Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
File:                     6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft (raw, json)
Hash identifier:          QmQuIPofQ2bI3L6NWNvKLkkCnSuMqKDuBMy20VKBCYs=
Subject key identifier:   37:23:44:FD:9F:32:3B:7C:A2:2E:44:46:66:10:D7:B5:79:A4:B7:C3
Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
Certificate issuer:       /CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Certificate serial:       019CACEBD0DBC79F1D4C4C60631D9C1CD9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
Manifest number:          0A6F
Signing time:             Mon 02 Mar 2026 05:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:01 +0000
Files and hashes:         1: 3WRTlHzKYOrm4AbDmKjr4w5CRlU.roa (hash: JIn9kOrrikFOyPhnJDeOrhDS1w67s7IYtwSsVMfbz6o=)
                          2: 6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl (hash: uMQ+BnfI0JwFsh1/Fjdzw+BZvO+Zuvp8FfM35G5PRCw=)
                          3: lRPyn2QePJK0WhcWTY9j2nGmexk.roa (hash: xAWF2k7h+INOernXeq2UXI+UZNCtrXr4mV/H1PEWqVI=)
                          4: yAmjstmK_WAKkiMnnSQlSpVnKX0.roa (hash: rk5CxmSreGsegz3mqebupC7Tg4Z4mve0MyRTJ4uS7E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:d0:db:c7:9f:1d:4c:4c:60:63:1d:9c:1c:d9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436
        Validity
            Not Before: Mar  2 05:01:01 2026 GMT
            Not After : Mar  3 05:01:01 2026 GMT
        Subject: CN=372344fd9f323b7ca22e44466610d7b579a4b7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:ec:88:dd:cb:37:cb:dd:e4:4f:19:a7:0d:
                    06:f3:e2:c8:ce:50:9c:c3:ba:c9:70:f4:48:2b:9e:
                    85:95:87:6b:7a:cc:7d:cb:f3:42:e5:f4:4a:30:40:
                    0f:32:b0:8d:f1:2d:94:c4:72:91:80:ac:93:9d:b8:
                    f4:99:69:11:59:eb:2a:9d:bc:85:7d:83:c3:8f:d9:
                    be:35:5a:c6:c8:33:56:91:57:f2:cc:bb:d9:e7:1d:
                    3c:e9:35:93:fe:b1:83:db:d8:47:39:c8:35:c0:f6:
                    ee:f9:54:e7:67:d8:0f:8f:b7:20:af:59:57:32:15:
                    48:6e:f4:b7:2b:e3:a7:b6:96:48:a4:76:6e:01:e5:
                    c6:f0:25:c6:8a:f1:b0:71:72:41:84:36:91:3e:a5:
                    22:ff:f2:6f:11:26:f3:84:fd:39:33:27:70:17:20:
                    25:61:a0:8f:3d:95:3e:c7:b7:92:36:4c:aa:a4:b7:
                    37:fb:72:86:c3:a3:0c:6d:08:eb:da:31:bd:72:a7:
                    2e:36:ed:52:33:d2:76:e7:34:00:d5:c1:80:28:95:
                    02:68:4c:1e:0c:9b:ab:b8:4a:f4:08:f9:ff:45:ba:
                    76:53:9d:06:a9:cf:42:80:25:ec:64:67:95:b1:14:
                    b5:51:3a:b6:1f:6b:c4:ac:1f:1c:4d:cd:01:fb:40:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:23:44:FD:9F:32:3B:7C:A2:2E:44:46:66:10:D7:B5:79:A4:B7:C3
            X509v3 Authority Key Identifier:
                keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:c0:93:f5:71:a0:66:9e:ff:af:9d:14:5e:55:e4:ac:02:
         fd:99:0b:bd:48:94:e1:9f:ab:78:eb:f6:e5:c5:fc:df:1c:b6:
         bf:55:18:6c:b6:09:a0:7f:79:76:2d:10:47:3e:2d:55:5f:2a:
         35:32:53:71:9f:11:ea:ca:fc:52:bb:20:b3:22:36:e3:cd:57:
         a8:fc:c4:ac:c5:4f:9d:97:23:8b:59:2d:b1:e1:5b:33:f3:1e:
         e2:20:63:db:d2:ba:dc:40:72:71:a4:8b:00:ea:56:70:a7:91:
         7a:ce:87:45:38:b7:30:c2:e7:68:0b:b3:c4:77:2a:ee:2e:eb:
         a2:14:88:f3:fa:58:dd:38:17:d3:a7:61:26:43:8e:cd:d1:59:
         09:0c:17:43:eb:50:63:93:3a:d8:ff:3e:13:97:21:d9:94:6f:
         d9:33:2f:b0:d3:ed:b5:97:5a:2f:88:47:f6:53:b0:3d:e0:3e:
         ac:45:0b:ee:6b:c7:fa:ac:17:a0:2e:e8:95:0b:a4:c4:7b:d8:
         06:4f:5f:47:0e:d3:4d:34:e8:b8:9d:22:13:74:a0:d2:db:45:
         b4:ea:cd:d3:e9:bf:85:89:56:ed:4c:29:20:1e:23:c9:3a:7d:
         9b:8c:b9:8e:fc:f9:80:c8:b9:e3:47:e7:60:fe:4c:6e:2e:13:
         1d:92:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:34 2026 by rpki-client