Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          7DT2pZHE7fX1i8Au9gdOGTIeP+EWSQFg2fmjonONGC0=
Subject key identifier:   61:EB:B9:58:6C:C7:48:01:9D:96:40:07:BF:73:8D:A0:C6:07:98:D5
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       019CAC10053E7D35D5BFDB00058DEC0FEC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0CBB
Signing time:             Mon 02 Mar 2026 01:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:56 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: qS95XssibMs1JJMsSjPOR8wtbJXU3VAv1Sz3tlOpx+A=)
                          2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:05:3e:7d:35:d5:bf:db:00:05:8d:ec:0f:ec:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Mar  2 01:00:56 2026 GMT
            Not After : Mar  3 01:00:56 2026 GMT
        Subject: CN=61ebb9586cc748019d964007bf738da0c60798d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:57:04:38:3a:45:00:fc:9a:f0:83:a9:4a:
                    cc:0b:46:30:4d:0a:91:32:ef:d1:20:f1:69:49:b4:
                    71:4e:30:fe:ad:2a:a9:1b:e5:52:31:7c:31:ab:c7:
                    20:9d:cc:77:72:23:57:9d:a6:a6:63:a7:0b:cf:7c:
                    d5:9c:73:67:09:7b:62:76:60:94:9f:0a:5a:40:e6:
                    1f:4f:9a:a1:9b:a7:00:66:dc:e0:54:8e:78:46:2d:
                    06:23:14:94:a2:39:c3:02:ad:24:8f:0f:8e:ba:2a:
                    4e:e4:b7:d3:46:26:c3:aa:ed:07:65:83:3e:9b:da:
                    c1:25:03:ef:1e:08:63:e0:49:20:f6:36:46:66:10:
                    3d:36:e2:4e:66:1b:e0:68:90:ef:33:03:ac:1c:22:
                    de:4d:db:3e:a4:50:be:e9:85:f4:4b:6e:c6:9d:31:
                    0a:6a:fb:38:dc:08:94:a4:33:75:cf:d8:f8:64:a5:
                    77:d6:77:1f:6d:6f:82:d1:4a:8f:b4:bd:b2:41:ce:
                    cc:8b:bc:9e:83:f8:cb:02:b1:3c:cc:36:da:12:39:
                    53:dd:98:30:76:63:b2:d4:6e:65:a2:a3:8d:02:cd:
                    9b:73:2f:65:3a:06:be:b7:01:c6:5e:6e:42:2b:de:
                    12:fa:8e:c0:54:d5:b2:5e:34:26:17:d8:eb:6b:a4:
                    20:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:B9:58:6C:C7:48:01:9D:96:40:07:BF:73:8D:A0:C6:07:98:D5
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:7a:72:0d:4c:97:6c:dd:62:fe:85:0c:54:2f:23:77:66:
         5d:f2:7e:8e:e3:40:4e:8c:48:7c:a5:c6:da:b8:e9:59:6d:4a:
         85:1a:a6:59:ee:43:10:ab:26:89:3e:61:21:27:6c:c2:b5:76:
         05:3c:a5:5d:0f:83:7a:aa:b4:74:0d:fc:ad:2e:fc:34:20:7c:
         34:aa:60:86:82:d9:26:9f:67:22:d1:15:2a:20:c9:58:23:20:
         6e:12:61:f0:e1:e5:a5:d4:7e:1d:3c:8b:09:69:ba:39:3d:ea:
         dd:10:63:cc:b0:e3:65:dd:56:e3:79:5e:04:36:e3:4e:d6:8a:
         a0:2e:e9:29:c5:28:86:f9:35:e8:35:a6:7e:13:bd:6f:50:ad:
         90:85:1b:78:cd:23:bc:78:20:8e:4b:d2:99:ce:c6:84:a0:2f:
         4f:ca:56:08:5f:a4:42:a3:68:83:da:dc:74:be:2b:87:c1:8c:
         44:0d:15:8b:a0:52:41:9a:6a:cd:6a:f4:80:29:06:66:00:fa:
         b6:e4:f1:60:99:eb:67:ce:05:a7:24:9d:f3:c0:fe:03:02:99:
         03:26:9c:01:d8:6c:14:ff:25:bf:fd:49:34:92:cf:d3:97:bf:
         c8:f5:5b:8a:67:9b:d0:2e:d6:a4:dd:9d:6f:79:9a:d7:c0:1f:
         5f:39:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:53 2026 by rpki-client