Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
File:                     F6zfazcM8QTIcsxNuutzcbL3xoo.mft (raw, json)
Hash identifier:          Q2h+AKAILNaEz/CtxLHTLVn5+LPRzxUTFFjtSngHbW0=
Subject key identifier:   13:A4:F8:A9:B9:8C:A1:83:46:B3:9F:3C:15:F2:73:21:E2:43:24:9A
Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
Certificate issuer:       /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Certificate serial:       019D390A13981E01AADBCA5D838927AF3627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
Manifest number:          030D
Signing time:             Sun 29 Mar 2026 10:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:54 +0000
Files and hashes:         1: F6zfazcM8QTIcsxNuutzcbL3xoo.crl (hash: KHpNBxmCaKOhEW+ZzWOd+hUIz8VV+uCK0Q7QB4roy5A=)
                          2: Muw91QFF1gZnvIhmwJGxe0JW4UM.roa (hash: uuXLdfsOuVDa4QD34/Jn4ShZlQdSH9Vf/9OOXP9hBVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:13:98:1e:01:aa:db:ca:5d:83:89:27:af:36:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
        Validity
            Not Before: Mar 29 10:00:54 2026 GMT
            Not After : Mar 30 10:00:54 2026 GMT
        Subject: CN=13a4f8a9b98ca18346b39f3c15f27321e243249a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:53:d9:d1:d9:ef:ac:74:a3:a9:79:33:60:
                    de:2f:97:68:10:47:68:45:71:44:65:a6:07:9c:f2:
                    5d:54:80:f1:32:4b:1f:c3:5b:69:3f:78:b1:a4:4c:
                    b0:7e:0b:aa:62:98:1b:9e:64:aa:33:f5:d2:19:91:
                    a9:78:87:39:54:c8:45:26:42:ba:f9:30:8f:33:b2:
                    6f:a8:ee:6d:4a:5e:e8:0a:cd:34:52:ed:81:b6:87:
                    81:9a:47:1d:3b:62:b6:47:9c:12:54:7d:dd:83:3b:
                    ea:3d:d8:3e:8d:a1:ae:d1:a8:6c:5c:b2:10:0a:e5:
                    5c:71:84:94:98:57:83:5e:29:39:fa:97:ef:26:87:
                    46:a9:8d:74:1e:11:60:05:f5:a7:ae:0a:c6:86:65:
                    e8:bb:b4:a9:aa:1d:4f:b2:08:b8:7a:5d:df:9f:32:
                    17:34:63:4f:c9:a9:22:86:eb:04:6b:e2:a1:02:a3:
                    31:01:5a:6b:21:f1:12:a8:65:7e:be:04:56:cd:8f:
                    fe:47:71:38:ae:3f:68:2b:00:01:1d:5d:45:ac:de:
                    be:e7:57:65:48:e9:2c:12:c7:31:b5:08:2e:3b:2b:
                    a8:66:00:53:26:ca:8c:f1:49:8a:04:bb:78:15:eb:
                    a7:7f:a8:b1:b6:28:2c:10:07:23:de:46:a7:9d:0f:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A4:F8:A9:B9:8C:A1:83:46:B3:9F:3C:15:F2:73:21:E2:43:24:9A
            X509v3 Authority Key Identifier:
                keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f9:84:5c:3d:b6:06:6e:f8:e7:4e:0d:fc:3c:f9:43:0b:30:
         bc:10:2b:c5:f3:8f:41:0e:0d:cc:14:0f:5a:03:87:58:5f:dd:
         bb:ec:64:2b:e3:5e:f9:28:51:33:31:47:54:cd:c1:4e:be:c5:
         68:90:de:be:e2:78:99:fd:bb:8f:37:45:cc:a0:af:73:71:b5:
         81:64:0e:c3:39:80:bb:86:b3:49:08:d2:44:7f:e1:b0:e1:2a:
         04:13:8e:c6:42:d1:2e:7d:a5:01:bd:c7:e9:c4:74:0a:7d:40:
         83:27:77:e5:c5:ed:1c:a9:26:16:71:11:82:51:40:89:5d:db:
         19:26:63:38:4e:d9:e9:5e:68:d6:cd:63:53:a9:0b:ca:81:df:
         d6:05:99:95:0a:ee:11:9e:2f:2b:9b:ec:94:99:00:45:8b:a4:
         9f:3e:1f:a5:67:9c:98:1f:33:f5:0f:a2:36:ce:9c:57:f5:fb:
         1b:32:e2:0d:3d:f2:47:0d:90:60:53:98:e8:dc:1b:99:d9:84:
         9f:d4:9f:68:b2:3f:0c:d6:eb:73:12:74:05:95:e1:b5:c0:88:
         28:31:3d:b9:ab:22:7f:8d:29:98:10:8f:7d:95:b1:f3:46:8e:
         f7:28:b7:f4:14:8b:02:eb:ea:b9:80:a1:cf:b9:a3:c6:f8:7a:
         43:3e:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:00 2026 by rpki-client