Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          oqU3Ny+V/OYTGuuN976LA0luZBFA4HsLai7eY7xbonI=
Subject key identifier:   73:F8:86:40:88:09:8C:18:DF:CA:C8:77:BA:36:42:3F:17:C7:E7:C6
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       019D2AE018E96FDBF5784FF68D661828C10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0EDF
Signing time:             Thu 26 Mar 2026 16:00:22 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:22 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:22 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: a48DgLCP1QJz+iLPeIeemB8M4MVMWJyPyuSehZyR7sE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:18:e9:6f:db:f5:78:4f:f6:8d:66:18:28:c1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Mar 26 16:00:22 2026 GMT
            Not After : Mar 27 16:00:22 2026 GMT
        Subject: CN=73f8864088098c18dfcac877ba36423f17c7e7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:22:fd:76:ab:55:cd:5d:cf:99:b0:9d:ef:
                    e6:70:42:19:68:fc:ca:c2:90:cc:50:50:4d:6e:58:
                    aa:eb:d5:b4:2f:c0:3e:b3:a9:ed:23:0e:44:e5:71:
                    26:5c:2d:6e:95:ec:a4:af:c4:6c:03:66:c3:88:22:
                    bb:c5:ce:2f:1d:f4:c1:09:a0:34:11:f6:5d:14:1a:
                    76:68:9c:41:e2:8e:5a:59:62:f6:ae:58:27:b1:e6:
                    63:c9:01:b8:96:79:9e:0e:b1:a4:f6:bb:6b:bc:bd:
                    c9:18:b9:38:79:35:cf:7b:e9:24:90:d2:2f:d5:c4:
                    e6:c7:e5:76:19:38:7b:5f:6f:e4:c9:ad:84:0d:c3:
                    c8:9f:52:3c:8d:39:38:d8:fe:05:be:be:27:54:81:
                    45:d3:d8:be:5a:be:57:d7:68:f6:ff:43:f5:62:81:
                    7d:71:3a:83:03:28:27:79:2d:8d:e2:57:d0:95:64:
                    2b:73:58:fd:9d:d9:03:8a:05:36:3b:d2:51:05:d9:
                    3a:9d:15:1b:19:3f:59:09:ec:27:57:b1:1d:e7:26:
                    1b:1e:1a:66:fd:42:a7:f7:d2:92:06:64:ca:15:15:
                    f2:64:7a:23:fb:2d:48:97:22:35:91:60:9a:a0:6e:
                    bf:16:a0:68:09:a1:76:20:54:14:9a:c9:f3:8e:2f:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:86:40:88:09:8C:18:DF:CA:C8:77:BA:36:42:3F:17:C7:E7:C6
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e0:56:ad:90:b9:b3:3f:0c:a9:06:f6:9a:0d:e4:29:32:df:
         c8:b3:65:de:a2:c1:e2:ef:37:58:a5:06:58:6e:00:a6:c2:27:
         50:a8:4e:b4:e5:da:89:83:68:3b:6a:04:a1:6f:b7:c6:2d:aa:
         cb:62:7f:2d:e2:12:25:b2:a4:60:b2:34:fb:44:ea:4c:d1:08:
         62:e2:b1:32:7e:20:e7:50:60:e4:96:41:5b:4b:77:e5:b0:56:
         fb:ba:db:f1:d7:8f:88:df:f2:64:96:17:00:71:3c:6d:f5:4f:
         45:f1:a5:44:ec:c9:f7:f7:09:aa:b6:08:15:7c:cb:ea:c0:9c:
         13:55:51:2e:90:32:84:12:84:09:2e:5c:e6:a5:aa:ab:f4:f5:
         10:3d:1b:4e:23:39:eb:1a:f0:02:09:76:6c:96:d3:e5:f8:3d:
         5b:ba:1d:f3:d6:c6:67:bb:59:e6:56:4f:ba:df:41:8d:82:11:
         82:1d:86:ce:d0:19:af:0f:77:e3:25:d0:c8:4c:e9:67:d6:91:
         70:68:22:48:81:66:ab:c7:b5:11:29:f4:f5:13:a4:ec:fc:82:
         62:57:45:fc:bd:f0:fe:3f:04:87:55:df:dc:1b:f4:03:10:26:
         d4:09:23:61:0d:4f:20:5f:5d:09:9e:5a:d0:bf:db:bc:8f:34:
         de:21:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:15 2026 by rpki-client