Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          RPIYm0TeuOSHNG5cLeED77342viMOR5oxYjbAaSjuYA=
Subject key identifier:   5E:30:5B:EA:AE:E0:FA:84:96:CB:D5:AA:19:B7:A1:DF:6F:92:05:0A
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       019D382E89A39DCDD72E38247A89AB2CE540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          17E5
Signing time:             Sun 29 Mar 2026 06:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:07 +0000
Files and hashes:         1: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: RiQIsJAp/LrxiWZ3i35VRWM7Ea3CXvfsJIlv9UTzTWM=)
                          2: YFM3OR80uMxXBvo7d01mGQqdTak.asa (hash: OUuOkx0VK1NKbygTu3e1bb1UITQTKF8W3QKqUov9Zmk=)
                          3: YzrXnq3vRorLDkTNpUF7ED1XPXE.roa (hash: akkM/3QksJnCzoJ9FHhEn+9ohX+WOVP8QHjLBNNOvGc=)
                          4: aYEe0Wp6s-0vMrsmI0r1Am-aAmE.roa (hash: 0zIQeQUHMUd4XTm26NFK/GYzSa6prZHKRHgzCL5iipE=)
                          5: cV6HlXd9VLe--dSuiSOFXK3TxRM.roa (hash: cKnEl0wq7eLVeKPF83FlArGfxSvAPlhsKghSnnUyAeI=)
                          6: mIcG_kEYZC1jyRE_dH-HaI-yzCY.roa (hash: 7aEUk3f39asrdQDlVo3nL7Bci/VYA+D2BlsnqVXZqDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:89:a3:9d:cd:d7:2e:38:24:7a:89:ab:2c:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Mar 29 06:01:07 2026 GMT
            Not After : Mar 30 06:01:07 2026 GMT
        Subject: CN=5e305beaaee0fa8496cbd5aa19b7a1df6f92050a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:b3:41:f9:cb:c1:c0:ef:99:af:98:f8:a8:
                    e2:a6:9e:1d:5b:10:21:4a:10:91:ff:d4:18:20:d8:
                    53:5e:83:2d:df:47:ab:c0:e2:9d:4e:20:33:cc:10:
                    0c:c9:6b:ce:e0:8a:8e:88:ee:a4:49:9d:d2:54:e2:
                    2f:d8:d6:9f:cb:04:07:cb:d2:d3:a7:19:f0:fc:69:
                    42:03:37:bb:48:09:96:49:a1:fe:12:82:62:74:96:
                    72:5c:6b:6f:01:e3:45:47:1b:93:cc:59:43:24:9c:
                    7a:55:13:59:1d:b9:84:68:cd:35:67:52:87:86:ad:
                    2c:18:eb:96:9a:22:04:24:4c:b0:da:04:d6:99:87:
                    f4:6d:e9:f4:83:f0:f1:2c:59:28:70:6e:4f:1e:b9:
                    44:b6:9a:e8:ba:ad:f5:3d:81:48:f1:7b:45:ef:cc:
                    7b:24:68:24:da:7c:56:a0:e9:ec:3d:a7:38:88:62:
                    0c:f9:57:06:5b:8a:59:7e:89:97:0c:d7:19:4f:49:
                    2e:11:bf:36:e0:43:71:88:3a:15:73:d5:f8:8a:d5:
                    2d:01:6c:2b:54:aa:f5:e3:58:a8:91:c8:d8:37:a7:
                    98:a0:f9:fa:a9:e7:47:d9:31:3a:39:11:aa:9e:2a:
                    b4:d9:b8:d5:63:be:c0:ff:b4:f5:a2:59:db:bd:7c:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:30:5B:EA:AE:E0:FA:84:96:CB:D5:AA:19:B7:A1:DF:6F:92:05:0A
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:59:d4:6f:29:db:f9:54:db:d0:43:5b:7b:13:15:e1:9b:0e:
         1f:9e:93:d2:8b:8b:b9:ba:ed:27:12:2a:02:2b:c7:a2:46:1a:
         87:07:fe:02:f8:59:a0:14:b8:c7:df:47:0c:84:b5:93:a8:8d:
         ea:ba:d1:e9:8e:37:da:ce:ec:8d:10:fe:15:05:ff:60:e6:2f:
         92:b0:1c:40:99:84:69:4c:57:6d:81:b2:5d:18:a3:e8:e9:ad:
         08:d4:73:56:37:b8:c3:82:ce:c6:ed:3b:40:77:24:37:c5:5e:
         47:dc:a4:58:d4:93:d2:1d:8a:82:42:1f:68:19:d5:53:64:88:
         8f:4f:2a:fb:4a:c7:0e:f8:a4:bc:56:6c:8f:64:d8:ba:3e:da:
         29:b0:ea:76:44:98:77:ec:69:b9:7b:38:e8:0c:da:f3:18:b5:
         d2:bb:b3:52:99:a2:66:ac:a9:74:5e:3d:dd:6c:4b:c6:87:2e:
         cb:d8:48:86:84:1d:ee:09:c1:4f:bc:39:cb:bf:e6:6e:02:34:
         b6:05:d6:df:43:b4:0b:ec:71:ea:05:14:ef:c3:c3:a6:ce:b9:
         60:32:74:a2:11:8d:89:f3:0a:97:0c:d6:79:4a:b6:c8:1f:0d:
         36:81:e6:f2:0d:e2:fa:a0:0b:83:bf:09:74:01:5a:42:79:0e:
         74:fa:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:39 2026 by rpki-client