Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File:                     N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier:          0FVwYNZKlOB400ILbpThfNB2GxrkcU61mZFumTiTwgg=
Subject key identifier:   13:B8:AD:E7:7A:BC:37:30:52:BF:5B:98:65:CB:9A:A2:3B:8E:19:F9
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       019D3789A8A10C530FE28416E172AF7BD52D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number:          06A6
Signing time:             Sun 29 Mar 2026 03:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 03:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:01 +0000
Files and hashes:         1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: qSrPANgQdQ60fe3ooi3oBUoZ87LSPamSUVl66Q7077Y=)
                          2: mTMV3JVVafTQbCI8fMfsYYbI-GM.roa (hash: OvidQY4NfhMTBeSM+DOJ+WEE6JBe1DZJww12CtdTTqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:a8:a1:0c:53:0f:e2:84:16:e1:72:af:7b:d5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: Mar 29 03:01:01 2026 GMT
            Not After : Mar 30 03:01:01 2026 GMT
        Subject: CN=13b8ade77abc373052bf5b9865cb9aa23b8e19f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:d8:59:04:31:24:98:05:27:68:1e:3b:f3:
                    df:a2:c4:dd:d3:71:d5:81:15:b8:6c:eb:bb:88:b0:
                    14:60:f4:80:2f:f2:1f:6d:24:02:c4:85:73:ad:64:
                    73:dc:3b:6f:aa:87:03:57:ea:31:de:8b:52:26:88:
                    2b:75:d0:21:6c:04:b7:e2:55:fb:70:93:4f:e2:bb:
                    a3:ef:24:6a:04:73:a9:e5:e6:d8:ea:cb:41:54:bf:
                    a4:f4:be:92:38:14:b4:e5:1d:7b:fa:b6:ab:ed:d8:
                    3b:68:69:96:d7:34:bb:98:f0:84:55:e5:01:6e:65:
                    f6:73:14:b8:cf:35:c1:30:1d:88:5c:11:7f:b2:cb:
                    2b:c4:01:66:21:50:89:94:f3:6c:bd:df:0d:49:6e:
                    d6:c0:05:90:2c:56:ee:a7:85:0f:50:50:c7:5e:e1:
                    a5:f8:e8:89:80:5d:5d:82:c3:e3:97:0b:8c:dd:a0:
                    92:af:df:43:96:f5:f9:82:ba:ec:e6:7b:d9:de:21:
                    a6:25:1c:4c:a4:d8:ff:7d:16:b1:cd:62:1a:2a:8e:
                    f6:ef:e1:08:b8:16:c2:13:8c:9a:f0:40:fc:96:51:
                    13:18:08:66:1c:3e:ba:ca:87:95:1f:40:be:8e:f2:
                    d4:68:ec:cf:60:cf:9f:3a:ed:29:c0:4f:99:80:3a:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B8:AD:E7:7A:BC:37:30:52:BF:5B:98:65:CB:9A:A2:3B:8E:19:F9
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:2d:9f:06:ec:47:46:5b:37:ae:71:4b:7a:63:8f:02:9e:
         65:a0:ca:a2:5a:fe:58:89:07:6d:20:70:76:f7:a7:cb:c3:42:
         36:04:60:c2:a3:d7:09:1b:37:d3:4b:c6:b5:9b:ce:ab:ea:ec:
         6c:2a:df:c7:11:e2:04:09:3f:0e:a7:af:5b:e9:78:64:cf:af:
         9e:db:79:97:0d:0c:0b:f0:66:0f:1f:e6:67:32:00:8d:4f:38:
         48:ca:00:dc:b6:b1:32:c1:c5:51:20:08:ff:f3:9b:b3:5d:a9:
         44:5b:a5:7f:33:7f:6d:05:1e:f0:ad:a7:66:01:fa:ba:b5:f9:
         8d:c1:8a:30:5f:e9:df:ed:06:6e:01:c8:89:59:42:b1:67:1f:
         1e:2b:a5:6a:89:d7:fe:20:cc:5a:a3:9e:2d:0c:c5:b4:e5:4d:
         65:79:2e:34:ce:11:f9:e9:55:25:19:ca:9d:2e:60:1b:c0:de:
         d3:0d:fb:e4:6c:a1:53:40:ee:a9:38:05:71:42:5e:48:6c:9d:
         e5:cb:5a:06:27:db:55:b0:ce:c5:57:5c:0b:9c:78:dc:07:c5:
         d8:20:89:8a:2e:b9:cd:ae:d9:8e:e5:00:46:5a:8c:1e:ff:df:
         67:46:e2:12:1d:f3:65:b6:fd:e5:75:02:4f:5d:53:c4:36:d3:
         5b:ea:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:59 2026 by rpki-client