Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          BhGCmPNoxTpgAzT9sXaxU/E2KB0X/23BDvhqncsJzCM=
Subject key identifier:   D3:9B:FD:D7:FD:11:8F:18:58:1F:92:C7:4F:75:C2:59:9F:5B:D6:E4
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       019CABA1CA7B3AB0BF129172DD420C58B9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0E61
Signing time:             Sun 01 Mar 2026 23:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:32 +0000
Files and hashes:         1: 0_S3LGHLWDp1h8fEUl2LKrXeEIw.roa (hash: EPbNdShM4Uw0lIhiy3D/2WyOBzLdRNaJX6sNcM+CIi4=)
                          2: 4xfelhMyKjiAcpwxhZeIvv3Qing.roa (hash: M45T3Ux9RH0dWd2jQVba7oO9zhwgfDQ6pVLKhbaYTkM=)
                          3: LgD5htJGPPhQqKRT3OXosm95CvA.roa (hash: oCLNTeRXkZO9pSz62dS9ZHRdid9Os6l7QArra7xL/Dg=)
                          4: WM9dDCzCe6gGu2ODAykACZrFrbA.roa (hash: 4IvyYiGqHBx7zs5uBUW79nDrwRTJcNSRaHg9JrlQ3jo=)
                          5: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (hash: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo=)
                          6: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: uCADm7UvT1VtSL3pSn9jqmPHR+kAX9gIpXMsCdLJRJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:ca:7b:3a:b0:bf:12:91:72:dd:42:0c:58:b9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: Mar  1 23:00:32 2026 GMT
            Not After : Mar  2 23:00:32 2026 GMT
        Subject: CN=d39bfdd7fd118f18581f92c74f75c2599f5bd6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:30:b3:5d:aa:59:fd:81:7d:e9:29:c1:01:
                    2f:6f:6d:ee:09:88:69:a2:2d:2f:98:22:ff:ee:28:
                    ad:68:b7:72:a6:b4:3b:57:f1:3d:29:9f:d8:4b:60:
                    26:39:14:97:11:b4:3a:99:62:54:40:90:b8:d0:c1:
                    f9:b7:fe:1f:5c:08:61:6b:e1:d9:16:2e:48:5f:a5:
                    0c:8a:4c:20:d5:de:3c:50:5f:22:cd:6b:84:86:f9:
                    38:da:75:62:02:56:2a:fd:90:55:f3:4c:31:80:49:
                    8c:63:ef:f7:1f:26:d9:bb:ed:8b:f3:12:3d:50:09:
                    96:ce:e1:20:3c:ec:37:f9:ee:c7:e6:67:88:f8:eb:
                    7e:ff:b7:bb:ba:b1:b8:39:72:54:52:28:ff:f2:5f:
                    fa:21:fe:aa:00:28:34:7e:b4:db:77:4b:de:a1:71:
                    7a:f7:b6:f3:1b:54:90:07:ba:c9:44:0a:c0:bb:2f:
                    b6:80:7f:d7:66:01:10:3e:32:30:09:ff:7d:ce:a0:
                    83:cd:2d:44:d4:8d:ab:33:50:d2:17:0e:00:de:b5:
                    e7:79:de:3d:de:5b:3f:bd:89:91:69:4b:28:8f:f1:
                    02:b0:45:15:99:37:f8:8c:a7:bc:b4:ec:a4:90:69:
                    db:f1:42:05:b0:08:dd:07:00:71:df:fd:50:5f:fa:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:FD:D7:FD:11:8F:18:58:1F:92:C7:4F:75:C2:59:9F:5B:D6:E4
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:5a:58:c6:d8:37:8c:08:5c:ba:c9:2b:b7:35:79:a1:bb:
         69:98:04:ba:b5:20:a5:43:1d:2f:58:ea:b0:f8:a1:d1:94:81:
         e8:24:e9:7e:a0:55:30:63:b7:af:4f:65:1f:1d:57:68:5c:36:
         06:bc:63:15:89:7d:90:83:6e:64:e8:c7:4d:99:7e:78:80:3a:
         8d:37:75:d8:a6:0b:bd:02:3a:32:7e:04:13:49:79:f8:8a:26:
         ef:52:bb:0c:13:cb:f3:f6:7f:a5:17:7d:60:f3:5d:b1:dc:98:
         fb:b6:86:9d:ac:55:b5:d3:61:4c:c5:9d:01:70:6f:a9:14:fd:
         1b:7e:57:4a:94:1f:10:3f:9c:cd:13:58:42:d7:3f:8d:7e:63:
         40:9e:a2:5d:d5:44:96:b1:a4:2e:a2:b0:55:88:67:b7:67:30:
         01:04:0e:56:37:5d:5a:99:c3:0e:cc:9a:d4:8a:02:2c:dc:80:
         01:9e:dc:2c:ef:a8:af:fb:6c:ed:c0:56:6a:a2:ed:0a:2a:e0:
         3d:e1:f1:be:0d:d4:18:83:de:72:4f:5b:22:bb:f4:18:38:80:
         14:f4:ca:bc:3e:69:d1:51:ed:e1:75:5c:12:2b:b0:b2:10:5d:
         5a:c9:34:03:f4:3d:25:1d:2c:a3:7f:78:10:9f:fb:e9:ec:81:
         50:51:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:38 2026 by rpki-client