Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File:                     rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier:          S2fFxDBES+Rhwmf9Qh5Yv1Oh5xScEK2WSJrAQPbX9HU=
Subject key identifier:   27:65:3A:F3:60:CD:B7:50:2F:AB:04:C3:77:2A:A9:5A:29:5D:29:74
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer:       /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial:       019D27A87F23731E6730F896EA72D0F2C32E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number:          06C6
Signing time:             Thu 26 Mar 2026 01:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:47 +0000
Files and hashes:         1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: CqkCNbcOZ5eDTxhtoHF4Trss76VLjPaBZARob2tNako=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:7f:23:73:1e:67:30:f8:96:ea:72:d0:f2:c3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
        Validity
            Not Before: Mar 26 01:00:47 2026 GMT
            Not After : Mar 27 01:00:47 2026 GMT
        Subject: CN=27653af360cdb7502fab04c3772aa95a295d2974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:0d:f4:64:c5:46:1b:91:a6:b9:ee:91:6b:
                    e3:e5:27:84:95:69:99:ca:11:ed:4a:de:8b:a2:03:
                    bf:63:3e:a6:f3:1a:69:13:f2:99:c5:4a:33:76:0b:
                    17:91:e1:d0:43:6d:99:65:93:87:52:b7:3d:15:61:
                    7a:85:26:5e:60:d2:99:27:58:76:b7:d1:fc:b4:21:
                    1c:ae:d7:bf:6a:dc:0e:29:a1:80:79:9c:85:06:64:
                    03:ec:b2:df:cb:44:c9:7f:0f:60:9d:15:fe:09:38:
                    36:a6:94:81:71:77:d1:b0:a9:24:fc:a2:39:19:be:
                    63:b7:db:01:a7:14:73:d5:81:39:4d:10:1b:35:ec:
                    3d:24:34:ce:27:ef:df:e1:cf:96:e3:2e:50:e6:fa:
                    f1:b4:e6:f9:26:51:3f:dd:5d:92:8a:8e:e2:f6:14:
                    bd:09:4c:15:b1:70:94:67:a7:2c:b2:40:c2:ae:73:
                    80:1c:e7:22:d7:03:5f:5a:11:31:d2:ae:a6:3c:12:
                    d0:ea:8c:1c:83:92:ac:e7:3f:12:b1:f1:b8:e5:a2:
                    6f:5d:c7:94:73:20:45:30:05:ea:fb:00:76:6e:9e:
                    e7:b3:8c:03:bc:03:1d:12:7d:58:60:f4:36:74:f5:
                    45:e9:4e:fb:4d:b0:e1:19:a1:d0:cb:34:85:e2:b4:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:65:3A:F3:60:CD:B7:50:2F:AB:04:C3:77:2A:A9:5A:29:5D:29:74
            X509v3 Authority Key Identifier:
                keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:10:fa:ec:87:34:7f:cc:48:bd:4a:f1:b7:48:ca:6b:e2:37:
         9e:e4:4f:d3:cb:00:70:c1:ef:26:1a:40:74:ca:f6:f1:df:61:
         03:72:d8:e2:3c:c0:fc:99:f4:fd:65:2e:c7:58:1b:a2:fc:9b:
         55:6b:f0:6d:46:05:89:4e:e5:1b:23:52:83:34:f9:28:76:2f:
         6c:fb:6c:f3:f9:22:2d:1f:25:73:3e:21:6e:4b:44:f4:bd:92:
         30:84:0a:73:8a:2f:ec:7a:50:08:bd:8a:a8:d6:f3:55:e3:6c:
         2b:3c:4f:50:e5:37:45:c8:64:a5:f2:5a:62:60:46:2e:b6:ea:
         17:2a:6d:0a:6f:9c:83:13:00:b0:90:74:ec:0c:03:24:89:18:
         64:58:a9:fd:df:d5:73:d5:ab:e6:e1:b7:27:f0:4e:6b:4a:32:
         34:a3:01:ed:3c:6e:c4:4e:12:b9:c9:ca:7a:48:36:e5:18:42:
         18:aa:38:98:ee:7e:a3:28:8b:2b:9c:0f:56:aa:c1:fc:7e:27:
         92:c4:18:a2:78:4f:57:22:85:9e:d6:29:b1:f4:97:ba:44:e9:
         a8:f3:0f:ed:f8:75:01:6b:13:88:08:82:8d:c1:3f:7f:bf:4b:
         18:05:33:7b:36:a0:f5:33:36:f6:c8:00:66:36:96:2c:0f:8f:
         64:d6:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:39 2026 by rpki-client