Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File:                     xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier:          rVVEdOTyVdv9dXDLaLtp1bzwNFAGZhgl0svIO4NK8hQ=
Subject key identifier:   60:03:A2:16:8D:DF:5D:4E:ED:7B:41:F9:8F:C0:6A:92:AE:23:EB:0F
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer:       /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial:       019D2AA984972662BC070CF8CBBED78359FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number:          0FE6
Signing time:             Thu 26 Mar 2026 15:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:45 +0000
Files and hashes:         1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: W9arnhEuLokolQGgP3T+wEh2XRq2922UhwoQNDv5bLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:84:97:26:62:bc:07:0c:f8:cb:be:d7:83:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
        Validity
            Not Before: Mar 26 15:00:45 2026 GMT
            Not After : Mar 27 15:00:45 2026 GMT
        Subject: CN=6003a2168ddf5d4eed7b41f98fc06a92ae23eb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:68:91:f6:a0:1f:86:2e:90:38:64:60:0f:
                    1f:a6:9f:0f:3f:d9:af:56:78:01:91:4f:e5:55:13:
                    9f:a1:5e:9b:8a:e5:11:c7:e5:81:7f:e2:62:ce:a1:
                    b3:55:67:1d:d2:e7:d1:8f:4c:63:cf:83:23:8c:53:
                    87:8c:52:ed:f3:4e:3c:f7:82:b6:af:20:2e:ab:fe:
                    e1:85:1c:0e:15:f1:5c:88:65:6d:64:89:35:40:b1:
                    61:6c:a0:d7:76:f6:9d:bb:bd:ca:cc:3d:f4:4d:06:
                    26:2b:d4:40:d5:7e:52:ba:a9:ce:05:35:45:df:ad:
                    92:04:32:92:59:23:3a:ab:38:b4:ad:e7:d7:f5:ab:
                    02:e7:ad:86:77:10:7c:88:d0:44:2c:fb:a2:a7:bb:
                    bd:4f:19:d5:a4:30:8c:b3:e3:6b:ac:dd:ca:ea:ec:
                    42:b4:0a:a4:a8:e4:4d:52:c4:8f:76:16:15:6c:15:
                    8a:5f:ae:f5:38:ff:38:0d:8a:25:2b:f4:39:33:3b:
                    15:ac:5a:ad:7c:b9:93:54:2e:05:cf:28:ba:db:cc:
                    af:d7:ee:01:ed:5d:be:51:eb:df:1a:c4:bd:8d:d4:
                    0e:b6:85:ad:b0:77:23:c2:70:54:ac:5a:a7:d6:70:
                    fb:22:8e:c8:98:62:c0:ce:75:31:8c:15:c6:08:e0:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:03:A2:16:8D:DF:5D:4E:ED:7B:41:F9:8F:C0:6A:92:AE:23:EB:0F
            X509v3 Authority Key Identifier:
                keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:75:d3:05:5e:c2:d9:80:7c:8c:e8:25:06:c3:c6:99:02:50:
         80:66:b9:05:5f:7f:fa:8c:47:2f:88:4c:2f:30:47:c7:75:db:
         a4:b3:56:0a:20:2a:a2:93:80:d9:07:84:ce:36:4b:2f:61:f9:
         08:6b:67:15:b0:df:6a:89:ac:bc:27:aa:ee:83:c2:fd:90:b8:
         ac:72:bc:62:82:0a:5f:3e:dd:ce:17:3d:ab:fb:15:36:78:8f:
         86:12:27:f4:dc:9e:98:bf:20:6e:7f:c5:f6:e3:4b:28:ed:d7:
         88:6e:06:bb:56:83:7a:a6:1c:a9:30:10:c1:1d:4e:b8:e5:7d:
         59:d0:f5:9f:01:54:ff:65:c8:72:3f:78:07:32:f3:63:02:c8:
         0f:43:f6:33:49:f1:db:11:f7:c3:69:64:1f:41:cf:7c:e9:0f:
         ae:37:f0:83:d6:fd:13:b8:63:a1:50:ae:0a:b8:13:5f:3d:4b:
         0c:b4:a2:50:93:3f:af:27:af:76:71:28:ba:ca:9f:67:81:aa:
         5f:27:94:ff:b1:66:06:1c:8d:9a:bf:8d:2f:a6:c7:a9:4b:a6:
         8e:cb:64:93:d9:67:42:c2:13:17:d0:47:8b:f7:1b:5b:ce:93:
         a9:ff:86:75:5b:b4:ba:ec:70:14:8c:e3:fe:15:da:96:4f:20:
         1c:24:ad:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:03 2026 by rpki-client