Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File:                     a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier:          9SRTvp3jR4+wzZ0LnsaPHZtV43LSL1QIUrWOiLzo3+w=
Subject key identifier:   69:5E:7B:2B:35:02:83:59:73:A1:40:28:87:E0:F1:6D:17:1B:4D:FA
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer:       /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial:       019D2771C10AF4D1941A1A72455D7F75F892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number:          175B
Signing time:             Thu 26 Mar 2026 00:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 00:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 00:00:59 +0000
Files and hashes:         1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: ZKbPq+ZKkFTepCsZbOx1VCkjq3sYLU4uaEXoOOkCxl8=)
                          2: rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa (hash: +JefNV5OaeJsN9RpkGDkCiA4z+6Up7RrUi0ftPxyKfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:c1:0a:f4:d1:94:1a:1a:72:45:5d:7f:75:f8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
        Validity
            Not Before: Mar 26 00:00:59 2026 GMT
            Not After : Mar 27 00:00:59 2026 GMT
        Subject: CN=695e7b2b3502835973a1402887e0f16d171b4dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:7b:82:a0:83:0d:11:45:1a:cd:f0:30:64:
                    22:96:80:8b:47:b9:a2:51:1f:1a:c2:67:5c:a8:24:
                    04:0b:22:51:d2:39:c9:26:75:ee:a6:06:09:25:69:
                    d9:f5:17:6f:8a:cc:59:c4:da:8d:82:04:f0:00:f3:
                    ed:ee:4e:1c:c9:e0:13:38:b0:aa:71:b7:20:cb:46:
                    82:03:61:f4:de:81:da:98:fa:a1:ac:b6:eb:98:f4:
                    b7:6e:f7:02:2b:64:c4:16:a1:ba:4f:a1:c4:40:b0:
                    3b:a5:dc:74:3e:52:60:24:6b:42:57:fa:c3:72:62:
                    fb:8f:31:bd:ec:58:7f:06:54:07:48:ec:5a:ef:bf:
                    91:13:cd:63:f6:40:41:55:3b:3f:05:a0:70:fd:ce:
                    2a:b8:52:33:8d:03:92:b6:4d:6e:62:f8:19:63:79:
                    25:8a:32:63:94:30:33:58:4c:d0:a0:7e:4d:a7:48:
                    57:14:f5:c4:25:e5:58:67:13:21:08:04:57:a3:0a:
                    61:6e:2d:d1:81:01:7c:04:4a:b8:c6:e2:bd:b1:54:
                    f6:66:af:73:bc:cd:33:af:46:5b:bf:c5:95:e5:b2:
                    9c:aa:02:64:63:0a:8f:81:8f:34:2b:19:2e:1f:cd:
                    bd:53:83:bf:2a:84:61:eb:e4:2c:98:ff:28:ad:50:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5E:7B:2B:35:02:83:59:73:A1:40:28:87:E0:F1:6D:17:1B:4D:FA
            X509v3 Authority Key Identifier:
                keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:c6:6d:03:3e:6a:d9:84:4d:8f:55:62:1a:80:3b:b6:b9:
         fc:a8:3e:c6:d9:59:f3:b1:88:f4:6f:2e:da:cf:19:04:07:46:
         52:68:64:7b:27:27:4d:a1:71:5b:65:96:4c:4d:5d:69:23:2d:
         dd:cd:ff:01:4c:1f:de:a2:83:75:13:2b:fb:12:30:44:e8:81:
         c6:6a:15:1f:54:86:b4:f5:c4:c5:c5:f0:14:1f:37:3d:da:75:
         30:4b:c6:c4:61:7b:fe:01:85:37:a7:f1:66:5d:02:11:9c:aa:
         c8:09:39:19:26:2d:27:c2:4f:e6:e7:41:bd:6b:ea:f9:02:0e:
         69:22:c4:ff:c6:c6:0e:1a:8b:ce:03:c0:4a:51:4d:9d:e9:4d:
         1c:e4:95:1d:a8:e0:f5:c1:17:59:1a:8e:0a:36:8a:77:4a:23:
         21:38:73:30:e5:aa:59:6f:af:27:ed:56:bb:25:fb:fa:7f:00:
         62:2b:54:51:67:4f:f4:25:ff:69:17:d9:fe:af:93:ec:65:f3:
         e4:ec:5c:49:ef:76:37:55:8f:0e:78:5c:d8:10:9f:d7:f5:05:
         81:ca:12:85:c6:88:5a:5a:4d:1d:5c:43:66:7b:82:27:34:0b:
         71:7f:c5:b2:9d:11:ed:8a:15:9b:b8:64:60:d3:4d:97:83:7c:
         83:58:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:15 2026 by rpki-client