Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
File:                     6RWHvbAFQCxqRx-yQ3WyJtoticU.mft (raw, json)
Hash identifier:          zcZ2HCTCS9IM4/IIWtRcmzFmwdq7eUWZsEztrEHxzM4=
Subject key identifier:   99:8A:60:10:B2:5F:04:CC:1D:95:20:62:A3:70:F5:57:68:AE:9C:8C
Authority key identifier: E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5
Certificate issuer:       /CN=e91587bdb005402c6a471fb24375b226da2d89c5
Certificate serial:       019D28169365458920A38589DB8D11589920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
Manifest number:          0339
Signing time:             Thu 26 Mar 2026 03:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:01 +0000
Files and hashes:         1: 6RWHvbAFQCxqRx-yQ3WyJtoticU.crl (hash: R0BrsBDbtfZAzVsCBX49Bt7vvNnX5RZ7+6jEbvF8bUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:93:65:45:89:20:a3:85:89:db:8d:11:58:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91587bdb005402c6a471fb24375b226da2d89c5
        Validity
            Not Before: Mar 26 03:01:01 2026 GMT
            Not After : Mar 27 03:01:01 2026 GMT
        Subject: CN=998a6010b25f04cc1d952062a370f55768ae9c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:23:80:48:f0:74:30:94:91:bd:4b:f8:6c:
                    ec:46:ee:f2:88:9b:e9:05:0f:59:7c:5b:09:12:6c:
                    f3:4e:91:7b:d2:b3:f0:c9:3b:93:62:f7:e1:68:08:
                    9d:43:2f:26:44:b6:85:b2:16:a6:b6:7d:75:02:dc:
                    10:66:e9:c0:2c:54:83:f7:c9:fd:86:63:57:65:0a:
                    ff:21:f7:e4:bc:54:3e:a1:c9:b6:f7:47:65:5e:d3:
                    fc:d6:7c:71:41:b4:70:f7:42:ef:4b:71:92:36:c2:
                    89:6c:cd:67:49:c3:72:5e:6b:14:77:7c:84:72:8e:
                    8b:f3:8e:42:ec:be:03:a6:a7:eb:bf:94:48:af:e3:
                    92:c4:1c:2e:70:f0:5f:42:28:3b:73:6c:f6:5c:8b:
                    ad:9c:a1:b4:95:78:a4:86:42:3c:39:23:fb:45:6b:
                    3b:23:11:0e:9a:82:53:cd:4e:eb:14:6e:27:0c:5b:
                    30:16:75:c9:53:34:72:73:68:cf:d4:31:28:60:2a:
                    9e:4b:6a:c8:ae:be:b6:1d:73:ac:cf:aa:f6:7f:33:
                    c9:46:b2:81:da:32:59:19:10:b5:71:2f:72:e2:8a:
                    b2:97:fc:c0:a3:59:11:90:aa:52:c5:be:c1:f0:d9:
                    1a:7e:7a:8c:15:49:1e:21:20:0e:39:b4:99:37:7c:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8A:60:10:B2:5F:04:CC:1D:95:20:62:A3:70:F5:57:68:AE:9C:8C
            X509v3 Authority Key Identifier:
                keyid:E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:f8:58:45:aa:81:f2:37:32:2b:5a:f4:65:05:4b:56:6e:
         43:75:96:e2:39:3b:7e:02:a2:7c:f5:2a:ce:5f:88:6e:ef:ee:
         53:84:cd:6d:ca:45:b2:d8:cf:3b:bc:f7:84:13:67:f8:59:f4:
         5f:fc:10:1f:b4:b5:7a:96:e7:3f:2f:c4:6e:6f:41:d8:3a:5c:
         e5:84:48:1f:93:f3:9f:21:b6:40:a4:f4:3a:fe:d1:13:6c:07:
         e4:2a:3e:56:0a:c5:21:8f:90:6c:9d:f1:b9:57:53:f4:2d:01:
         df:96:29:08:2f:78:30:0b:a2:98:9c:25:3c:6b:80:63:ed:8c:
         11:df:b0:07:d6:f8:39:66:23:ec:6d:81:cf:aa:67:a9:b6:d8:
         30:4b:34:58:b2:9f:9d:d8:ea:1c:9a:16:b2:2f:ae:be:0b:e7:
         07:fd:97:9b:3f:ad:2f:05:59:fd:bf:69:67:ae:5d:2e:b6:ad:
         5d:c6:3a:61:33:ac:0a:f4:5e:b4:e6:f8:0c:75:e7:82:09:54:
         6b:1c:8b:74:2b:63:af:43:e4:2c:f0:12:03:69:47:66:8e:b4:
         4f:89:de:4a:b9:32:b5:ca:7f:33:de:b5:2f:d4:5e:81:d5:95:
         c7:62:14:d9:66:40:56:8a:64:e3:ab:da:b5:4d:77:56:4b:de:
         13:33:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:06 2026 by rpki-client