Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          oIJMu1T3MOciuEQaRfz4zZm7+Jm3/c9n14NMo1/uzSA=
Subject key identifier:   93:55:63:D9:D9:63:2B:9A:42:3F:F7:EB:84:67:6F:03:61:7D:DC:81
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       019D28F327A35BCB47B83BA7B9A4567FCB28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          1108
Signing time:             Thu 26 Mar 2026 07:01:57 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:57 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:57 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: dGaR9f8YtWIkWZ+RI5tJP9MNP+HHOwc0S20QHbDO/YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:27:a3:5b:cb:47:b8:3b:a7:b9:a4:56:7f:cb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: Mar 26 07:01:57 2026 GMT
            Not After : Mar 27 07:01:57 2026 GMT
        Subject: CN=935563d9d9632b9a423ff7eb84676f03617ddc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:82:42:b6:1f:07:f2:93:6f:8a:8d:13:27:
                    a6:97:a2:2a:14:47:58:ac:7f:3f:5c:c2:41:c0:c7:
                    51:f6:93:fe:9f:60:f3:de:9d:d5:a3:77:d7:af:e5:
                    54:1b:06:e9:f3:85:a7:1b:31:cb:ee:97:08:2e:b7:
                    75:e5:22:95:08:24:eb:92:3c:8d:c9:29:4f:6a:4b:
                    2d:94:0b:ba:79:f4:29:a1:17:db:47:ae:b8:aa:0c:
                    fe:16:b2:54:78:51:09:bc:2f:20:b3:cc:5a:95:aa:
                    8f:7e:8b:4e:ce:9c:6e:22:c5:de:d2:9c:c0:76:d8:
                    b8:33:8b:02:f8:5b:e9:e1:3f:4a:54:ff:5f:4f:19:
                    95:d2:55:be:f8:ed:b0:d8:44:d0:1a:67:1c:54:1e:
                    63:c1:14:49:df:cf:f9:1c:3f:21:9b:06:7d:9e:ce:
                    17:ed:48:0e:8a:95:b1:2a:31:46:3e:25:e9:2d:7a:
                    f2:59:24:ba:9f:48:ed:f8:0c:d4:c1:ce:af:eb:1a:
                    07:cb:1c:88:02:63:a8:5c:22:fa:15:d7:7a:fa:78:
                    16:32:37:f2:92:a3:b3:71:51:f5:48:3a:40:54:16:
                    d7:8a:8f:72:f2:1d:26:96:44:5c:27:03:4b:38:72:
                    5a:5c:91:3c:72:40:55:a8:dd:21:e0:4a:4e:7e:19:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:55:63:D9:D9:63:2B:9A:42:3F:F7:EB:84:67:6F:03:61:7D:DC:81
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3f:f0:8c:fa:04:5e:33:c9:3d:e3:a9:76:a9:e0:12:5c:d5:
         3b:7c:a7:68:d5:21:a9:55:2f:3b:9a:25:7a:a6:45:04:fb:87:
         f9:57:ed:de:21:bf:c5:1e:9e:1a:a4:aa:2b:5d:43:f4:da:9c:
         de:30:2f:ae:8b:4a:25:74:c3:e9:6a:99:2a:5d:f9:40:ed:ec:
         db:d7:b2:ef:47:6f:ec:fd:60:08:92:47:63:90:15:47:b6:ed:
         c2:ee:4a:fa:37:ba:0b:9d:14:26:7c:4e:3f:b9:4c:64:3f:04:
         eb:ba:a7:e3:bd:37:3f:7e:0c:59:b7:41:c2:63:36:a1:fd:3f:
         e2:7c:99:5f:f6:4b:28:f2:b6:56:a8:71:70:4f:09:91:7c:f6:
         59:f1:77:45:82:a8:44:44:fc:42:ab:71:52:57:cb:bb:a0:24:
         d5:83:fe:01:1c:ac:d4:41:49:f8:e6:8d:b2:c9:aa:f0:b6:38:
         90:81:24:7f:32:ec:5a:10:8a:d9:9a:90:2a:01:7e:ae:9d:6b:
         f1:e9:fc:2e:fb:0d:be:43:86:53:16:e4:e7:83:7b:c7:e8:a6:
         f5:2a:13:4c:72:cb:4d:5b:3a:5e:08:7d:b6:ec:3b:ff:3e:94:
         e5:c2:b2:54:87:39:4e:f4:48:8a:1c:28:e6:b9:a9:1a:0c:9a:
         a6:dc:4d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8yejW8tHuDunuaRWf8soMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWJlYWE2NGYzNzAzM2M2ODA5MzU0MGI1Y2Q5Y2UzMzc0
NzI4NmYwHhcNMjYwMzI2MDcwMTU3WhcNMjYwMzI3MDcwMTU3WjAzMTEwLwYDVQQD
Eyg5MzU1NjNkOWQ5NjMyYjlhNDIzZmY3ZWI4NDY3NmYwMzYxN2RkYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC+CQrYfB/KTb4qNEyeml6IqFEdY
rH8/XMJBwMdR9pP+n2Dz3p3Vo3fXr+VUGwbp84WnGzHL7pcILrd15SKVCCTrkjyN
ySlPakstlAu6efQpoRfbR664qgz+FrJUeFEJvC8gs8xalaqPfotOzpxuIsXe0pzA
dti4M4sC+Fvp4T9KVP9fTxmV0lW++O2w2ETQGmccVB5jwRRJ38/5HD8hmwZ9ns4X
7UgOipWxKjFGPiXpLXryWSS6n0jt+AzUwc6v6xoHyxyIAmOoXCL6Fdd6+ngWMjfy
kqOzcVH1SDpAVBbXio9y8h0mlkRcJwNLOHJaXJE8ckBVqN0h4EpOfhmbEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNVY9nZYyuaQj/364RnbwNhfdyBMB8GA1UdIwQY
MBaAFOob6qZPNwM8aAk1QLXNnOM3RyhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQt
YzVkZWY3YmM2YTEzLzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQtYzVkZWY3YmM2YTEz
LzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD/wjPoE
XjPJPeOpdqngElzVO3ynaNUhqVUvO5oleqZFBPuH+Vft3iG/xR6eGqSqK11D9Nqc
3jAvrotKJXTD6WqZKl35QO3s29ey70dv7P1gCJJHY5AVR7btwu5K+je6C50UJnxO
P7lMZD8E67qn4703P34MWbdBwmM2of0/4nyZX/ZLKPK2VqhxcE8JkXz2WfF3RYKo
RET8QqtxUlfLu6Ak1YP+ARys1EFJ+OaNssmq8LY4kIEkfzLsWhCK2ZqQKgF+rp1r
8en8LvsNvkOGUxbk54N7x+im9SoTTHLLTVs6Xgh9tuw7/z6U5cKyVIc5TvRIihwo
5rmpGgyaptxNMg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:58 2026 by rpki-client