Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
File:                     6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft (raw, json)
Hash identifier:          9DMCG21YG0nbduzyZgUzCa8bwARa2jlIJw+UopouUu8=
Subject key identifier:   8B:95:F9:D7:F8:46:E8:74:F5:C7:91:5F:7B:8B:60:CC:F0:C6:13:7D
Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
Certificate issuer:       /CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Certificate serial:       019CE6DAF36AD82AE0F5E3B09D76BEC08C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
Manifest number:          0A8D
Signing time:             Fri 13 Mar 2026 11:00:34 +0000
Manifest this update:     Fri 13 Mar 2026 11:00:34 +0000
Manifest next update:     Sat 14 Mar 2026 11:00:34 +0000
Files and hashes:         1: 3WRTlHzKYOrm4AbDmKjr4w5CRlU.roa (hash: JIn9kOrrikFOyPhnJDeOrhDS1w67s7IYtwSsVMfbz6o=)
                          2: 6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl (hash: 31hGplY6styMB8PKVjYMA1wN8rg08vj7kigcNqSLUaM=)
                          3: lRPyn2QePJK0WhcWTY9j2nGmexk.roa (hash: xAWF2k7h+INOernXeq2UXI+UZNCtrXr4mV/H1PEWqVI=)
                          4: yAmjstmK_WAKkiMnnSQlSpVnKX0.roa (hash: rk5CxmSreGsegz3mqebupC7Tg4Z4mve0MyRTJ4uS7E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:da:f3:6a:d8:2a:e0:f5:e3:b0:9d:76:be:c0:8c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436
        Validity
            Not Before: Mar 13 11:00:34 2026 GMT
            Not After : Mar 14 11:00:34 2026 GMT
        Subject: CN=8b95f9d7f846e874f5c7915f7b8b60ccf0c6137d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:89:17:84:07:ea:13:74:52:22:95:6b:12:
                    f2:a5:ca:e9:09:3e:8d:61:6d:2c:c4:f8:b1:d4:e9:
                    5d:27:dc:9f:93:bb:66:c3:7b:5d:cb:b4:05:c8:04:
                    c1:cb:a2:2b:fa:87:59:4a:56:b1:27:99:87:71:ff:
                    a3:43:42:78:c9:56:82:eb:d9:3d:c0:be:46:c0:12:
                    0d:53:3f:25:f9:25:77:ce:e4:0b:3e:6c:84:17:44:
                    33:f8:4c:bc:7f:cd:c0:fb:ac:a6:17:3b:f6:07:74:
                    0e:22:98:27:0c:71:ff:d5:d5:f9:0b:fe:86:7b:89:
                    0e:f6:0e:86:00:4e:83:bd:df:87:e6:f3:0c:20:48:
                    72:73:c9:01:ef:00:d0:b8:94:24:b1:b4:1f:d0:cc:
                    2e:66:f3:2f:6f:fa:44:d4:32:0b:00:0e:06:78:a5:
                    34:44:57:60:1c:40:9c:ab:a6:b7:f7:8d:c1:d9:d8:
                    e1:69:16:5d:46:f5:dc:ac:4c:ca:5d:68:7c:1b:be:
                    8c:af:84:18:ab:1b:8f:d1:a5:e1:83:22:e7:6f:6a:
                    54:e4:3c:2f:03:c3:07:98:b7:f7:2a:46:6f:79:bb:
                    12:d1:66:dd:c1:e0:4e:0c:28:9e:55:6c:64:66:a2:
                    fe:35:26:79:da:4c:26:43:6e:ac:c7:7e:6d:fd:be:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:95:F9:D7:F8:46:E8:74:F5:C7:91:5F:7B:8B:60:CC:F0:C6:13:7D
            X509v3 Authority Key Identifier:
                keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:01:a0:69:b3:d8:1b:5a:8e:54:2f:95:29:5f:9e:1c:5c:52:
         bf:a7:6a:3a:09:93:46:2c:e6:5e:ac:6e:c3:25:78:64:02:af:
         cc:3e:b0:56:6d:e9:13:b5:0c:6a:ee:06:73:50:f6:73:52:02:
         07:38:82:84:96:cd:8d:fd:d5:32:bf:cf:23:f8:42:8d:27:5a:
         8a:ab:d6:04:35:08:97:e4:24:4b:58:c4:9f:ca:cb:33:04:62:
         11:61:ba:35:33:2f:53:e5:5e:b5:82:ac:a7:cd:e0:c9:e1:dc:
         d9:49:37:59:70:c1:0d:f2:fc:06:d9:87:5d:b8:4c:1f:d3:c8:
         1d:48:36:95:be:99:eb:72:b1:43:c0:66:1b:7f:b9:8e:8e:1a:
         78:25:80:3d:4a:8e:cc:0f:47:5a:83:f9:ea:b6:27:d5:ee:cd:
         f7:09:bb:ef:0c:49:26:a1:fe:4e:7d:da:c2:fd:43:e5:79:b8:
         55:cf:ac:20:83:77:66:1f:20:bc:31:cd:ad:2f:af:79:3a:81:
         0a:b4:69:85:6e:ef:e3:59:37:c6:b5:97:f4:46:a3:00:37:65:
         6b:5c:26:ea:42:14:53:a9:e6:94:6d:95:d3:0a:49:04:18:06:
         bf:6a:97:8e:20:f7:a5:b2:40:3d:c8:46:ca:45:0d:7a:8c:f1:
         01:ba:1e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzm2vNq2Crg9eOwnXa+wIwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDU3NDcwZmQ1NmYxYjc3M2IyZTQwYWJhZWU3OWY5OTY2
ZTQ0MzYwHhcNMjYwMzEzMTEwMDM0WhcNMjYwMzE0MTEwMDM0WjAzMTEwLwYDVQQD
Eyg4Yjk1ZjlkN2Y4NDZlODc0ZjVjNzkxNWY3YjhiNjBjY2YwYzYxMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7GJF4QH6hN0UiKVaxLypcrpCT6N
YW0sxPix1OldJ9yfk7tmw3tdy7QFyATBy6Ir+odZSlaxJ5mHcf+jQ0J4yVaC69k9
wL5GwBINUz8l+SV3zuQLPmyEF0Qz+Ey8f83A+6ymFzv2B3QOIpgnDHH/1dX5C/6G
e4kO9g6GAE6Dvd+H5vMMIEhyc8kB7wDQuJQksbQf0MwuZvMvb/pE1DILAA4GeKU0
RFdgHECcq6a3943B2djhaRZdRvXcrEzKXWh8G76Mr4QYqxuP0aXhgyLnb2pU5Dwv
A8MHmLf3KkZvebsS0WbdweBODCieVWxkZqL+NSZ52kwmQ26sx35t/b7QEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuV+df4Ruh09ceRX3uLYMzwxhN9MB8GA1UdIwQY
MBaAFOkFdHD9VvG3c7LkCrruefmWbkQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGIt
OTIxOGY5MmYzMDM2LzEvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGItOTIxOGY5MmYzMDM2
LzEvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAGgabPY
G1qOVC+VKV+eHFxSv6dqOgmTRizmXqxuwyV4ZAKvzD6wVm3pE7UMau4Gc1D2c1IC
BziChJbNjf3VMr/PI/hCjSdaiqvWBDUIl+QkS1jEn8rLMwRiEWG6NTMvU+VetYKs
p83gyeHc2Uk3WXDBDfL8BtmHXbhMH9PIHUg2lb6Z63KxQ8BmG3+5jo4aeCWAPUqO
zA9HWoP56rYn1e7N9wm77wxJJqH+Tn3awv1D5Xm4Vc+sIIN3Zh8gvDHNrS+veTqB
CrRphW7v41k3xrWX9EajADdla1wm6kIUU6nmlG2V0wpJBBgGv2qXjiD3pbJAPchG
ykUNeozxAboeag==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:23 2026 by rpki-client