Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          UjtvQoQw82B5PxWRwciXQCf10iyXND4/GesqEA8sCzE=
Subject key identifier:   37:F9:6D:61:47:99:56:69:0E:E3:A7:AA:70:E6:82:D9:48:1E:2E:47
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019D3AF7F51C8D857BFBC61EBCFA3594FC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          18A6
Signing time:             Sun 29 Mar 2026 19:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 19:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 19:00:21 +0000
Files and hashes:         1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
                          2: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
                          3: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 00AoFCsXBwRNXPGhYwmgHf8nM9w9N/u44ZZq0s5mSqA=)
                          4: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
                          5: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
                          6: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
                          7: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
                          8: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
                          9: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:f7:f5:1c:8d:85:7b:fb:c6:1e:bc:fa:35:94:fc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Mar 29 19:00:21 2026 GMT
            Not After : Mar 30 19:00:21 2026 GMT
        Subject: CN=37f96d61479956690ee3a7aa70e682d9481e2e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:dc:36:a5:6d:c4:c0:b4:95:d4:dd:fd:c2:
                    44:62:cf:a0:11:83:a2:26:ef:68:f1:26:83:43:ca:
                    b2:c7:d1:eb:68:ab:3f:b3:33:a1:ef:3d:f7:62:e9:
                    fb:d6:4a:97:11:bc:73:29:d1:7f:74:5c:6f:72:30:
                    6d:48:d9:b5:89:1b:79:14:fb:ce:73:f7:0a:59:63:
                    dc:58:e7:58:5d:b8:95:b8:34:e5:fc:f1:84:25:35:
                    ee:66:32:58:e4:09:8d:c1:cf:3b:50:fb:2d:2c:42:
                    34:aa:4b:c6:c0:39:fd:7d:f3:bd:40:05:6c:38:65:
                    94:37:fc:77:d8:4f:ec:86:e9:3b:34:40:7a:c5:79:
                    73:f2:c4:01:7c:74:96:ca:5e:f4:26:3b:28:26:bb:
                    34:0a:ee:cd:3d:dc:7f:69:30:67:f3:43:3f:e6:99:
                    c3:53:b6:d4:6b:b3:58:90:fc:15:08:ed:a2:b9:fd:
                    54:67:cd:60:38:76:7b:bc:61:21:77:4f:16:f6:71:
                    69:97:7c:23:db:b6:2e:77:2d:d8:69:0e:34:60:2e:
                    a2:bb:6d:65:25:cb:6f:15:d3:9d:b6:29:6c:50:5c:
                    c2:a9:e6:5b:c7:6d:48:89:e2:25:94:03:e7:2b:18:
                    99:47:c5:b9:32:7f:b7:a7:f0:25:bb:73:52:3a:c1:
                    a0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F9:6D:61:47:99:56:69:0E:E3:A7:AA:70:E6:82:D9:48:1E:2E:47
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:44:09:e7:9d:de:ab:9c:60:63:7d:6b:97:4f:f1:82:ae:27:
         69:ff:34:1c:ed:fa:5e:e0:67:37:5e:ce:7f:0f:03:f7:5d:cf:
         90:de:2b:80:63:b2:b7:4f:16:d6:55:1c:90:d2:a3:6a:6f:56:
         fc:11:a5:2e:1c:de:23:e8:2c:60:f7:11:57:4f:c2:b0:f5:3d:
         9e:5b:fd:b7:2e:83:ce:2b:e0:82:95:c6:f6:19:86:dc:8b:ca:
         40:73:08:be:7c:06:f6:84:f1:b3:44:37:d8:cb:0e:97:84:0d:
         b5:9e:13:2e:32:a0:39:6a:1c:9f:f6:59:d5:48:65:69:fb:ae:
         3a:02:19:f7:49:08:65:55:73:93:1f:ee:ca:ca:08:9b:15:58:
         d8:10:8e:8d:32:ff:0f:e5:c3:97:58:90:a4:93:66:17:1d:01:
         56:d0:bd:4d:13:af:a4:da:17:4c:3c:93:66:92:14:b7:81:b3:
         c3:f1:d2:b3:2b:1d:2b:b2:63:ae:1a:75:84:7b:ce:d7:ac:53:
         25:1b:3a:c1:ef:83:56:48:f3:5c:65:3f:fe:ca:c0:a9:09:3a:
         ee:b0:c5:03:f4:ed:32:84:52:3a:b0:e9:b0:7b:ee:17:1e:ac:
         3a:f3:f2:77:d3:b5:c8:72:5e:61:13:89:7a:46:52:74:6f:40:
         9a:ac:15:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ069/UcjYV7+8YevPo1lPxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjYwMzI5MTkwMDIxWhcNMjYwMzMwMTkwMDIxWjAzMTEwLwYDVQQD
EygzN2Y5NmQ2MTQ3OTk1NjY5MGVlM2E3YWE3MGU2ODJkOTQ4MWUyZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ/cNqVtxMC0ldTd/cJEYs+gEYOi
Ju9o8SaDQ8qyx9HraKs/szOh7z33Yun71kqXEbxzKdF/dFxvcjBtSNm1iRt5FPvO
c/cKWWPcWOdYXbiVuDTl/PGEJTXuZjJY5AmNwc87UPstLEI0qkvGwDn9ffO9QAVs
OGWUN/x32E/shuk7NEB6xXlz8sQBfHSWyl70JjsoJrs0Cu7NPdx/aTBn80M/5pnD
U7bUa7NYkPwVCO2iuf1UZ81gOHZ7vGEhd08W9nFpl3wj27Yudy3YaQ40YC6iu21l
JctvFdOdtilsUFzCqeZbx21IieIllAPnKxiZR8W5Mn+3p/Alu3NSOsGgtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf5bWFHmVZpDuOnqnDmgtlIHi5HMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEQJ553e
q5xgY31rl0/xgq4naf80HO36XuBnN17Ofw8D913PkN4rgGOyt08W1lUckNKjam9W
/BGlLhzeI+gsYPcRV0/CsPU9nlv9ty6DzivggpXG9hmG3IvKQHMIvnwG9oTxs0Q3
2MsOl4QNtZ4TLjKgOWocn/ZZ1UhlafuuOgIZ90kIZVVzkx/uysoImxVY2BCOjTL/
D+XDl1iQpJNmFx0BVtC9TROvpNoXTDyTZpIUt4Gzw/HSsysdK7Jjrhp1hHvO16xT
JRs6we+DVkjzXGU//srAqQk67rDFA/TtMoRSOrDpsHvuFx6sOvPyd9O1yHJeYROJ
ekZSdG9AmqwVuw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 23:43:19 2026 by rpki-client