Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          l3zp/1Y/ZIA4dRUqduccshnL9Cwctphff5PNQyZ5ZwU=
Subject key identifier:   A5:1B:69:EB:88:D6:7A:5B:14:41:17:66:43:E5:79:2C:63:BB:C9:F1
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       019D2695D2137F3EC20F249E16CEFA2747B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          127E
Signing time:             Wed 25 Mar 2026 20:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:45 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: WAJPMpZ5U/u0J8UvnbW+fTFigfBN3hnmICekCx4PKHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:d2:13:7f:3e:c2:0f:24:9e:16:ce:fa:27:47:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Mar 25 20:00:45 2026 GMT
            Not After : Mar 26 20:00:45 2026 GMT
        Subject: CN=a51b69eb88d67a5b1441176643e5792c63bbc9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:d9:67:7e:1a:dc:06:46:a1:1f:20:a6:f8:
                    e8:be:a5:04:8d:16:1a:5e:35:82:fa:c1:45:22:8a:
                    fc:92:f0:59:20:2a:f4:b8:71:29:dc:f4:22:c6:24:
                    19:63:0e:8c:c4:ed:23:62:63:b4:7b:2c:09:f6:d1:
                    2e:7c:73:a1:17:8d:56:58:f9:19:6a:e6:96:85:95:
                    f7:20:15:90:44:91:61:65:03:90:ca:cb:2c:c5:b9:
                    8c:3e:cf:c0:39:01:65:22:82:e8:b5:4d:3b:4d:35:
                    e0:fc:54:b0:dd:7b:06:7c:65:88:84:84:66:da:7d:
                    67:d7:3f:5b:5c:19:cf:40:6b:c6:79:5f:c6:13:52:
                    97:35:39:1e:50:16:b7:e1:ed:2a:92:1c:49:74:ca:
                    df:c8:74:74:a1:57:96:06:f2:79:18:e0:80:26:e6:
                    08:3c:4e:77:bc:9d:98:e1:c2:ea:f1:60:77:ef:e7:
                    15:3a:f1:d0:a8:29:9c:8e:de:ce:19:77:35:b0:a1:
                    f3:24:31:ee:56:8f:51:76:1d:1f:2d:6b:f6:51:cb:
                    73:55:69:c4:d6:ac:6e:dc:7c:5f:36:de:4a:b9:69:
                    cd:0c:59:5e:58:a4:36:70:93:6a:a0:c8:19:d0:44:
                    33:5e:81:d8:fc:50:08:dd:96:99:6d:50:1e:8d:39:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1B:69:EB:88:D6:7A:5B:14:41:17:66:43:E5:79:2C:63:BB:C9:F1
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:73:da:66:da:8f:ac:f6:31:c2:e5:b7:2e:6d:79:36:41:
         ce:f6:16:b3:5a:1e:1d:bc:a3:35:e7:c0:24:85:ed:7a:49:0f:
         76:4a:e8:12:98:5f:15:c7:c1:3b:a5:ec:fb:80:1a:36:ac:86:
         29:5f:f9:8a:17:90:b7:37:fe:43:15:ed:f2:f9:bc:9a:ba:7c:
         75:f5:91:75:27:b9:32:16:e9:a2:e6:61:4e:d5:8a:c7:8c:92:
         e1:a1:1d:c8:66:4e:43:c7:bd:35:67:fc:c4:1e:4f:05:c6:de:
         c7:84:6e:21:6d:c0:f1:cc:98:7a:10:e3:53:3e:a1:98:3a:92:
         32:20:a2:26:e5:22:07:fb:73:ba:9a:41:cd:ac:71:98:00:20:
         56:34:52:97:94:cd:24:67:42:36:f3:7d:10:80:a1:d1:78:7b:
         53:80:39:88:5a:a9:7d:89:40:7f:b3:0e:63:0a:9c:64:cb:2c:
         b0:22:b8:93:01:a4:9d:69:d2:8a:a4:85:3d:90:00:3e:bd:92:
         e5:13:0b:d6:10:2e:19:d2:61:fd:40:b9:95:2c:25:9e:8d:3c:
         5a:3c:57:d6:00:93:78:f1:54:71:43:9e:70:d8:00:56:2f:3f:
         a1:60:15:fe:c3:d0:a8:eb:af:29:9c:f3:19:3f:89:5a:c5:38:
         00:51:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:53 2026 by rpki-client