Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
File:                     O-U4LPdsHE8EZFTfy45VXMlJXIA.mft (raw, json)
Hash identifier:          5u98z285TiBbQxo5RxeezeYCdaKF5V8oWSClEj2jJXY=
Subject key identifier:   6B:F6:F9:CA:5B:B9:0F:FE:83:94:09:B3:4D:BF:51:B4:82:B2:68:AE
Authority key identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
Certificate issuer:       /CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Certificate serial:       019D37897297F5FE4F6CEB78B2212D37009B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
Manifest number:          E6
Signing time:             Sun 29 Mar 2026 03:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:47 +0000
Files and hashes:         1: 0UiKB-W2Swet4yZkwt-cEISTHm8.roa (hash: 21qXUq6giXIzo60sm+LjiePUKIsWVBi36a4kVBUwoeE=)
                          2: O-U4LPdsHE8EZFTfy45VXMlJXIA.crl (hash: TG10UNKF3idD4iWwXRRmZg2EbloHlFmGa1KpapPbJG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:72:97:f5:fe:4f:6c:eb:78:b2:21:2d:37:00:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
        Validity
            Not Before: Mar 29 03:00:47 2026 GMT
            Not After : Mar 30 03:00:47 2026 GMT
        Subject: CN=6bf6f9ca5bb90ffe839409b34dbf51b482b268ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:c7:d3:fd:e6:30:47:4a:bc:39:6c:7d:6f:
                    04:14:44:c9:37:0d:98:91:8c:31:32:b4:eb:6b:de:
                    22:d5:e2:ed:77:09:85:6e:70:80:fe:30:74:d4:50:
                    d9:19:d8:23:14:f4:1c:1f:0a:04:36:5f:93:1f:4b:
                    8d:bc:ed:6f:a6:3e:59:53:b6:cc:00:78:52:ee:49:
                    fa:87:bb:2c:36:5c:ae:7b:9a:0d:3d:64:0a:36:1b:
                    b9:f4:a4:a5:72:74:4f:0b:4f:28:6f:98:db:5c:ec:
                    b9:86:e2:7b:bb:bf:42:e4:db:a1:67:92:3d:72:4a:
                    38:55:6f:8a:1f:72:79:6a:e4:96:67:47:d8:b6:bd:
                    8b:b5:be:ad:67:12:9f:78:02:d8:8d:db:b7:6b:0e:
                    29:10:d7:1f:25:be:b6:02:f0:de:44:88:66:d9:60:
                    58:cd:11:67:9b:28:ab:9f:85:07:08:a3:ea:fb:66:
                    36:86:ce:ed:3f:62:79:ff:77:b4:38:1a:2e:ff:b3:
                    a2:da:61:47:3a:1e:40:75:9a:e1:82:85:58:3d:d8:
                    90:75:3d:ec:b1:60:69:5c:61:a0:fc:bf:dc:cd:a0:
                    20:13:fe:f9:48:e0:de:5a:24:c1:0f:14:e1:8c:9a:
                    19:8b:f9:16:6f:40:27:c4:93:7d:85:3c:9b:47:3b:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F6:F9:CA:5B:B9:0F:FE:83:94:09:B3:4D:BF:51:B4:82:B2:68:AE
            X509v3 Authority Key Identifier:
                keyid:3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ba:0e:20:69:11:91:bf:f5:99:8c:7b:85:7c:7c:f2:1e:62:
         c7:b9:f1:9c:f0:8c:1a:54:bf:23:e9:6b:90:4e:6b:38:24:01:
         32:c6:89:fc:be:1c:b3:4a:87:51:00:8b:7d:df:94:59:37:26:
         09:48:5f:c8:6f:5b:22:9d:f5:e5:b7:fd:3a:20:78:36:41:00:
         a4:0f:ec:34:9a:80:92:d6:cf:56:97:14:f2:65:ea:16:f2:c5:
         3f:7f:b6:c1:1f:17:14:eb:e0:aa:f7:8d:ff:ab:ad:92:51:71:
         70:d1:09:68:c8:19:ec:c9:9d:53:81:30:c0:73:54:4b:2d:c3:
         c4:5d:34:aa:58:0a:fc:51:1c:85:26:2f:64:c5:f4:c3:e7:a8:
         9a:b4:68:3c:09:26:a6:69:cf:10:03:34:55:c0:23:e1:bc:43:
         ab:3e:ea:3a:85:e6:8b:60:12:f5:c6:8f:c7:b0:c6:b7:07:4a:
         ba:62:3a:1f:2c:72:9d:62:bc:25:6e:09:a2:86:7c:91:99:44:
         f0:44:28:50:2a:4c:92:87:6c:f7:74:13:07:c6:3e:d1:7d:9b:
         ad:be:fb:5f:92:1a:12:3a:7f:4c:d5:83:01:b3:1b:b8:d5:60:
         eb:89:e0:14:2c:31:da:cd:64:71:79:31:67:c1:79:53:e8:a6:
         2c:63:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:04 2026 by rpki-client