Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File:                     q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier:          6ZlDVQMU74l40xrfwRC/L8CTL4s10R6fV2/Cye0Pjaw=
Subject key identifier:   E8:21:5D:BF:DA:01:A4:F6:7C:B8:E8:44:59:E6:17:A1:B6:B7:FF:98
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer:       /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial:       019D3789DD3154373942CD41B5F547C7C12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 03:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 03:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:15 +0000
Files and hashes:         1: 4HGQ2m_tsGQ8bwCnPSXfEpO9HVQ.roa (hash: Q57pytqlVJrw0ni19UPnInhK5SASLjHDFcZbHb2XGnE=)
                          2: Dtb5L2i3F4bloLJfx5uawZqIkls.roa (hash: gjTGNWMLVvyGT9SUilWAhMd6bQfNZN+VjF9bv+zIY+Q=)
                          3: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: amrwV5zfsXKoNQTvhsW5PTC14DeqxXEfJNAalR89xmQ=)
                          4: wCs9k6Mf4iHjjidVUpH6jUD59BE.roa (hash: 7sOLGSFd18txziMvutD89np8EpQNTpEhmRbFbF2gz54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:dd:31:54:37:39:42:cd:41:b5:f5:47:c7:c1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
        Validity
            Not Before: Mar 29 03:01:15 2026 GMT
            Not After : Mar 30 03:01:15 2026 GMT
        Subject: CN=e8215dbfda01a4f67cb8e84459e617a1b6b7ff98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:02:7d:f1:e5:e8:6a:cb:63:54:a4:43:06:
                    be:2f:52:9e:b0:a7:c3:0d:b5:35:3f:60:81:a5:0f:
                    7e:23:57:90:d9:4b:87:aa:4b:67:f0:ef:ec:6a:04:
                    dd:45:00:43:74:60:d6:85:00:9c:fc:3c:01:6f:3f:
                    aa:59:48:6b:af:d3:bc:9f:83:0f:ae:a7:85:e5:a0:
                    85:e5:d2:de:ec:4a:26:48:fe:90:89:ae:83:3b:8d:
                    bb:a9:00:f6:b4:b4:f0:f6:24:13:27:49:60:b4:8c:
                    e8:44:f0:e5:9a:4d:31:af:ba:d0:14:20:10:cd:c7:
                    c0:93:10:66:3d:18:72:d7:91:12:bb:1d:ed:b4:a3:
                    be:d8:7b:9b:14:91:f2:41:9a:c5:07:76:e5:74:e3:
                    7f:5c:d3:d5:16:12:59:09:2b:e5:38:49:09:ad:b2:
                    d3:51:e6:1a:de:44:53:13:a0:e0:c0:80:ee:4c:6c:
                    fb:9f:91:14:04:09:a5:79:6d:2c:f4:b3:d4:c6:70:
                    3f:0f:4d:6c:1e:ee:ae:03:8f:d1:e8:1f:49:f5:b2:
                    21:b1:38:68:29:51:43:65:d9:ad:d7:bc:d4:e3:6a:
                    f6:3c:39:8a:0c:bc:89:65:b7:f2:09:13:68:2c:bc:
                    06:9d:53:ef:f3:d2:a0:24:0c:4b:fd:29:e5:fb:c0:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:5D:BF:DA:01:A4:F6:7C:B8:E8:44:59:E6:17:A1:B6:B7:FF:98
            X509v3 Authority Key Identifier:
                keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:d6:5f:43:a1:e8:06:9b:93:f6:23:e2:c8:38:59:58:88:
         72:97:3a:b6:28:86:ae:c0:c5:eb:39:33:4c:bc:91:61:14:d8:
         eb:1b:a6:52:05:ad:58:a8:5d:bc:98:c0:af:66:b2:29:78:d1:
         9b:ca:9f:4d:73:72:06:b9:7b:b1:59:cf:a7:52:0a:36:ea:ec:
         8f:45:b4:b6:41:b6:ed:d8:35:02:61:35:6b:26:e8:dc:58:a8:
         3d:00:b5:8a:fc:7d:e8:64:e5:98:a6:07:bd:50:7e:b3:c2:7b:
         36:7c:60:a0:88:7d:8f:14:67:b3:9b:20:b4:33:18:5e:47:e9:
         2d:c9:ea:34:b5:fc:a5:b7:43:31:13:57:f6:99:28:ab:c1:db:
         10:cd:3e:b6:d0:0f:d6:b9:76:91:b5:52:3d:cd:e4:36:46:08:
         5a:a8:13:e2:97:15:fc:e4:29:42:7f:58:f7:35:c8:48:80:dd:
         d1:6d:ce:4b:ad:02:58:41:e5:99:8a:1c:73:cb:0c:a9:2c:6a:
         da:45:0e:1a:2f:89:bd:bf:05:98:4a:22:5d:8e:9d:b2:71:e0:
         cd:62:b0:6f:20:a0:7f:f3:13:00:83:b5:7c:a9:15:ec:1c:e9:
         5f:ee:ad:4d:57:a5:f0:88:e1:c8:bc:00:0d:cb:31:dd:24:d4:
         23:8d:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:36 2026 by rpki-client