Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          +AlTdOL+Dey+gKY0LC4cCLiRRhZmFlFpvH7xL5RKyXI=
Subject key identifier:   E6:B8:00:13:3A:90:82:3B:38:C5:BE:6F:1C:CC:40:BA:A3:12:70:FB
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       019CAA8F725C7A3AB1CAA70224F171348B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          14D9
Signing time:             Sun 01 Mar 2026 18:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:53 +0000
Files and hashes:         1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: gLaznAP6uaKcGgfgLhZv10XD18v8NQZjwQ3S8LqEW74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:72:5c:7a:3a:b1:ca:a7:02:24:f1:71:34:8b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Mar  1 18:00:53 2026 GMT
            Not After : Mar  2 18:00:53 2026 GMT
        Subject: CN=e6b800133a90823b38c5be6f1ccc40baa31270fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:dc:76:a7:7a:37:ec:2f:23:e1:7b:c4:6e:
                    b2:e3:c9:05:ae:91:8b:6d:ec:ae:3c:a1:bc:d7:88:
                    75:28:a7:4b:83:6a:b0:9b:f3:17:b5:23:46:41:81:
                    1c:91:b2:da:81:60:e3:25:d5:2c:5e:80:d5:54:63:
                    4c:e1:6c:8e:e4:4e:41:f9:3d:79:8c:00:f6:28:1b:
                    29:38:aa:9e:b6:a5:9c:52:4d:7f:90:27:23:57:3d:
                    1a:8a:8d:43:a2:1c:97:d3:46:d3:dd:37:fd:e4:91:
                    e5:b5:09:2b:ee:c5:29:d0:56:ad:5a:48:da:c9:e4:
                    0f:35:31:5c:fb:f7:f9:ad:4e:f0:46:15:02:8d:53:
                    7f:64:0d:9d:6d:77:91:57:de:aa:5e:02:46:f6:5f:
                    07:01:be:f4:7c:ae:c4:03:7e:dd:0c:05:cf:d4:3d:
                    a0:ed:b6:4e:5a:fe:44:ba:2f:fc:a8:ba:ca:91:91:
                    a1:46:b9:3e:e1:55:69:b5:36:de:5d:82:f5:83:58:
                    b4:79:60:16:36:5d:b6:2e:af:b3:45:ee:80:e7:fc:
                    01:e6:c7:cd:2b:2e:0b:81:79:aa:4b:00:33:9d:2c:
                    18:32:0f:c2:99:72:6a:06:7a:ed:37:16:8f:29:a0:
                    2f:b9:18:79:7b:bf:c6:0e:86:81:f9:b0:73:dd:7e:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B8:00:13:3A:90:82:3B:38:C5:BE:6F:1C:CC:40:BA:A3:12:70:FB
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:f6:b3:87:16:5c:08:e6:4c:2d:1c:5e:7f:51:3f:88:13:
         fe:69:74:b0:8d:a1:7a:a9:f5:f6:d6:6b:ce:f4:6a:c6:14:9b:
         e8:7e:d8:7e:0c:ab:73:81:d5:73:ec:63:79:8b:2b:32:b7:3d:
         a9:ef:39:32:d9:b7:b2:8b:29:5f:be:6b:3a:23:4f:79:f6:c1:
         f9:cc:24:2f:0e:3d:e5:f5:8e:e6:89:10:b2:64:fd:af:d4:35:
         d5:9d:66:23:2f:cb:d1:8d:90:f0:c5:8e:7b:e7:4a:13:5a:a9:
         c8:61:2b:c4:79:67:ce:56:06:85:7e:af:87:48:e7:66:0e:ee:
         5a:fb:11:92:65:6c:ff:01:b1:41:5b:57:b1:bb:4a:de:bc:84:
         dc:bb:a3:ed:e3:30:dc:de:09:e3:cb:30:df:47:9c:ea:6f:10:
         5b:9f:ec:96:6f:4a:b2:f6:36:bf:81:f0:db:13:f6:f0:87:8d:
         d7:47:bc:34:8a:10:82:95:ce:5a:b8:8e:89:04:19:54:5d:37:
         db:99:10:cc:25:12:19:16:df:a5:28:db:6b:e8:48:88:c6:87:
         2b:ba:ce:c2:62:f5:5b:dc:2b:78:c6:13:1f:6a:13:c7:b6:27:
         14:e3:48:b9:de:22:75:3a:ff:bb:ce:af:49:5d:c9:08:59:8f:
         ec:dd:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:52 2026 by rpki-client