Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File:                     RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier:          5DBw1yp0moOquU5p8yHQTVNuS432zLr0h/ctmpOJD38=
Subject key identifier:   52:FF:12:C9:33:52:AC:25:BA:33:24:1D:8E:4F:31:37:48:9D:71:06
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer:       /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial:       019D27DFD7ACE93229E76048DD171D600B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number:          063B
Signing time:             Thu 26 Mar 2026 02:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:14 +0000
Files and hashes:         1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: 7SaNa2H+LZegE8+6GSexdNLUf45LYRpMjtgfEG4jE84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:d7:ac:e9:32:29:e7:60:48:dd:17:1d:60:0b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
        Validity
            Not Before: Mar 26 02:01:14 2026 GMT
            Not After : Mar 27 02:01:14 2026 GMT
        Subject: CN=52ff12c93352ac25ba33241d8e4f3137489d7106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:e2:98:f7:19:65:6d:bf:da:60:68:54:bb:
                    ec:09:0f:99:c6:ce:af:94:16:61:d2:fd:42:05:4f:
                    94:24:9d:4b:49:7e:37:8c:6f:f1:54:a6:50:1a:50:
                    52:ee:b7:29:a4:fb:0a:d4:f2:1a:d5:7b:13:53:ee:
                    94:01:12:9a:89:5f:cb:89:e5:8b:36:18:c6:4c:f2:
                    65:0b:29:64:38:47:98:dc:b0:e8:f2:34:56:99:17:
                    21:05:4f:80:9c:59:c5:ac:7c:31:e8:1d:04:c1:95:
                    4f:1d:f9:39:48:e2:79:69:90:60:c5:bf:68:63:d7:
                    ca:ea:7e:79:be:d1:10:c4:1a:2e:61:dd:1b:8d:f1:
                    86:49:fa:c2:0c:b3:a7:70:f5:f7:ba:2f:74:75:9a:
                    d4:c1:92:8b:3a:33:44:c3:56:5d:84:dc:14:db:a9:
                    5c:5a:b6:ba:6d:59:e3:6e:9a:49:5f:4d:b0:29:08:
                    8c:17:ba:64:8c:7c:3a:0f:44:ee:b5:90:f4:b9:0b:
                    81:22:71:1a:5d:ae:1d:be:38:88:32:74:58:2d:02:
                    8e:9a:94:4c:ad:e3:14:77:25:8b:ff:63:60:39:29:
                    35:f7:07:bf:d6:15:0d:62:b5:91:ba:cc:62:c6:6e:
                    97:7d:a3:92:9a:a2:b2:19:04:2e:ff:99:19:1e:a5:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FF:12:C9:33:52:AC:25:BA:33:24:1D:8E:4F:31:37:48:9D:71:06
            X509v3 Authority Key Identifier:
                keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:e9:e6:6d:2e:94:f9:10:51:ac:7b:ba:a8:a0:2a:38:88:
         e9:cd:eb:f7:9f:97:db:78:f0:10:35:13:df:5d:7d:85:a3:74:
         00:71:2c:ac:a2:2a:0e:dd:c8:d4:e3:ee:9d:79:62:51:21:3a:
         bf:d3:d5:e4:fd:6c:c3:97:91:6a:c6:63:47:d8:c3:7b:d4:56:
         66:56:42:db:d6:a6:09:14:b4:31:96:2a:7f:b7:b2:6f:2b:05:
         47:07:5f:2c:1a:6d:fa:3f:d3:cd:bd:9c:9a:48:42:ef:63:ce:
         57:39:af:2c:fe:59:25:08:c6:34:5c:d9:21:d9:0a:f2:68:65:
         80:4c:17:b1:65:ee:51:9b:cd:a9:55:95:ad:c3:fd:43:15:63:
         71:20:1e:28:cb:1a:00:32:43:ca:fb:c7:57:91:5a:89:34:bc:
         7c:c9:07:e1:0c:02:c1:c6:9e:d3:2f:f9:3b:12:34:ad:c1:ff:
         0a:66:c8:96:97:86:9e:b3:a8:7d:5f:2d:b5:93:eb:84:fb:33:
         40:b7:0d:38:3c:8e:45:c6:78:b8:c6:ac:bc:20:d3:49:6d:93:
         b8:6f:78:45:79:21:0d:a5:74:0e:26:c4:25:9a:c2:21:2b:cc:
         b7:4b:9e:f8:2e:32:7e:00:33:77:e9:b0:86:21:a3:40:d6:ac:
         94:88:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:08 2026 by rpki-client