Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          ZZnwvXXqcBk8npXWSg00sEfR4lVm7lJkfnBVz5ExB60=
Subject key identifier:   3B:63:AE:5E:B5:08:6C:B9:DA:9E:BC:71:03:51:66:47:4D:34:11:EE
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       019CABA218FDA15E13B1964B8BC270A62B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          077F
Signing time:             Sun 01 Mar 2026 23:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:53 +0000
Files and hashes:         1: 8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa (hash: CzDXuVFvOpgIjJyo8JK5OTAHeeCyIkIfuyxNLXuiD4w=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: TyjECmxBiuRZVUGSoh1LLcAEEfDCQjRcQGSRAr8uWyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:18:fd:a1:5e:13:b1:96:4b:8b:c2:70:a6:2b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Mar  1 23:00:53 2026 GMT
            Not After : Mar  2 23:00:53 2026 GMT
        Subject: CN=3b63ae5eb5086cb9da9ebc71035166474d3411ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:20:5d:87:01:67:ef:cc:65:4b:29:ba:bc:
                    30:0c:19:60:ed:7e:11:a7:30:d8:d3:80:c9:77:18:
                    dd:9c:45:a7:81:04:83:07:94:ec:0e:e4:5d:16:5e:
                    c3:4f:6e:fa:69:bf:2b:18:11:dc:83:c6:a8:95:22:
                    dc:6b:37:f0:ca:49:67:98:54:40:bc:37:00:f6:35:
                    aa:80:f3:18:31:0d:53:41:53:49:b8:d3:50:bb:32:
                    d6:dd:f4:bc:e1:be:43:37:5a:8d:56:e8:bd:5c:f2:
                    9a:ce:b9:d3:43:20:80:3c:ef:bd:14:06:b0:e5:e6:
                    48:ef:4d:08:7e:9c:58:23:7f:42:97:65:d2:77:8c:
                    17:fc:5a:12:89:a5:38:bb:34:7b:1b:58:e8:f9:a5:
                    82:25:13:73:13:05:06:2a:d2:14:f8:30:54:a5:72:
                    0d:58:5e:1c:7d:7e:06:28:31:1c:11:ab:e7:4e:3e:
                    28:06:eb:a5:8d:70:02:5d:44:c5:08:82:09:d5:82:
                    52:6c:85:7b:e2:86:f4:34:92:c7:dc:50:a6:58:25:
                    84:6d:46:45:7a:be:97:d4:e0:9f:ae:ac:6c:1c:e4:
                    4b:24:ff:a4:70:92:65:fb:4a:57:3a:01:94:fa:a0:
                    90:68:dc:03:e0:92:dc:c3:3e:70:e0:22:79:b8:bd:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:63:AE:5E:B5:08:6C:B9:DA:9E:BC:71:03:51:66:47:4D:34:11:EE
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:ed:33:8f:78:dc:74:a6:82:e0:b7:51:18:63:9c:3f:1b:ae:
         2e:83:bc:76:58:2b:9b:11:d8:7f:39:48:6f:12:6b:5e:86:18:
         82:60:03:52:f7:9c:c3:16:c8:38:bc:af:02:0d:14:5b:dc:f4:
         2a:49:ed:2a:a5:ca:e6:0f:7b:d7:c5:91:83:4a:76:b3:00:25:
         66:a2:e5:b7:8b:bb:81:33:a9:8f:69:bc:3c:ff:ed:f5:59:c2:
         84:73:61:56:ee:6d:dd:20:67:45:52:3e:9b:7b:d7:e7:dc:6b:
         7e:da:c7:11:f9:3e:d7:a9:12:2c:8b:42:13:aa:31:84:82:81:
         3d:c1:0e:84:4b:cf:f7:b0:55:ee:07:3f:02:95:0f:86:93:e0:
         22:1a:75:f1:4d:a4:42:86:40:99:8b:9c:82:d0:3b:e5:a3:3a:
         d4:e7:ea:f9:b9:b9:cf:ef:96:1c:02:49:be:13:87:70:db:38:
         2b:81:a2:80:62:9b:f7:47:95:c8:d0:d8:d1:01:ba:c5:0d:25:
         7c:02:e7:b3:b4:98:eb:98:97:95:6a:bf:7d:7a:b6:a8:d1:d6:
         16:e5:fa:fe:7b:6c:34:e2:59:68:af:c5:57:87:ee:6a:d0:d3:
         8d:ca:4c:5c:ce:7c:90:cd:1f:8a:97:a4:d1:01:dc:13:8f:93:
         06:10:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:39 2026 by rpki-client