Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
File:                     6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json)
Hash identifier:          RM2//1LqmHVt/TDJh3VsvMoHkzyUafIHT4O5OHDyAUk=
Subject key identifier:   75:C0:82:47:27:D1:84:58:26:44:1B:06:61:16:F5:E6:14:53:6B:E7
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Certificate issuer:       /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial:       019CAAFD38FBF10A6C92772ECE77B8B69E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
Manifest number:          176D
Signing time:             Sun 01 Mar 2026 20:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:47 +0000
Files and hashes:         1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: ueyO4BJ/BjT7lczkH4daeH+XsWPCjyWFjxgJpC3PjNc=)
                          2: Q-XaXdYNyXwK0mc7YIVoepDORlM.roa (hash: d+yMV8SrvvLaa9ouz0mOIlebIPHpwRPv3zGG1GfdREw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:38:fb:f1:0a:6c:92:77:2e:ce:77:b8:b6:9e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
        Validity
            Not Before: Mar  1 20:00:47 2026 GMT
            Not After : Mar  2 20:00:47 2026 GMT
        Subject: CN=75c0824727d1845826441b066116f5e614536be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:66:3a:a1:9e:ca:04:47:4d:b2:0b:b0:f0:
                    44:48:ca:4e:b6:8d:82:15:6e:dd:6b:61:a2:c2:aa:
                    cd:fd:db:a8:6b:c2:7c:3d:a9:34:a9:28:a7:89:d4:
                    f9:72:09:59:fc:05:d9:44:c4:c8:76:71:22:0c:12:
                    ae:70:e0:53:84:1a:c8:4c:42:1b:b9:c9:a3:3e:11:
                    a5:c5:b9:a8:71:48:85:08:34:73:df:0a:13:85:dd:
                    a9:51:64:e5:50:b6:ab:68:85:2a:7a:76:ee:42:8e:
                    2c:5f:0c:c7:ca:e4:06:d9:4a:3c:0c:35:5b:06:73:
                    87:22:f6:ad:39:08:d6:0d:ad:52:79:4f:6f:13:21:
                    bf:35:e4:8f:dc:4a:6b:dc:39:99:a4:6f:78:2c:8d:
                    de:86:52:9d:81:23:d9:cd:90:80:be:9c:3d:d3:fb:
                    6d:bd:e1:bb:56:e7:e6:4b:61:9b:06:39:2c:1d:d1:
                    20:9f:a1:81:c2:de:ee:04:34:ce:ca:17:e7:49:ee:
                    36:de:d2:0c:21:98:5a:87:d7:47:8f:67:6b:29:5b:
                    3a:74:1e:20:d0:be:6c:7c:44:11:b7:b2:82:ca:be:
                    73:1d:38:27:62:f9:b7:65:e7:02:41:f4:93:5f:4e:
                    39:97:21:c9:d7:37:43:1e:e5:f6:f6:98:bd:91:2a:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:82:47:27:D1:84:58:26:44:1B:06:61:16:F5:E6:14:53:6B:E7
            X509v3 Authority Key Identifier:
                keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:20:1d:eb:58:2e:71:1a:4d:32:47:3a:a4:e4:3b:58:f6:11:
         48:ce:e5:7a:67:d0:bb:46:32:b1:57:81:d1:c1:b2:52:42:7c:
         86:55:82:a2:a4:69:b6:ae:c9:18:73:7d:07:32:42:8a:e6:24:
         85:ba:f7:5e:68:49:aa:fa:6f:46:16:3a:09:87:97:f2:bd:f3:
         af:73:3c:1a:a8:7a:77:31:98:e4:4d:cc:a4:2d:7a:65:90:22:
         9a:ff:31:2f:64:08:2f:91:36:2a:cd:7c:8a:e9:dd:92:60:1a:
         ed:e2:17:2b:e6:fb:76:b5:50:6e:9c:7d:60:c7:70:f3:e5:da:
         71:94:9b:72:65:2a:63:61:fc:62:90:f2:2a:50:9c:ea:4b:f7:
         31:08:49:b7:a1:83:81:ac:d9:8c:f5:18:b0:da:da:7b:84:65:
         b1:1f:fd:41:62:6a:f4:e3:28:a1:70:ff:58:c3:ce:4e:c2:f7:
         45:62:68:d1:96:87:8b:56:77:ee:a8:07:f1:bc:6e:ee:33:a4:
         71:a4:a9:4c:65:cd:56:04:9f:bf:10:57:d8:bc:30:75:de:5a:
         e8:c7:6b:32:6d:30:80:88:18:b3:43:92:a8:3c:1a:cf:30:c2:
         9e:8e:b4:47:95:14:f3:53:9c:fd:dc:43:10:28:ad:a4:65:38:
         ae:c2:d1:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Tj78Qpskncuzne4tp4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzM0NjFlOWQyYmRhZmNjMjlhZDkxODlmYjBhY2YxZjMz
OTYwYTkwHhcNMjYwMzAxMjAwMDQ3WhcNMjYwMzAyMjAwMDQ3WjAzMTEwLwYDVQQD
Eyg3NWMwODI0NzI3ZDE4NDU4MjY0NDFiMDY2MTE2ZjVlNjE0NTM2YmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswRmOqGeygRHTbILsPBESMpOto2C
FW7da2GiwqrN/duoa8J8Pak0qSinidT5cglZ/AXZRMTIdnEiDBKucOBThBrITEIb
ucmjPhGlxbmocUiFCDRz3woThd2pUWTlULaraIUqenbuQo4sXwzHyuQG2Uo8DDVb
BnOHIvatOQjWDa1SeU9vEyG/NeSP3Epr3DmZpG94LI3ehlKdgSPZzZCAvpw90/tt
veG7VufmS2GbBjksHdEgn6GBwt7uBDTOyhfnSe423tIMIZhah9dHj2drKVs6dB4g
0L5sfEQRt7KCyr5zHTgnYvm3ZecCQfSTX045lyHJ1zdDHuX29pi9kSo+SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXAgkcn0YRYJkQbBmEW9eYUU2vnMB8GA1UdIwQY
MBaAFOgzRh6dK9r8wprZGJ+wrPHzOWCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMt
YWVmZThkMTc4ZTZhLzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMtYWVmZThkMTc4ZTZh
LzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSAd61gu
cRpNMkc6pOQ7WPYRSM7lemfQu0YysVeB0cGyUkJ8hlWCoqRptq7JGHN9BzJCiuYk
hbr3XmhJqvpvRhY6CYeX8r3zr3M8Gqh6dzGY5E3MpC16ZZAimv8xL2QIL5E2Ks18
iundkmAa7eIXK+b7drVQbpx9YMdw8+XacZSbcmUqY2H8YpDyKlCc6kv3MQhJt6GD
gazZjPUYsNrae4RlsR/9QWJq9OMooXD/WMPOTsL3RWJo0ZaHi1Z37qgH8bxu7jOk
caSpTGXNVgSfvxBX2Lwwdd5a6MdrMm0wgIgYs0OSqDwazzDCno60R5UU81Oc/dxD
ECitpGU4rsLRfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:15 2026 by rpki-client