Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
File:                     bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft (raw, json)
Hash identifier:          zwtpmb67OXz4FgtiaBWG+3FWMpxHn7ImlVZnU8UIR+U=
Subject key identifier:   21:8C:9D:30:2C:91:81:97:6C:FB:7B:0F:3E:7F:A1:08:19:D5:2D:C8
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Certificate issuer:       /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial:       019D2A3C36ED3180D950309291376908C865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
Manifest number:          08F5
Signing time:             Thu 26 Mar 2026 13:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:22 +0000
Files and hashes:         1: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl (hash: mg0C9Bffz0JUI0j6U+y4Eb0rdUa+Il1BZMJm6qKPX6I=)
                          2: lZT1fZgUQ-ZPsP-PoHQBy-u9gnU.roa (hash: 9BM64257Y/MfjC+0Pp/O4gJQJeSisM84XVJJJ+9Ww8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:36:ed:31:80:d9:50:30:92:91:37:69:08:c8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
        Validity
            Not Before: Mar 26 13:01:22 2026 GMT
            Not After : Mar 27 13:01:22 2026 GMT
        Subject: CN=218c9d302c9181976cfb7b0f3e7fa10819d52dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:e0:ad:fe:09:d5:ff:15:61:93:aa:71:01:
                    30:8d:bd:15:04:09:5e:85:93:c1:09:88:10:08:73:
                    3a:d4:e8:dc:53:77:af:1d:8f:68:d9:48:6f:00:96:
                    2f:57:dc:02:d7:96:64:fd:dc:66:f9:0d:5a:5b:33:
                    33:01:d0:01:b3:d2:80:f3:06:a8:fb:1c:96:60:e2:
                    48:28:7d:fd:af:26:ba:fc:9f:7d:0e:53:c0:ae:49:
                    cb:6d:07:08:d6:54:72:22:2f:c2:82:bb:fa:1f:65:
                    7d:fd:b9:15:16:f3:af:90:15:89:20:36:6c:82:cb:
                    f8:28:b2:79:e0:49:e4:d2:0b:dd:d7:30:df:61:4b:
                    e2:00:18:ea:65:60:bc:f8:39:54:13:ab:ec:e3:30:
                    57:6a:91:76:01:52:7d:36:d7:95:8b:10:1f:08:18:
                    a5:94:24:bc:77:53:4b:06:b4:7d:2b:b7:20:1b:00:
                    81:ee:3e:bf:ca:ab:fc:21:ba:ed:ab:37:5b:0e:74:
                    ef:1d:70:81:b2:59:9d:90:33:a0:43:71:dd:26:7f:
                    1e:45:be:4c:b6:f4:0f:d0:08:31:d5:c9:d0:03:7d:
                    7b:47:e6:36:96:a0:3a:05:e1:fb:38:13:78:b0:c5:
                    a1:a8:71:3a:46:d5:f5:76:70:55:43:46:22:e0:d3:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8C:9D:30:2C:91:81:97:6C:FB:7B:0F:3E:7F:A1:08:19:D5:2D:C8
            X509v3 Authority Key Identifier:
                keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:53:47:01:1c:08:d2:69:ef:76:a8:b1:a4:8c:2d:59:5e:1d:
         7c:3c:d6:e1:00:32:52:63:08:b9:44:15:24:29:f6:cb:f1:0c:
         02:96:c7:0c:ba:10:8a:07:3a:c7:f5:ac:fe:35:d6:26:d1:0f:
         3c:2d:3a:97:70:97:32:f3:a1:48:bb:a1:ef:f6:68:8e:4a:34:
         b2:96:a0:5d:25:42:5d:e4:a7:2b:ec:25:63:60:a6:7b:b6:b3:
         6a:10:c3:38:b1:06:54:cf:0d:ea:0c:51:34:f7:ce:83:68:c2:
         63:57:0e:73:8c:11:f4:c1:15:07:ac:b7:ee:d3:6c:63:97:59:
         95:fd:fd:a8:4c:89:97:07:6b:ca:40:ce:cf:fe:9a:62:1d:f3:
         90:5f:04:75:ce:cb:5a:eb:c7:97:3b:4f:87:7d:8c:c0:c0:06:
         68:f4:a2:08:30:02:de:79:80:2d:65:40:9c:2f:35:7f:2d:56:
         78:e4:c9:03:44:59:41:11:15:c3:a6:ac:16:d5:a0:ec:ac:2d:
         6f:ad:c2:1a:24:91:04:fe:f1:c4:7c:6f:95:b9:a5:26:99:ce:
         96:0e:7c:fb:80:91:fc:1a:e1:4f:fa:42:9c:26:29:af:e8:d3:
         44:9e:d8:7d:0d:27:07:37:f9:c5:4a:d6:0a:cb:dc:8c:18:99:
         f5:cf:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:34 2026 by rpki-client