Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
File:                     6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft (raw, json)
Hash identifier:          j8NWUhTn0ECnHm21dlZRzN6FWEkCmdO/iWpEdBUg6LU=
Subject key identifier:   D7:E0:0C:88:65:CD:5C:34:79:51:F4:F0:DC:BC:CC:A6:A3:DD:1D:53
Authority key identifier: E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C
Certificate issuer:       /CN=e81ceffa7305fa6678897aedbbbd2164df008a9c
Certificate serial:       019CA86A4F841BD25AC006AAD45A5E335EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
Manifest number:          014B
Signing time:             Sun 01 Mar 2026 08:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 08:01:05 +0000
Files and hashes:         1: 6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl (hash: ld4kY78XhlplaO08DVgMK17K0pwOEauRYeSW7GrwE2g=)
                          2: z0UfyMAo_7LR-LH3Jw8zf8UbLD0.asa (hash: QGDgWeH1kEe3DX+Xml/09V0FNXz92WKITaFTUaHDCkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:4f:84:1b:d2:5a:c0:06:aa:d4:5a:5e:33:5e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81ceffa7305fa6678897aedbbbd2164df008a9c
        Validity
            Not Before: Mar  1 08:01:05 2026 GMT
            Not After : Mar  2 08:01:05 2026 GMT
        Subject: CN=d7e00c8865cd5c347951f4f0dcbccca6a3dd1d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:49:cf:4f:cc:9b:6f:35:73:b1:f7:1e:ef:
                    fc:d6:0a:03:70:35:d7:95:61:9c:d5:88:52:f3:cf:
                    49:10:62:a7:38:fb:84:95:04:72:9a:2d:79:80:9e:
                    c4:7e:be:9e:d3:2b:35:13:fb:20:fe:31:c4:fc:fa:
                    c0:1c:b6:85:12:66:2c:ac:9e:82:7f:e2:2c:ed:b6:
                    43:96:79:b9:86:2b:cd:65:ea:1b:97:6d:7d:6a:a0:
                    80:fa:df:65:16:ea:10:65:4c:ff:f1:b1:b3:4e:e3:
                    2b:39:c3:73:17:0d:2f:f2:b0:98:78:bb:6d:95:ba:
                    c9:dd:4b:40:a5:5e:33:c4:23:27:78:ed:a7:5c:17:
                    81:ca:c6:e7:9d:16:d1:cf:71:91:92:d4:ab:0d:38:
                    d0:b0:ec:06:5e:64:1b:39:02:dc:16:45:32:be:91:
                    dc:36:5e:33:0f:62:f7:62:61:59:ea:ff:04:1f:17:
                    00:60:fe:56:6f:3b:20:d7:9c:5f:fb:09:1a:4a:2e:
                    d4:2e:8d:e4:99:a8:c7:d8:ec:9b:cd:cd:2b:34:46:
                    7b:f3:c7:34:17:5d:09:49:e7:0a:78:93:cd:d2:98:
                    eb:cf:48:a2:67:33:57:58:94:54:0b:d4:66:37:b6:
                    0d:c2:0f:8b:38:39:7f:c7:3e:c3:c0:62:cf:22:6c:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:0C:88:65:CD:5C:34:79:51:F4:F0:DC:BC:CC:A6:A3:DD:1D:53
            X509v3 Authority Key Identifier:
                keyid:E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e9:ad:75:d8:9c:49:2d:2a:c7:bf:da:44:03:41:10:59:dc:
         ca:ce:50:60:74:8f:1a:65:b0:bf:40:73:c7:48:e3:be:3b:af:
         0b:f0:5f:01:10:c4:81:1f:ea:80:99:14:5c:55:47:c6:53:4b:
         52:f1:f3:9d:eb:33:16:82:8a:8f:0f:bf:da:d3:13:f6:61:44:
         a2:af:b1:b6:d3:9a:d7:06:e4:67:d8:e0:4f:8a:46:65:35:36:
         8b:c7:8a:55:c0:34:f5:e5:3d:ec:a4:ba:76:07:39:5c:12:91:
         ed:85:c9:1c:d3:21:e0:46:90:8a:6b:1c:61:d7:9d:f4:f9:95:
         4b:35:f6:b4:90:83:38:69:0b:e5:a1:8c:61:fa:d7:9f:df:34:
         87:cd:39:17:0f:ef:a5:8e:5b:6a:ce:4a:bd:f5:c1:bc:c8:27:
         15:3f:da:c9:ae:a0:f8:42:d3:b7:0a:84:84:59:5c:07:be:60:
         97:62:3a:ac:d1:e6:40:5a:d7:9e:bb:8c:cd:7a:6c:6e:cf:68:
         f6:48:c7:e9:06:5c:cc:1d:d4:b4:90:b0:d8:d2:58:fc:3b:0b:
         bb:67:80:67:14:4f:ff:fa:6f:a7:b2:55:fb:73:70:18:6d:15:
         1a:8c:ed:e6:a7:ca:2e:a9:c8:1f:17:4d:68:35:ce:ac:dd:8c:
         af:d2:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:16 2026 by rpki-client