Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
File:                     6E31KvRgym-oySOkn1y3lepnB_c.mft (raw, json)
Hash identifier:          ZuFZvzQ+O+djwHe2nmULdrH4RT8jV0hA0V979k+6QnM=
Subject key identifier:   CF:F6:D6:8E:E9:38:E1:8A:92:E5:5F:BA:3A:C7:59:C3:71:3D:D0:E0
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       019CAB34ADAAA590F6930877C7B58EEDB8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
Manifest number:          0AEC
Signing time:             Sun 01 Mar 2026 21:01:22 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:22 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:22 +0000
Files and hashes:         1: 6E31KvRgym-oySOkn1y3lepnB_c.crl (hash: o7kMCWaej7Ec9bWc0ko8Y6G7+HLmAPspR2++5laHUOo=)
                          2: Gelmt2dyq_XN8YdpKEuPQmN09eA.roa (hash: +DBE2rKsQVPzu0RclwrvCMPoUnuvCaTotWIVnHuK8zc=)
                          3: IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa (hash: AWvg3wl7fzu5i9djaKK4h6Y9sJ9Pr3WgdeDcYIz8ktg=)
                          4: USS4jDeuYyGXL2mwppDmvGGOpAI.roa (hash: 9+rfYSUljt29cuBfSL9LJuPSvB6IhVB21HVxTpdamQk=)
                          5: Yai7LBvRMViiUdeaDjDEDgA3LYU.roa (hash: d6mnraAJOyvr/ycKXQOhXrvBnydjo1H9ixxvEDF+5WU=)
                          6: jSr68ezMymtW56scD11bOLeYI28.roa (hash: xsIbi8zBStn7hsbtROXJNUEF3PIRInOiPGWrPR7zVJ0=)
                          7: kG9o92WtxtdlslnK36VPn0SNf1M.roa (hash: OXeUCoUsqDWHvih8GRMeRQbUwh35avks5fVUQM/vjSE=)
                          8: m3YOl3KcHPw0jUGNX-PfWukNeHg.roa (hash: +MhGdxnaLuhxZ2eCGlUOStLfg0KmoTa8/jNIH8bkEKg=)
                          9: s931y6R-0zlx2ez42IiM1gBgTIo.roa (hash: RTrkv7ongNF6gWxBGWrH9pDs7qZjN5vjg1SAtV6G9Y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:ad:aa:a5:90:f6:93:08:77:c7:b5:8e:ed:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Mar  1 21:01:22 2026 GMT
            Not After : Mar  2 21:01:22 2026 GMT
        Subject: CN=cff6d68ee938e18a92e55fba3ac759c3713dd0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:00:9f:9d:ab:92:2d:c9:af:0f:66:da:4d:
                    10:73:08:64:bb:c8:66:29:8e:14:4d:a5:ba:5d:80:
                    d8:f3:6d:af:c2:47:88:a3:aa:16:57:48:a4:96:7b:
                    0e:d0:32:72:23:76:b7:c6:1b:3a:23:91:46:97:8f:
                    e2:8c:7f:ac:da:1e:79:b7:07:a4:ab:1b:ce:cd:62:
                    51:95:80:b8:57:33:57:27:31:b0:c7:de:f2:71:30:
                    f2:a2:64:bb:df:01:83:23:0a:a3:5c:fd:94:35:6c:
                    b0:08:b7:cd:5a:15:6d:f5:39:41:06:59:bf:aa:1d:
                    48:2c:cb:ab:86:eb:b2:ae:b5:ac:95:15:af:55:c8:
                    dc:e1:d0:37:02:07:0e:ec:ae:7a:03:7d:d4:b5:ea:
                    c5:07:e1:47:de:5a:e3:79:c9:2a:08:4d:8c:b0:91:
                    5e:24:17:56:e0:8e:56:84:25:12:34:f7:33:59:22:
                    cf:0e:02:b0:d9:6f:59:37:2c:ae:7d:64:65:7e:c5:
                    1e:a3:18:ac:42:76:3c:3e:2b:84:b3:2a:f6:52:7c:
                    8d:0f:e0:0d:a3:16:b3:2e:3e:06:b0:85:4d:2e:d8:
                    19:da:28:7f:20:ed:d2:b2:14:a5:76:a8:ed:8a:54:
                    d4:87:af:31:1c:30:26:84:91:51:14:a5:16:a3:b7:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F6:D6:8E:E9:38:E1:8A:92:E5:5F:BA:3A:C7:59:C3:71:3D:D0:E0
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:9c:1f:ae:ec:b9:98:33:fe:a7:31:69:e5:3d:f6:fe:39:
         c9:4b:d4:d8:30:74:b0:9b:00:c2:0b:25:24:18:36:4b:cb:1b:
         56:71:f4:a6:f9:c9:ee:3e:29:5a:4f:26:cd:64:66:de:4b:99:
         7c:98:1d:24:f1:d4:2f:1e:62:f9:48:43:58:1b:f9:61:fc:c5:
         cc:4b:ca:15:ee:d0:1b:7e:4a:9a:04:b0:69:db:df:d6:11:56:
         bb:8c:9d:53:ce:51:9c:c7:32:61:33:a1:0a:66:b7:40:2d:1b:
         78:05:1a:39:0a:81:c7:aa:fe:07:e0:85:fc:cf:fa:7c:e0:a5:
         0d:e9:9f:5a:2d:14:ff:6d:53:17:7c:ca:6e:43:53:60:2e:af:
         02:98:03:9d:b7:48:d7:d1:2e:14:0b:02:58:d0:bf:8d:e5:f5:
         09:d2:f2:fc:26:7f:2a:fd:64:ef:ff:5d:a9:46:62:0c:41:f2:
         74:67:fc:68:e5:dc:85:c7:20:ad:b2:64:19:d6:b1:03:29:34:
         34:2d:24:a8:e0:a3:d5:c4:99:e8:ef:75:de:97:60:27:1f:5b:
         72:21:aa:fa:82:a0:01:c2:d0:5a:c1:be:5c:61:a1:d9:f9:ef:
         18:70:c6:aa:27:0f:7b:49:89:ac:7c:79:35:58:dc:1b:9e:b9:
         4f:62:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:50 2026 by rpki-client