Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File:                     6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier:          dRfVFksjZw+lwTCnQ0UQKHsRVv+2e2AogXip9bkhzy8=
Subject key identifier:   7A:B5:D1:58:80:12:44:75:ED:18:23:15:61:5F:9A:2D:57:82:01:14
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer:       /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial:       019D38656F968DDAE7480B6C8EFBCB31D543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number:          0B5D
Signing time:             Sun 29 Mar 2026 07:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:04 +0000
Files and hashes:         1: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: +ypZIMoPyc6OX6I8fv2f91qGSPiuVqCmOowvbphcRRk=)
                          2: 8Xsxvtu48prUP1c3Cq8BeimcmMw.roa (hash: SK3knaerRRMCsRaWkniv3W5wobf8RfL84g7/rTqj+p8=)
                          3: jHbTT3CA2aeWkakA_yKhSA0bnTI.asa (hash: v4qw7uZySxD4c6tXQD4nuNcL8EauWZcwC/VCuIhh2fA=)
                          4: xH257Ita99JSrD30t-FgGckL_c0.roa (hash: kAypEhDEhvCkWwiznIgU1OvSjM0MFH33T7oLBUENq4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:6f:96:8d:da:e7:48:0b:6c:8e:fb:cb:31:d5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Validity
            Not Before: Mar 29 07:01:04 2026 GMT
            Not After : Mar 30 07:01:04 2026 GMT
        Subject: CN=7ab5d15880124475ed182315615f9a2d57820114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:36:40:a5:97:6f:c9:4f:52:02:64:06:41:
                    c5:66:fd:d0:63:3b:40:64:e4:2e:cd:29:d2:3d:ac:
                    29:81:3d:f6:e3:6e:b8:2e:67:6a:88:9a:7a:b8:21:
                    9b:77:c9:6d:bb:50:e4:33:93:6b:9e:c3:4a:fe:28:
                    e3:8d:ce:50:da:1c:6f:06:fe:df:c1:dc:4f:68:8d:
                    a5:db:78:3f:46:76:45:65:ac:25:1f:db:21:78:ee:
                    08:f1:a6:b7:82:a8:e4:de:91:d1:97:5e:62:1e:22:
                    ad:38:38:ad:74:80:09:02:1a:00:a6:50:f8:d8:3e:
                    a2:97:3c:99:2b:59:30:84:c0:90:98:c2:27:56:e5:
                    ca:99:29:bb:88:ba:8b:33:5d:b6:d1:f1:27:32:13:
                    81:0a:11:0a:ac:47:d8:40:ff:79:09:4c:5c:09:56:
                    49:34:70:ee:43:bf:3e:c2:02:ec:a6:af:85:08:c2:
                    d3:ac:d5:3e:0e:71:bb:57:24:b2:a4:93:b9:ae:8b:
                    f3:6d:30:b3:b2:60:8c:13:b0:65:a0:77:2a:78:7d:
                    36:19:93:94:b4:dd:ec:d3:2f:a8:ea:32:60:cd:f8:
                    35:2c:4d:96:26:37:fc:5a:c5:43:d6:6e:13:bc:a4:
                    68:20:f2:60:50:a2:06:66:25:1b:a1:f8:20:26:85:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B5:D1:58:80:12:44:75:ED:18:23:15:61:5F:9A:2D:57:82:01:14
            X509v3 Authority Key Identifier:
                keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:47:43:0e:89:2b:4b:fa:42:63:36:94:bd:3f:ba:e5:a9:
         4d:29:9a:e8:39:3d:fa:5e:42:f1:38:95:e4:e3:fe:48:e4:f7:
         79:ca:1e:06:bf:89:96:30:bb:05:d9:0c:46:e5:18:22:bc:99:
         49:f0:9a:ad:99:48:c6:c2:92:2a:d0:f3:74:b3:85:70:4c:5b:
         94:84:fa:6c:5e:4d:9b:10:e9:51:0a:73:c9:7a:8c:5e:88:1a:
         4c:9c:96:61:76:34:3e:45:86:a9:ca:1b:7b:ac:79:35:ab:83:
         2c:af:7d:86:0b:e0:ff:b2:1f:e2:42:16:dc:23:3d:11:d8:94:
         f3:bf:7a:d7:c9:e0:ec:df:c8:01:4d:aa:33:41:49:a0:92:58:
         32:6d:ea:cb:00:20:3d:b1:dc:cf:46:6c:26:68:28:81:4b:01:
         2b:44:2a:85:86:40:cd:2c:64:84:fd:73:76:cb:38:52:55:67:
         49:d6:2f:ed:f0:fd:7a:bc:73:34:8a:df:72:ec:64:f1:4b:3e:
         14:5a:f7:3b:b7:39:ff:0e:fd:97:a0:66:af:43:b3:5b:85:98:
         fd:b5:5c:07:5f:55:89:d2:60:78:5b:9b:a4:6d:c2:c0:75:72:
         1a:cd:ec:c1:52:83:66:cc:63:d4:18:98:c2:eb:cb:26:19:c8:
         fc:26:b9:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZW+WjdrnSAtsjvvLMdVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMjNhNWY0N2VjNjdlOTI1YTkyNDkxYWI5OWIyNGJhMzcx
MTgzZjEwHhcNMjYwMzI5MDcwMTA0WhcNMjYwMzMwMDcwMTA0WjAzMTEwLwYDVQQD
Eyg3YWI1ZDE1ODgwMTI0NDc1ZWQxODIzMTU2MTVmOWEyZDU3ODIwMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfM2QKWXb8lPUgJkBkHFZv3QYztA
ZOQuzSnSPawpgT324264LmdqiJp6uCGbd8ltu1DkM5NrnsNK/ijjjc5Q2hxvBv7f
wdxPaI2l23g/RnZFZawlH9sheO4I8aa3gqjk3pHRl15iHiKtODitdIAJAhoAplD4
2D6ilzyZK1kwhMCQmMInVuXKmSm7iLqLM1220fEnMhOBChEKrEfYQP95CUxcCVZJ
NHDuQ78+wgLspq+FCMLTrNU+DnG7VySypJO5rovzbTCzsmCME7BloHcqeH02GZOU
tN3s0y+o6jJgzfg1LE2WJjf8WsVD1m4TvKRoIPJgUKIGZiUbofggJoWCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq10ViAEkR17RgjFWFfmi1XggEUMB8GA1UdIwQY
MBaAFOsjpfR+xn6SWpJJGrmbJLo3EYPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTIt
ZmZlMjFlZjk4Njc0LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTItZmZlMjFlZjk4Njc0
LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUw5HQw6J
K0v6QmM2lL0/uuWpTSma6Dk9+l5C8TiV5OP+SOT3ecoeBr+JljC7BdkMRuUYIryZ
SfCarZlIxsKSKtDzdLOFcExblIT6bF5NmxDpUQpzyXqMXogaTJyWYXY0PkWGqcob
e6x5NauDLK99hgvg/7If4kIW3CM9EdiU879618ng7N/IAU2qM0FJoJJYMm3qywAg
PbHcz0ZsJmgogUsBK0QqhYZAzSxkhP1zdss4UlVnSdYv7fD9erxzNIrfcuxk8Us+
FFr3O7c5/w79l6Bmr0OzW4WY/bVcB19VidJgeFubpG3CwHVyGs3swVKDZsxj1BiY
wuvLJhnI/Ca5WQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:17 2026 by rpki-client