Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
File:                     b0hdoepm0fZhammw0CuaK8Gk_9M.mft (raw, json)
Hash identifier:          3Kd8PqPu/cQTh7WSxDBuT4avTwEWUpe+AVBZ8jhniMQ=
Subject key identifier:   F1:AA:68:30:13:3D:16:10:5A:7C:DA:8E:18:C6:13:E0:0F:26:8E:46
Authority key identifier: 6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3
Certificate issuer:       /CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
Certificate serial:       019D281670447E5F5782059FE75146611C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
Manifest number:          02BB
Signing time:             Thu 26 Mar 2026 03:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:52 +0000
Files and hashes:         1: b0hdoepm0fZhammw0CuaK8Gk_9M.crl (hash: DBp93MG2Yx0Py4WTLa0OrIa0OsHaSrAOEznidsrC78o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:70:44:7e:5f:57:82:05:9f:e7:51:46:61:1c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
        Validity
            Not Before: Mar 26 03:00:52 2026 GMT
            Not After : Mar 27 03:00:52 2026 GMT
        Subject: CN=f1aa6830133d16105a7cda8e18c613e00f268e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:a0:09:c2:e6:dc:5f:d7:57:da:64:a1:d8:
                    5b:1e:d3:55:b5:2d:ab:87:3a:2e:06:f8:55:85:80:
                    4b:07:4f:bd:76:02:81:0f:e2:aa:3b:72:a9:3d:af:
                    f0:ae:0b:1d:29:50:10:61:e0:f4:da:2c:98:28:38:
                    87:30:70:2a:a0:4a:70:31:75:9c:b8:49:58:ed:7c:
                    7a:ed:c9:ff:92:aa:a7:ad:1e:43:bf:bb:12:38:3f:
                    6b:af:8e:8d:43:ec:1b:48:b5:5f:c7:37:91:19:6e:
                    d3:41:80:34:05:96:df:7c:d0:5f:ca:e4:92:40:7c:
                    72:73:83:26:e6:dd:e7:5d:42:7f:ad:db:34:34:b8:
                    b9:06:73:e6:46:50:17:87:d4:74:a7:45:c3:40:6a:
                    fb:d5:39:e5:e1:6d:9c:b8:36:5f:be:95:f9:76:aa:
                    89:f7:41:29:e7:ce:73:89:e7:8d:2b:e1:91:5d:ed:
                    fc:e5:cc:d0:a7:ab:02:df:57:ed:5d:96:5c:ea:c6:
                    69:dd:fd:63:c9:0a:54:f2:43:a3:04:1a:f3:55:29:
                    d0:1d:4a:6f:4e:9a:42:16:22:a2:aa:cb:aa:31:fc:
                    e8:a3:97:a7:d9:12:88:c8:02:cf:1f:73:3a:a5:e2:
                    dc:26:39:71:af:d8:91:74:b9:1c:6a:5e:b0:9b:12:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AA:68:30:13:3D:16:10:5A:7C:DA:8E:18:C6:13:E0:0F:26:8E:46
            X509v3 Authority Key Identifier:
                keyid:6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:10:06:7f:b5:e1:eb:0b:8c:2d:c0:83:85:c8:23:82:45:ee:
         89:a2:64:9b:7f:cf:46:92:bd:b5:1d:fc:72:ee:11:ef:31:c0:
         9a:fc:61:92:fa:bb:18:34:b4:c0:02:32:f2:64:68:bb:77:0d:
         07:ac:c5:60:8b:2e:a2:70:37:96:2c:6c:cd:ca:94:9a:5a:77:
         63:bd:a3:ce:48:db:91:a4:20:53:6d:7f:91:52:7a:fb:c3:ae:
         e9:7c:88:39:ed:68:d7:b1:c6:d9:2d:d2:1f:d4:71:15:a3:07:
         5f:e4:ef:89:71:2c:54:f7:94:ec:93:22:2a:08:76:ff:c4:e8:
         09:4d:24:5f:0d:f9:c3:9b:bd:85:9c:54:a6:0d:31:13:35:ab:
         40:8c:4a:8a:a4:bb:af:2f:a0:e6:50:15:db:b4:96:f5:59:69:
         66:17:02:e6:44:af:fc:78:31:18:df:54:1b:89:b6:a5:bc:78:
         03:e1:74:91:8a:35:1e:5e:4a:ac:3c:85:a8:d4:59:0b:89:45:
         dc:61:52:4e:0a:0c:b7:c2:7d:87:b7:0a:8a:9a:8d:1f:25:a2:
         4a:2f:1f:89:43:42:65:28:36:5e:35:30:7e:63:4a:d0:2d:ab:
         2d:d7:84:6b:7d:0c:0d:c4:f2:b7:35:aa:0a:32:3a:7d:3c:8c:
         0a:43:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:22 2026 by rpki-client