Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File:                     6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier:          khPizE/PV8MYcyQn6LrL4MtR4YeS1BsUqjajYy6J3Sw=
Subject key identifier:   ED:B4:42:6B:14:4F:A2:EF:7D:20:DE:89:D3:9B:91:18:99:79:40:67
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer:       /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial:       019CACEBC08E1237D3EF2361D1C2326A7388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number:          16E4
Signing time:             Mon 02 Mar 2026 05:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:57 +0000
Files and hashes:         1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
                          2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: jGyOd7c4aWa1UdCj4JaxMTZS/wJyQRselGvsGRdGNW0=)
                          3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:c0:8e:12:37:d3:ef:23:61:d1:c2:32:6a:73:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
        Validity
            Not Before: Mar  2 05:00:57 2026 GMT
            Not After : Mar  3 05:00:57 2026 GMT
        Subject: CN=edb4426b144fa2ef7d20de89d39b911899794067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:c4:e9:bf:0c:10:23:ed:68:e1:da:65:d6:
                    ec:63:4b:96:9a:89:2f:1c:ba:aa:fd:51:ba:b4:b6:
                    ac:6f:9a:c4:63:4e:ff:ef:5e:f0:f5:6f:74:54:28:
                    70:ec:fa:37:25:2e:9a:42:0c:ad:20:78:4f:96:dc:
                    85:a0:65:b9:cf:1a:12:fe:5e:eb:dd:43:49:64:19:
                    c8:98:c7:84:57:79:b9:0a:c6:61:dd:26:85:42:71:
                    19:9a:21:da:f6:59:9a:b3:ec:1d:32:dc:91:8b:4d:
                    e2:d5:9e:01:c1:94:fd:00:c5:d3:90:c3:ed:92:a1:
                    db:e4:36:02:8b:ab:26:85:45:59:1a:95:9c:77:a2:
                    94:61:bb:08:f7:f8:73:cd:bd:5e:1e:2d:90:42:29:
                    c5:ff:99:ea:e9:53:a5:82:6e:77:cd:73:09:a8:d7:
                    24:9d:e4:76:99:a4:f4:7b:a7:d1:c1:f2:0b:59:80:
                    30:52:ee:4a:1a:13:88:15:1e:07:70:2c:8a:4a:f0:
                    fe:0b:9c:98:21:7e:e1:f9:97:6f:ae:d9:ba:ad:e9:
                    1e:50:a8:e1:8b:37:b0:ef:39:60:25:14:95:75:9e:
                    00:bb:b9:3f:bf:08:a4:42:cd:a5:6a:66:25:55:48:
                    e5:ab:9c:ff:19:2a:04:95:de:76:1c:6c:1a:08:6a:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B4:42:6B:14:4F:A2:EF:7D:20:DE:89:D3:9B:91:18:99:79:40:67
            X509v3 Authority Key Identifier:
                keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:bc:bc:d1:5c:81:78:87:a3:85:a9:d6:6f:7c:28:6f:27:
         c0:c8:44:e4:85:23:ee:aa:59:e5:62:c7:be:66:7a:3a:79:e7:
         23:29:d4:64:fe:0b:39:e8:4c:b6:c2:e7:4e:3d:e9:41:f7:e7:
         6e:1b:f1:86:7c:80:0d:4c:dd:b9:9a:88:dd:47:77:49:df:26:
         2d:ea:8a:03:de:11:ca:b4:5f:0f:49:b4:53:ce:4d:27:2d:76:
         e4:4a:30:3c:4a:c6:05:53:87:fd:72:fe:95:69:6e:80:ad:51:
         7d:4f:68:c6:cb:f6:f4:db:3c:01:e7:2f:66:4b:2c:61:61:7d:
         6c:f8:a5:23:27:78:21:a6:6b:62:2b:46:5b:d6:0b:5b:78:ec:
         68:3b:d1:29:53:9b:19:d3:3a:41:96:41:15:62:32:8f:3a:5c:
         11:38:ce:f3:b4:b6:fc:96:e0:f8:fb:4b:24:f9:13:3d:ef:d1:
         e3:d8:19:ea:d4:c9:85:fb:b8:f1:2d:08:bd:4c:71:fb:f3:3e:
         7c:f7:e0:7d:59:34:1f:e8:42:1d:b7:77:56:62:6e:4d:7a:3e:
         f1:08:d4:a2:55:5b:bc:a9:46:c3:77:69:05:e7:af:97:f5:77:
         2c:c4:b7:31:8b:03:20:a8:49:db:a0:c2:3a:c3:75:b7:3b:69:
         5b:38:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:13 2026 by rpki-client