Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File:                     s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier:          DEbUm8n2RRripEDH8AiEy1xLVzJHVgLMKAbrT0hk6sQ=
Subject key identifier:   0A:1F:03:48:47:83:72:D9:64:27:0B:D6:AD:0C:80:19:CE:6D:F4:B4
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer:       /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial:       019D389C459FFA8D9EBC00E29048C6FA9719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 08:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:58 +0000
Files and hashes:         1: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: FfcLhHSqCcU4uh/Gw3mPToSxwPNNwLQVjCvRIat80+8=)
                          2: xkix9rxtRJKN9muc3A9znVU0wSY.roa (hash: qGsESUAEiY6Y+S9TBPbDTAxY1gqMsRCWWSHmRkuLruU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:45:9f:fa:8d:9e:bc:00:e2:90:48:c6:fa:97:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
        Validity
            Not Before: Mar 29 08:00:58 2026 GMT
            Not After : Mar 30 08:00:58 2026 GMT
        Subject: CN=0a1f0348478372d964270bd6ad0c8019ce6df4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:91:5e:10:9f:30:82:ac:cb:02:bc:a9:6e:
                    7b:1a:a4:2f:0a:30:1d:e7:c2:2b:c9:d3:9c:f7:a1:
                    07:20:13:43:69:7d:fa:ad:4a:4f:e9:ec:dc:17:2d:
                    cc:31:db:ad:3f:08:4d:af:f4:74:b1:43:35:32:28:
                    62:9b:fe:b5:9b:59:21:b5:1e:18:7e:fd:0a:d7:6b:
                    3f:4d:16:e6:99:2e:64:6e:18:0e:ff:51:2c:bd:89:
                    8e:89:dd:7e:9d:45:f2:4e:62:51:1a:8d:0f:d8:d6:
                    88:d0:e4:ff:9c:65:ab:cc:0b:f2:7c:36:a8:81:49:
                    b1:d3:b2:bd:0e:fb:0e:50:5d:33:a1:db:d3:da:14:
                    11:30:4d:7d:e0:5a:60:ba:00:1b:0f:74:de:99:d3:
                    37:ff:25:4b:c7:82:7b:f9:44:69:97:8f:43:f6:ed:
                    c6:af:59:1e:db:6d:cc:b8:e0:73:47:53:de:8b:c8:
                    5a:e2:f0:0f:44:26:03:18:6d:9f:1e:61:04:49:5a:
                    ab:cf:3d:20:16:d0:db:c9:70:67:9f:a2:85:fc:b4:
                    98:04:f7:b3:6f:2a:a1:36:09:a6:b2:e1:5d:b8:6d:
                    a2:0a:01:63:f8:91:86:fb:1b:bd:81:f2:7e:1a:37:
                    7a:7a:ce:71:b3:40:81:c7:75:38:63:61:1a:11:88:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:03:48:47:83:72:D9:64:27:0B:D6:AD:0C:80:19:CE:6D:F4:B4
            X509v3 Authority Key Identifier:
                keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:ba:70:e3:eb:e2:1f:2f:e2:74:9f:7d:aa:e6:56:a7:ef:
         34:30:30:fb:5e:c5:45:af:60:72:60:41:c6:1b:15:2b:9c:db:
         f3:a4:4d:1f:5d:87:a3:41:30:fd:97:e6:48:a2:ed:61:51:26:
         43:f6:06:5c:92:3d:4c:22:ef:6a:0e:bd:89:2a:a2:35:0a:b2:
         ea:eb:bb:d9:fe:85:e2:27:93:c2:5b:6f:94:a7:59:ae:64:f3:
         9b:47:bd:46:6d:89:41:b8:63:fb:de:42:21:90:74:0f:6c:3d:
         96:06:7e:9d:07:e1:1a:ed:58:14:57:ec:e9:69:58:5b:87:b6:
         3e:94:78:50:1b:79:23:80:5d:05:07:84:34:71:59:c8:51:d0:
         c3:86:d5:c2:57:a6:da:e3:66:17:e4:48:58:61:34:49:47:11:
         aa:26:45:39:03:5d:03:86:5b:36:86:dc:ca:51:da:2a:fd:90:
         cb:20:cf:2a:18:3a:9c:bc:d7:0b:1f:43:2c:13:47:5a:92:65:
         ca:03:1c:e3:41:c2:af:02:70:94:5d:c6:bf:bf:26:0d:80:5b:
         e3:94:1b:51:26:17:3c:46:c1:ac:9e:1b:b8:7f:12:76:02:d7:
         2c:52:f4:6b:d0:60:8c:dd:50:95:88:5e:99:66:05:3a:bc:5d:
         03:ae:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:44 2026 by rpki-client