Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          1sLkRJkgtZtjwfG0jJYuN5w8HnqOrMFPNyMinT7brhY=
Subject key identifier:   FA:9B:BA:7F:6A:DF:60:95:0D:E8:E4:9D:A6:C5:01:DB:C5:5B:27:7C
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       019CAD2249E604E8CD99506008E1EC3DA645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 06:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:31 +0000
Files and hashes:         1: XxtWaMM5sBfFC2sC8FpjDL8Ge7Y.roa (hash: HWIQrBtT9vbpCee5Xkd6bp75O2LIMTf2r4JmS0NQHJ4=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: jsPVix80fBvkVAsT8xcX8JqP+FD/Gy2xJazJ0ThX7MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:49:e6:04:e8:cd:99:50:60:08:e1:ec:3d:a6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Mar  2 06:00:31 2026 GMT
            Not After : Mar  3 06:00:31 2026 GMT
        Subject: CN=fa9bba7f6adf60950de8e49da6c501dbc55b277c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:98:38:5f:ce:4e:7b:2b:1e:3f:f9:43:7b:
                    c6:a8:b8:bd:ff:4a:bd:f1:c5:c7:b7:0e:e1:32:a9:
                    5f:14:1a:13:32:06:d5:ea:49:95:05:ce:84:2a:31:
                    6d:34:13:c2:af:6d:77:81:25:9a:d7:c8:83:85:e8:
                    5d:1c:f7:81:b0:10:cc:e9:be:af:23:21:4c:df:f5:
                    18:7f:30:34:d8:98:0c:37:17:c8:26:c3:a3:72:21:
                    cd:0e:90:d6:53:4f:e4:c8:db:ef:a4:88:92:26:33:
                    04:b8:52:68:e6:64:5b:f6:21:c1:90:ed:6f:24:7b:
                    f1:8c:a7:83:22:97:85:1a:50:25:b0:a0:53:81:22:
                    02:c7:ab:18:7d:22:58:66:e3:49:29:39:a4:18:47:
                    6f:21:5c:cb:e5:32:2a:db:cb:f6:80:c1:32:23:83:
                    6d:c0:54:9f:e2:1b:e4:31:82:46:56:81:fc:39:af:
                    9f:71:f7:74:4c:37:dc:b0:71:03:af:a8:c4:64:40:
                    ea:b8:30:62:75:28:a9:b9:1a:95:53:ff:13:98:fd:
                    ab:2a:0c:24:19:56:e2:61:a6:59:e3:a2:d8:53:eb:
                    85:55:0d:68:18:08:a2:5f:79:80:a8:c1:d7:7a:a8:
                    b6:89:b0:8c:cb:d0:b1:ff:a8:5a:27:6f:f1:b7:2c:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:BA:7F:6A:DF:60:95:0D:E8:E4:9D:A6:C5:01:DB:C5:5B:27:7C
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:04:ba:38:28:27:d1:96:ba:d2:8f:5f:f5:84:a5:a1:11:8a:
         78:4b:20:7b:20:ea:b6:88:a4:30:75:17:43:9d:b2:80:ff:e5:
         7e:ee:b1:25:8f:57:ce:8d:8a:fa:42:82:b7:f8:be:5b:85:ad:
         88:d3:ed:09:d9:b3:fb:ac:4a:c5:49:b8:a1:de:f2:37:de:ae:
         04:3c:8d:72:8c:15:d8:7d:1b:e1:df:e9:0f:46:17:0a:73:ca:
         94:57:74:78:fc:2f:73:b5:b9:17:39:b4:ae:f5:11:34:98:d5:
         26:0a:f1:ec:19:01:a3:81:a7:82:67:cb:c8:34:4b:62:35:bc:
         88:2b:ad:81:db:2a:4e:33:15:c9:f1:cb:b4:bb:fc:dc:ce:39:
         25:00:f5:98:d5:89:51:2d:94:e2:eb:b2:96:ff:4a:ab:17:73:
         e2:72:28:6f:71:ec:58:21:cb:17:75:0b:7b:90:2b:94:fe:8f:
         67:0f:07:b8:e1:1d:7f:4f:a9:48:cb:71:da:39:67:06:78:98:
         41:d8:28:97:86:a6:86:4d:36:f6:80:f2:a2:40:7f:fa:8b:ab:
         01:a5:15:38:92:9a:c2:32:1e:17:a8:d0:03:51:38:a2:f7:14:
         b9:c8:96:2f:9d:8d:2e:63:bf:6b:4d:38:9d:69:d9:92:e3:e2:
         8b:79:9c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIknmBOjNmVBgCOHsPaZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw
N2Y4YzIwHhcNMjYwMzAyMDYwMDMxWhcNMjYwMzAzMDYwMDMxWjAzMTEwLwYDVQQD
EyhmYTliYmE3ZjZhZGY2MDk1MGRlOGU0OWRhNmM1MDFkYmM1NWIyNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RmYOF/OTnsrHj/5Q3vGqLi9/0q9
8cXHtw7hMqlfFBoTMgbV6kmVBc6EKjFtNBPCr213gSWa18iDhehdHPeBsBDM6b6v
IyFM3/UYfzA02JgMNxfIJsOjciHNDpDWU0/kyNvvpIiSJjMEuFJo5mRb9iHBkO1v
JHvxjKeDIpeFGlAlsKBTgSICx6sYfSJYZuNJKTmkGEdvIVzL5TIq28v2gMEyI4Nt
wFSf4hvkMYJGVoH8Oa+fcfd0TDfcsHEDr6jEZEDquDBidSipuRqVU/8TmP2rKgwk
GVbiYaZZ46LYU+uFVQ1oGAiiX3mAqMHXeqi2ibCMy9Cx/6haJ2/xtyy2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqbun9q32CVDejknabFAdvFWyd8MB8GA1UdIwQY
MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt
YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm
LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowS6OCgn
0Za60o9f9YSloRGKeEsgeyDqtoikMHUXQ52ygP/lfu6xJY9Xzo2K+kKCt/i+W4Wt
iNPtCdmz+6xKxUm4od7yN96uBDyNcowV2H0b4d/pD0YXCnPKlFd0ePwvc7W5Fzm0
rvURNJjVJgrx7BkBo4GngmfLyDRLYjW8iCutgdsqTjMVyfHLtLv83M45JQD1mNWJ
US2U4uuylv9Kqxdz4nIob3HsWCHLF3ULe5ArlP6PZw8HuOEdf0+pSMtx2jlnBniY
Qdgol4amhk029oDyokB/+ourAaUVOJKawjIeF6jQA1E4ovcUuciWL52NLmO/a004
nWnZkuPii3mc5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:28 2026 by rpki-client