Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File:                     6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier:          hTB3kRM63UFlUdBDbSfxqAn5vfFiNSh84eFqel3MhkA=
Subject key identifier:   5E:67:DF:AE:DD:7F:69:73:6F:5D:D6:6B:EF:F8:0C:A8:87:44:94:B3
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer:       /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial:       019D27048403B0861E999900359FB536FFD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number:          0FD5
Signing time:             Wed 25 Mar 2026 22:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:40 +0000
Files and hashes:         1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: rdgPEz8q5W8Hu8G/hAkWcj/t54r1Sp9UABTHzg7gEs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:84:03:b0:86:1e:99:99:00:35:9f:b5:36:ff:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
        Validity
            Not Before: Mar 25 22:01:40 2026 GMT
            Not After : Mar 26 22:01:40 2026 GMT
        Subject: CN=5e67dfaedd7f69736f5dd66beff80ca8874494b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:26:0c:8f:7d:8d:5e:e3:22:74:53:4c:6d:
                    4c:00:88:33:03:98:e7:ae:4e:75:3f:9d:9b:5c:9a:
                    45:41:08:f0:e1:73:3b:02:92:62:08:3b:e2:8d:ec:
                    6e:cb:8c:f6:51:a2:51:9e:f1:97:84:e9:ea:bd:9b:
                    3c:a8:40:6b:dc:ae:08:57:1b:b3:e2:bd:6f:42:1c:
                    7f:42:f6:5a:5a:64:fa:f0:e2:c5:ca:52:e1:a2:a2:
                    d5:c3:76:c0:2b:83:2e:6d:df:ed:d5:dd:c9:66:ec:
                    26:89:34:a6:be:32:f8:4e:3b:41:4d:b1:65:69:54:
                    b1:38:d7:ad:56:ec:bb:c7:7f:90:59:15:42:f7:6e:
                    67:56:20:3c:cf:f6:fe:0d:7a:59:44:e7:db:fe:f7:
                    44:9b:0e:b8:90:9f:0a:13:86:8a:ff:3d:9b:af:65:
                    b0:c4:22:36:af:6b:ca:3e:16:aa:e9:67:87:8c:d3:
                    93:be:bd:f5:eb:34:1b:bf:38:bd:a7:8d:0b:e7:4a:
                    b9:a4:5e:9a:8e:ce:19:d1:a3:f8:85:c9:d2:25:db:
                    c1:aa:26:f3:f2:37:d3:1f:7b:34:cf:4a:16:5d:2a:
                    e7:ca:55:0e:c3:2f:ce:3e:c8:70:46:5c:9d:ca:8a:
                    39:b5:4d:72:a9:aa:e9:58:b9:7f:5f:fd:74:3b:be:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:67:DF:AE:DD:7F:69:73:6F:5D:D6:6B:EF:F8:0C:A8:87:44:94:B3
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:e9:81:f7:f5:c5:40:e0:ea:97:d6:44:30:31:a5:c9:83:
         b7:b6:da:a5:f9:7f:cb:5d:25:df:4c:06:f3:98:2e:0b:49:b3:
         b5:84:6c:f8:21:e1:7e:3a:39:a0:c6:d8:86:0a:a3:59:b2:6a:
         c5:32:43:12:3c:4f:d4:0d:ef:8d:97:b5:4a:2a:d4:68:70:c1:
         72:6f:ae:f3:6b:fe:3f:3c:fa:fe:0d:29:8b:8a:13:92:81:36:
         4a:95:87:f2:ae:d8:f5:25:23:d6:b8:9c:05:82:d8:70:5f:3b:
         29:b6:7d:10:7e:1d:49:bc:92:91:a6:35:c3:60:be:98:5b:7e:
         4a:5b:de:92:b3:c1:0d:fe:1c:9d:88:03:0f:e5:8e:61:e7:cb:
         ad:24:70:81:b9:4c:80:16:8a:a8:94:23:38:a4:bb:57:0e:60:
         69:e7:8a:55:f8:6c:26:1e:0c:4c:aa:08:6a:ed:d9:29:3d:b0:
         5f:ac:7c:59:f9:15:47:3c:30:96:14:f2:fb:4f:a5:00:b6:f8:
         23:52:70:0f:6d:23:64:45:b6:6e:5c:89:a4:79:d0:bf:bf:d0:
         df:dc:69:c5:7e:84:b5:61:b2:27:da:28:f9:c1:92:eb:6a:7b:
         9f:0a:16:d6:41:33:bd:38:7c:62:26:80:e1:e8:9f:f7:65:91:
         58:b1:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:49 2026 by rpki-client