:0b:53:19:14:fa:f4:18:8e:8c:cf:11:7d:1b:
                    3c:14:cf:b5:73:01:7e:3b:0d:76:02:24:09:ea:91:
                    92:8b:d7:bb:42:43:6d:48:97:67:bf:7e:c4:f7:40:
                    1e:c8:7d:2b:48:35:3c:cf:3c:0a:19:8f:76:d3:3e:
                    55:7e:be:ef:58:d8:10:a4:e7:30:76:b1:a5:71:35:
                    42:bd:15:cc:89:a7:93:4d:ec:a9:1f:43:09:70:fd:
                    8f:a6:28:af:17:66:6d:36:cb:85:e6:9b:8b:25:48:
                    85:0f:ef:1d:ba:42:54:44:d5:59:bf:c3:a5:fd:55:
                    d3:32:69:8d:60:bb:bf:98:1d:64:f3:7c:99:22:d9:
                    eb:86:12:d7:8f:27:6d:23:42:a1:ec:77:20:a9:b1:
                    50:35:63:68:7d:1c:e4:f8:33:6f:ca:5e:4d:1f:b1:
                    b2:a2:7f:53:8c:99:3c:9f:43:24:e5:ff:e9:08:9f:
                    cc:92:dc:ea:c2:27:cb:47:2f:6a:a8:46:1b:ac:68:
                    66:0e:93:7f:51:3e:a6:d5:7f:d8:0a:53:cd:6b:2f:
                    5d:16:dd:79:41:a5:38:2f:5a:17:1e:72:39:0a:a6:
                    5b:fe:0c:a1:86:72:f7:22:c3:25:96:c4:dc:f4:26:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:38:77:F1:34:91:B4:17:05:D7:F9:00:C6:D0:A6:65:5F:4F:7B:EB
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:b5:af:45:8a:0a:73:38:42:94:61:49:b8:91:05:60:7a:
         31:9b:25:66:18:b3:df:e6:99:42:95:bc:ee:c9:58:06:f5:03:
         3a:ce:dc:e5:e8:de:0f:26:f2:e0:c0:0d:71:0c:1f:15:07:2f:
         7f:25:13:fe:f8:0d:09:eb:ab:68:dd:e1:99:8c:97:15:e5:77:
         88:01:2b:6f:0a:cb:1c:db:1d:75:6e:d4:ec:89:5b:f8:e2:fa:
         54:18:7d:b1:a7:5c:32:56:7c:82:05:94:4d:bc:6d:f0:40:3d:
         e0:90:9b:dd:42:a3:d5:be:c5:13:50:77:3c:17:fb:36:3c:80:
         83:14:6a:cb:81:9e:7a:e0:7f:43:47:a9:20:f5:ac:23:b5:1d:
         ed:29:ba:9d:02:78:79:a2:91:80:31:3a:4d:92:1b:79:e5:af:
         5d:27:4f:f4:af:d7:c3:53:a8:f7:6e:c4:2c:f0:1f:c1:f4:64:
         16:c7:e7:73:3e:e6:98:ee:55:e3:a0:43:6b:26:60:65:c6:2a:
         f1:a5:34:d3:0b:72:f9:71:fb:03:bc:71:33:a8:61:ff:6e:a1:
         fc:a3:48:72:b3:9a:aa:33:ed:32:b0:c8:5d:34:e9:55:ec:3c:
         ca:0f:9f:2b:77:b1:d5:53:4c:89:7c:dd:bf:fa:7a:e4:b6:04:
         e6:88:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:56:18 2026 by rpki-client