Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
File:                     6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft (raw, json)
Hash identifier:          qRKNQJRTUJrCc2dLBKntTk6iEXghb1fKoMhUImXdaYs=
Subject key identifier:   D4:20:97:9C:3B:DE:49:D2:2D:A1:BE:79:7C:10:2A:3F:00:6C:BC:EA
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Certificate issuer:       /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial:       019CAC0FA5B0D4042AFCC22E29BC4DE3F4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
Manifest number:          0BD1
Signing time:             Mon 02 Mar 2026 01:00:32 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:32 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:32 +0000
Files and hashes:         1: 3o1ZI6fxFoLS5eOhvdLrRlLz1tI.roa (hash: AgXfeLflwUyXHokNoe/oSAYdRjH74BmGTMx6XDivjKU=)
                          2: 6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl (hash: /lnjsAd2MjWNtUEUa7qQKwRxDRDKAPf9ZoC4sQqE2m8=)
                          3: 8TgZ1ezQTau0zguN7Ddhap1UtEM.roa (hash: vUGsoKyYaDO9yJpgoC4HYrCuKAT3mZ2cyxJ8r1fHfwQ=)
                          4: BmS_AQaxlhglywSE02RG2_rJiGY.roa (hash: tmqsvLGMWmGAehHm7bUNUAhfsU0S4H4ASFv4gNLmWaQ=)
                          5: Lx0K9lLnIS2XRE8KOCHplr3trIc.roa (hash: XcwrjUKLZLtCJShyhuwTmWJBM6qO1mrooCODnVbzvqg=)
                          6: WL-PhP-8tAb3LtmBZx8lxpLGwf0.roa (hash: iSX3ZsoK41fG160H34V7gzcx/c4IOR5OUgg7W7aba+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:a5:b0:d4:04:2a:fc:c2:2e:29:bc:4d:e3:f4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
        Validity
            Not Before: Mar  2 01:00:32 2026 GMT
            Not After : Mar  3 01:00:32 2026 GMT
        Subject: CN=d420979c3bde49d22da1be797c102a3f006cbcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:1d:91:0a:71:9d:fe:1c:98:08:a9:b7:41:
                    e1:de:86:94:b8:ba:f1:02:2c:91:fb:b5:81:be:9e:
                    e1:94:40:2e:e7:e8:cf:65:8c:77:cf:18:a5:85:2f:
                    e0:5e:66:c5:9d:19:b2:38:f7:92:af:df:87:c3:bf:
                    32:a9:51:15:29:b9:82:c8:b5:6b:32:1d:20:37:76:
                    f9:f7:6e:0b:a2:ad:b2:72:6c:3f:4f:58:59:d2:fe:
                    69:70:e8:e0:57:0b:9c:f7:53:2f:a3:14:12:a8:71:
                    34:5a:d3:0a:d3:e9:26:1f:0b:ed:a5:98:1b:b7:46:
                    00:f3:22:3a:77:20:0f:14:c3:69:0c:45:e1:a6:dc:
                    9c:8b:09:59:5b:85:7a:f4:56:d5:7a:f5:6c:2f:de:
                    19:ab:96:8b:d9:76:3d:37:16:6c:7a:be:b7:f5:5b:
                    bf:4b:ea:e0:d8:9a:33:24:96:3c:97:77:a6:e9:37:
                    52:01:78:29:0f:6e:72:c3:2f:71:95:1c:e5:ff:46:
                    c7:54:bd:a5:11:6f:ba:e9:99:a7:0b:20:91:c4:cd:
                    fb:58:36:72:95:22:7a:04:1f:ea:72:6a:9d:f5:61:
                    73:d3:06:c0:b4:f8:06:9f:2d:db:c7:57:98:e3:44:
                    11:4c:38:74:21:49:24:3e:10:73:c3:bf:4b:fc:e9:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:20:97:9C:3B:DE:49:D2:2D:A1:BE:79:7C:10:2A:3F:00:6C:BC:EA
            X509v3 Authority Key Identifier:
                keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:9f:17:ab:82:32:fb:36:00:39:84:94:71:c9:76:c4:0b:
         2a:01:99:b8:64:24:57:cb:9f:b7:c3:21:45:ac:1f:ba:d2:41:
         ed:e7:9c:1c:7b:78:10:58:ac:91:5d:85:3b:e8:00:12:56:53:
         8d:a8:5d:51:0f:39:87:cc:3c:9b:25:40:94:4b:02:f8:24:37:
         70:81:26:84:60:f7:a8:88:2d:8e:a6:f7:ca:7e:7f:a6:ff:8a:
         d8:e9:3e:b4:28:d7:0e:97:b2:08:e4:7d:af:73:30:c8:e4:fc:
         fc:e8:ca:1d:73:70:35:a3:7a:a6:5a:84:15:0c:ab:ad:df:ff:
         e2:80:c1:84:59:92:a6:2d:a5:7a:10:cc:64:44:db:3f:6c:28:
         60:34:42:d5:9b:fb:de:1a:b8:b9:e7:f5:01:f4:2c:b3:96:d1:
         6e:3f:0b:26:c0:03:ac:5a:c0:6b:c2:f3:86:f5:d4:3f:58:7c:
         1e:ac:8f:c7:c9:88:14:ba:82:bc:6a:ba:ce:6b:b6:e2:01:52:
         a3:e3:36:77:5f:19:56:3d:93:9e:f8:d8:c5:84:cf:4e:8c:98:
         88:b1:80:8e:c5:89:cb:55:9c:0f:7b:62:ba:b6:6e:b8:40:a2:
         f2:55:ae:a3:26:c6:ff:9d:70:22:0e:2c:8e:82:d0:02:9e:30:
         fc:8f:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:31 2026 by rpki-client