Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
File:                     B6_c1el6wcECR5yVTV-SKxJsvBQ.mft (raw, json)
Hash identifier:          CwWzB72P5aA4qpiJE04Oe31IPs5o0hUzDYsROGAVxwo=
Subject key identifier:   65:8B:CB:4F:00:76:34:41:80:B3:08:D6:8B:1D:52:8A:D0:38:FD:2B
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       019D0C6858A49579566249E903B214F68A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
Manifest number:          0497
Signing time:             Fri 20 Mar 2026 18:00:58 +0000
Manifest this update:     Fri 20 Mar 2026 18:00:58 +0000
Manifest next update:     Sat 21 Mar 2026 18:00:58 +0000
Files and hashes:         1: 3OuolTqmnVs6LtXiOd0QS9vfCo8.roa (hash: GAosGByG2yWB3lnHWPHloQDBkOxUHG7WW4iZIv6/8iA=)
                          2: B6_c1el6wcECR5yVTV-SKxJsvBQ.crl (hash: fOhuzrTsrqJ5oLVPneh1qGo4TOn1ONXhX/2OiT+H/SE=)
                          3: JGFsu11gMw9F7k2pf3aoCr2qqgc.roa (hash: /VEyQYusggRI1neKRiaRdt+JnQjrF2mEYj/mhbapZW4=)
                          4: MGFMl29uIul04Dkcmid5PDEF1ZY.roa (hash: ++vse/hC6lI4DMbABO7vSgWLBZfrwdYx2oCRckLJX9M=)
                          5: aBvBIhagv1Eh6Jv4p0LVBwaqyvc.roa (hash: dc4tXzkN5KUEUJGZTtTk5sZozulR7ysWSoCkggZPqwU=)
                          6: j3LHCzy_F6bYYmeWSo0ZiTKih8U.roa (hash: d6PIjAHsMGIzhvIIwNAHH5wwnWUITwMg8K91/kfRdWQ=)
                          7: oR5Wj0GKTXMBG21ienfrWq8vGSM.roa (hash: WRzwTNKdQL5QAbJ2ozPhC4DWD0wEitc9Oj75KHVMQ+4=)
                          8: tyNPCkeOnMPE8ffpgSI6cQ46rco.roa (hash: 1bhYy/zNueI3junFzpZGGhw3wm4zlmN3upkt7WLic/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0c:68:58:a4:95:79:56:62:49:e9:03:b2:14:f6:8a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Mar 20 18:00:58 2026 GMT
            Not After : Mar 21 18:00:58 2026 GMT
        Subject: CN=658bcb4f0076344180b308d68b1d528ad038fd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:12:a2:1a:c7:79:be:4a:0c:b4:ba:ce:e2:
                    0f:d4:59:81:81:22:16:c7:55:29:f5:b8:3f:14:57:
                    13:a2:1e:22:90:a8:c5:86:6a:bd:62:9d:eb:7d:13:
                    6b:20:07:ee:c3:64:0f:d5:e3:65:61:ea:d8:be:9b:
                    a2:f2:40:e8:56:c9:4b:06:1b:c3:c5:f0:78:64:22:
                    8b:85:6d:41:01:61:0b:d8:35:78:cd:59:a5:e4:7b:
                    70:d8:f6:ce:c0:eb:74:29:02:f6:99:3e:20:f0:b2:
                    29:8a:b9:1b:79:35:d2:bb:b8:37:83:e2:9e:82:f4:
                    f9:25:2f:9c:b5:d6:77:90:39:19:c2:bc:28:98:05:
                    ab:4c:b7:db:4e:ea:d3:e6:ff:15:0f:e1:b4:8f:9a:
                    8a:f1:8c:cf:7a:c7:40:0a:05:d2:e8:9a:90:1d:51:
                    e1:79:5a:81:e3:66:8d:32:d0:82:c8:a2:75:91:a9:
                    18:b1:d8:f8:67:3d:65:7c:44:10:2f:37:4e:65:63:
                    80:4c:f6:39:a2:51:77:b5:60:c4:ee:9f:56:61:00:
                    22:80:92:ab:5b:1f:bc:43:e5:4a:f4:db:df:b4:f9:
                    86:32:50:08:aa:2b:dd:a3:89:d7:80:ed:61:bf:90:
                    7a:18:47:74:ad:6f:5a:de:12:0f:38:e8:92:1e:ab:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8B:CB:4F:00:76:34:41:80:B3:08:D6:8B:1D:52:8A:D0:38:FD:2B
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:76:28:05:db:1d:aa:04:56:04:bc:1d:89:3c:d5:a5:6d:
         77:23:71:c0:e7:17:97:20:d8:c6:a7:5f:62:d1:3f:3b:fa:20:
         cd:27:38:b2:22:16:a1:2f:e3:28:62:ea:0d:30:27:03:8c:ae:
         2f:78:a1:3a:4d:7f:73:a9:65:b5:c2:22:d3:62:0b:db:b2:f1:
         55:ba:01:84:bd:7d:bc:2e:50:8f:2b:eb:79:29:ac:c4:0e:6e:
         7b:22:b9:54:6c:bd:6b:b5:19:2c:a5:1b:31:28:46:c0:4e:cf:
         24:7d:2e:ec:9a:05:ce:4c:85:56:16:28:08:8d:3c:39:27:7f:
         d9:2b:97:fd:45:1c:85:e5:5c:cc:37:19:27:b2:10:13:a3:df:
         54:9e:0c:3a:ea:5a:88:bd:94:44:75:35:e2:c1:76:0d:a1:4e:
         6d:b9:9a:43:85:1a:a4:b6:3b:55:27:29:9e:9f:e8:af:51:9b:
         36:73:bb:ac:11:71:0d:2c:17:d6:fa:df:8c:5f:d7:be:f9:5c:
         16:a8:68:84:63:3e:f2:26:7a:bb:11:be:09:4b:e0:4f:af:c6:
         2f:9e:fd:04:25:69:45:ea:ad:d4:ce:e9:d2:5b:d2:ed:6e:76:
         61:84:73:9c:3e:87:6c:da:38:03:f2:5c:44:53:bc:d6:70:62:
         ea:81:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 21:18:22 2026 by rpki-client