Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          IkWLtQZKMGmfV5AOsanmYfQWhdHSXey2cH9R3P4PsRE=
Subject key identifier:   6B:D7:CB:2E:EB:A0:3B:4D:F2:B8:39:3A:48:2C:BE:C9:90:62:F9:8C
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       019CA97D0E8FA74077CECEFE2126B68F1330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0F2C
Signing time:             Sun 01 Mar 2026 13:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:11 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: J/KGTB3y98bKBqV8DwMThlkT0LlzsJgSRst5EAzTt8Y=)
                          2: BHtYTKXAhvuK5qQH2dMZrKgOMHg.roa (hash: x0aDgSbM0k6Qn4DXz0HQEQO8d3rc25aCpgfGk0kEatY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:0e:8f:a7:40:77:ce:ce:fe:21:26:b6:8f:13:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Mar  1 13:01:11 2026 GMT
            Not After : Mar  2 13:01:11 2026 GMT
        Subject: CN=6bd7cb2eeba03b4df2b8393a482cbec99062f98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:91:f8:7b:c0:9b:5d:3e:41:4a:cc:7d:3c:99:
                    05:5f:48:7e:7d:4e:8f:6a:dc:76:f5:28:4b:14:2d:
                    7b:3d:12:3b:f1:65:43:a9:31:59:b9:de:85:03:51:
                    8f:13:11:17:d5:c6:ab:8d:bf:32:c1:2c:7f:1c:ee:
                    8b:b5:34:cf:d6:4e:ff:6e:c2:a1:d0:a7:a4:45:7d:
                    4a:54:e5:c9:f8:10:af:9b:0b:b1:de:fc:d7:1c:51:
                    da:0c:69:ba:7b:46:29:bb:22:65:bb:f7:a5:d3:91:
                    02:b8:50:13:06:b2:82:e0:f3:f7:1c:2d:f6:d9:69:
                    23:2a:d1:a0:c1:fd:6c:e5:ce:bf:3a:a3:0b:93:4d:
                    3b:5a:97:e7:b6:61:12:b9:ce:c3:f9:05:44:7a:40:
                    95:92:6d:16:04:f9:0b:b0:43:7c:4e:28:c4:fc:cf:
                    5d:2c:e6:dc:1d:af:76:be:06:ad:fd:c4:7a:58:e2:
                    6f:67:93:23:45:f7:8d:26:69:48:98:e8:a6:df:25:
                    cd:87:71:09:b9:3c:55:01:2c:8b:75:82:0b:f6:4b:
                    cd:88:9d:3f:79:9f:49:4a:b4:4e:3f:6c:4a:a8:da:
                    5d:cd:b1:58:1b:ef:b9:db:a8:8e:3f:90:3e:eb:f2:
                    d3:ac:36:20:3e:02:06:a3:93:8c:3e:08:1a:06:d3:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D7:CB:2E:EB:A0:3B:4D:F2:B8:39:3A:48:2C:BE:C9:90:62:F9:8C
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:24:5e:49:11:fb:db:dd:db:fb:c8:a4:4d:36:8f:ef:12:
         09:f1:cd:31:c2:75:6e:14:68:6c:79:ad:7c:49:e2:cf:73:00:
         04:d0:d1:cb:d6:a1:4f:81:b0:91:f7:08:18:7c:a1:bf:00:df:
         3a:e0:62:4d:7b:88:69:71:fa:dc:9d:83:80:fe:4a:f8:93:bc:
         1a:63:1e:75:3b:f5:3c:5e:6b:8e:ea:03:f9:2b:23:aa:93:1f:
         c1:c7:a5:b2:dd:b9:38:fa:32:e0:61:2f:b6:45:d5:2d:f0:11:
         25:6d:98:c8:7d:bd:a8:e4:88:79:6d:aa:b0:af:a7:ff:60:53:
         be:d8:b1:da:7a:ef:fc:d5:16:0e:3b:ba:51:d4:67:a2:fb:e9:
         e2:13:98:dd:e9:4e:7d:9c:6d:25:b5:ec:2c:af:8e:6e:69:ee:
         57:7f:93:72:18:05:9d:8c:8a:d2:6b:34:69:f7:72:ca:d0:dd:
         ec:f9:21:42:e6:9a:17:f2:6c:20:1a:4d:82:65:98:f9:f9:ae:
         e8:3b:00:12:33:44:19:57:5a:20:55:47:22:65:19:ea:d0:24:
         16:4c:f4:ef:d4:9f:d6:3c:13:e1:3c:d0:5c:64:94:c2:07:cb:
         6c:4e:16:12:76:76:1d:69:b2:f1:08:c4:3e:8e:27:36:35:0a:
         63:05:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:27 2026 by rpki-client