Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
File:                     tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft (raw, json)
Hash identifier:          8a0Pi79Om2KzkJW80EZA2a0PGE4B9W04dcN7xPDpuDE=
Subject key identifier:   B7:56:E4:F3:05:8A:08:66:BE:D0:83:DC:49:79:44:9D:D8:06:02:4D
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Certificate issuer:       /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial:       019D27724AA4C776CD6671864D494B9A4826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
Manifest number:          9D
Signing time:             Thu 26 Mar 2026 00:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:34 +0000
Files and hashes:         1: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl (hash: 6NwvpTJk0RUuoflz/IjdXJtYkLmlbNCqwRMRNgBGJDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:4a:a4:c7:76:cd:66:71:86:4d:49:4b:9a:48:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
        Validity
            Not Before: Mar 26 00:01:34 2026 GMT
            Not After : Mar 27 00:01:34 2026 GMT
        Subject: CN=b756e4f3058a0866bed083dc4979449dd806024d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:5b:5b:b1:fa:52:44:02:5c:2d:e6:fd:d9:
                    e4:2e:12:83:28:44:4d:2e:7a:78:f5:fb:a1:90:b1:
                    9b:9c:b2:a5:3a:24:8a:00:15:2b:7b:e3:78:83:18:
                    ac:69:3f:48:49:44:3e:7f:3c:95:fe:e5:b5:a6:a4:
                    6d:30:06:8a:97:bb:8f:50:59:54:9c:06:33:0b:08:
                    13:91:3c:8c:df:9e:e6:b3:d1:26:d2:b9:86:b6:63:
                    97:97:28:fa:56:9a:b5:f7:d2:47:08:f3:fe:68:f4:
                    8c:56:c8:f0:fb:68:08:8a:a5:20:07:59:93:de:ba:
                    ea:8a:4e:2b:50:b8:a9:07:36:43:0e:35:d8:7c:19:
                    a8:aa:e1:e2:32:1b:3a:bb:b9:fe:6e:03:72:ed:1f:
                    8d:38:d8:e5:97:b6:68:1a:6c:49:02:37:94:ed:44:
                    fb:70:7e:8f:10:6c:8b:0d:94:82:88:c9:4a:57:0e:
                    ec:a1:be:cc:7f:d5:35:20:c3:6d:2d:1e:91:41:e5:
                    c6:7f:f3:bf:b9:1e:df:3b:31:49:a6:aa:de:79:e4:
                    66:3c:19:11:c9:74:82:ec:14:0d:63:a1:9a:39:5d:
                    1f:01:cf:59:ff:c0:9b:88:02:da:e5:cf:f0:fb:3a:
                    d2:cd:b8:13:4b:94:80:40:b7:00:8e:f1:d9:3b:54:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:E4:F3:05:8A:08:66:BE:D0:83:DC:49:79:44:9D:D8:06:02:4D
            X509v3 Authority Key Identifier:
                keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:37:25:e1:d3:78:dc:1f:c9:da:72:25:2a:26:bf:21:5d:
         79:b2:8c:2a:af:4a:b2:c0:79:77:ea:62:ee:01:74:f7:74:ae:
         29:2f:0a:c6:5e:08:56:c9:fd:e2:77:d6:ce:cf:ad:ea:14:d7:
         cc:0b:32:45:b7:70:41:ab:d7:ac:01:65:b1:27:7e:ff:4b:0b:
         f4:0e:73:7f:8f:54:57:bb:5f:73:6b:5c:d9:41:5b:15:13:0b:
         cc:54:b4:c7:7d:e7:d6:60:7e:3b:c2:37:e0:ac:90:f0:8b:c7:
         ed:a4:23:01:c7:d7:f8:b9:56:db:9f:ce:45:bb:36:74:01:5f:
         5a:17:c4:04:b2:ac:88:4d:57:ad:ed:0c:43:57:49:b1:55:ed:
         25:f6:13:e8:42:2c:88:51:41:fb:53:1a:e0:a4:30:66:e6:ca:
         c2:6b:ab:b8:b9:55:31:01:94:f8:93:de:65:93:0b:ee:be:cf:
         80:f2:62:fe:31:8d:e4:37:df:17:22:ee:c0:ab:5d:f3:f1:81:
         48:a8:c8:f5:6a:25:a8:51:5b:fb:c3:d6:3d:8a:04:e7:8e:39:
         ee:50:57:39:22:35:3b:fa:a8:05:9c:d6:e8:5f:3e:bd:56:c9:
         84:3e:4d:80:a8:2c:50:1d:9d:63:55:ef:7e:d5:eb:75:c6:29:
         56:0d:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:18 2026 by rpki-client