Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          a0TD4Ijd5YKafYCwM2L2Sy8/doIrT0OaiLGCgH5CeBA=
Subject key identifier:   62:DD:C9:43:F6:B9:F4:80:FF:96:51:AD:FB:07:C7:60:82:7C:20:4B
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       019CABA217833A491EE0F2177AA1D5583420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0B60
Signing time:             Sun 01 Mar 2026 23:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:52 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: GNcEy41mbI9ejRuXtfBtgR80hSY2qKPqFqtuvslpRBE=)
                          2: H6-FSC2W-7MZwFLducWzxTiTk1Q.roa (hash: M01qYjr1lkeGo2Zh4TnE75ep6vS7RdnFiFA27dCWb7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:17:83:3a:49:1e:e0:f2:17:7a:a1:d5:58:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Mar  1 23:00:52 2026 GMT
            Not After : Mar  2 23:00:52 2026 GMT
        Subject: CN=62ddc943f6b9f480ff9651adfb07c760827c204b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:92:e5:e9:87:e2:a8:be:ad:1a:65:28:3f:
                    32:07:9b:a0:93:5c:e2:2f:9a:ba:b9:ca:0d:e2:ac:
                    c2:ba:1c:1b:6b:3e:3e:44:f6:27:05:33:7b:9b:b5:
                    d3:ba:8d:a1:b5:bc:32:92:bd:c2:ad:a0:b5:a4:c8:
                    da:4b:5f:b4:7f:dd:5f:e3:0a:d4:7c:dd:68:9b:0e:
                    ac:78:c5:32:8b:e9:40:30:9f:b4:0d:cc:b6:73:72:
                    39:5b:8a:7f:b6:84:1c:86:e9:9f:69:f9:3c:bb:5f:
                    4b:9a:91:90:28:a1:6f:ae:69:a2:52:fb:d3:05:4f:
                    00:b8:7a:b6:e1:69:60:be:a8:0f:13:a2:b3:de:68:
                    b1:30:46:84:be:1b:3b:78:51:f9:f2:d5:95:05:5c:
                    91:dc:c2:37:bd:da:c6:f0:a8:15:88:f0:3b:d9:15:
                    0d:a1:46:bf:11:20:b5:9b:32:71:dc:74:de:a1:c7:
                    af:a5:e3:55:db:2d:4c:68:76:cd:71:23:1f:70:ce:
                    4f:63:5c:8e:f7:af:d2:e0:e6:30:06:5d:d0:0b:2c:
                    3a:ff:6a:17:01:21:d2:fd:31:93:1f:79:62:f2:85:
                    bc:37:f2:52:fb:6e:b1:8f:33:dd:a4:c4:20:5b:46:
                    4c:79:3a:78:1d:82:b1:86:93:d5:12:62:d5:ce:89:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:C9:43:F6:B9:F4:80:FF:96:51:AD:FB:07:C7:60:82:7C:20:4B
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:03:91:bf:57:3e:48:e5:f1:9c:13:a1:b9:d2:f1:be:42:ec:
         f5:20:a9:6e:fd:ae:75:cc:e9:21:75:28:be:f4:fe:b2:05:4f:
         6a:cf:f8:2a:73:2b:66:2b:4c:7b:ed:0a:44:14:16:7f:df:bc:
         31:51:d8:28:16:39:18:e3:7c:19:35:26:43:3d:51:7e:ed:38:
         51:41:32:d7:20:38:76:9d:38:81:d7:e9:38:5d:6e:1f:51:36:
         51:d2:0d:6d:78:54:bf:87:8f:35:14:dd:2a:cc:8c:6a:58:50:
         d2:88:59:08:89:1c:14:22:85:c2:d3:9e:82:6c:9e:88:73:13:
         9a:23:0f:f4:ae:82:49:ec:57:63:d7:6a:8a:71:87:e6:ae:1c:
         5b:a0:95:5c:2e:e4:01:43:d4:b9:d1:11:ea:3a:f2:7c:dc:c1:
         bf:21:48:5f:9f:00:b7:15:6e:cf:0e:8d:f2:dc:bd:eb:e7:6e:
         67:5f:25:d8:32:7d:80:10:62:60:db:ee:cd:69:1a:0b:7b:5f:
         3a:3f:52:3c:1f:d6:69:34:34:db:b1:66:b0:35:83:39:12:ec:
         de:97:ce:a4:62:c6:88:7c:bd:08:3e:db:90:a6:bc:29:25:1b:
         ad:3c:d5:e6:0d:44:f2:1f:69:45:d1:cc:89:89:b9:70:00:5a:
         6d:9a:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:49 2026 by rpki-client