Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          jBcLZoz7QwzFf3i2GKHATFg02p4hpeAnyTZOMfaXliM=
Subject key identifier:   75:F7:AE:C4:DB:9A:F1:F8:3B:FA:D4:E9:E9:B0:25:A6:E7:C5:F0:BD
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       019D2704D42F6D53888B56469B3BE5DAA296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          098D
Signing time:             Wed 25 Mar 2026 22:02:00 +0000
Manifest this update:     Wed 25 Mar 2026 22:02:00 +0000
Manifest next update:     Thu 26 Mar 2026 22:02:00 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: Yy4xnfkk6mdoHesjKe4FMQ6iMmv8eG8mPmL/zxALa08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:d4:2f:6d:53:88:8b:56:46:9b:3b:e5:da:a2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: Mar 25 22:02:00 2026 GMT
            Not After : Mar 26 22:02:00 2026 GMT
        Subject: CN=75f7aec4db9af1f83bfad4e9e9b025a6e7c5f0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:de:e2:e5:82:2e:f4:ca:bd:dd:f5:af:23:
                    d9:c2:08:62:b6:8e:4b:33:c4:ab:5e:6e:ad:34:7c:
                    b4:a9:db:20:ec:6c:8f:20:4c:75:7b:1e:9b:94:a1:
                    7f:55:70:23:fa:67:05:f0:58:15:9d:c2:99:9c:7e:
                    cf:2b:17:dc:f3:bb:ec:94:f1:88:d5:0a:c7:0a:a4:
                    3b:c6:6b:a1:50:1e:dd:01:33:0d:70:2b:f7:ca:8b:
                    10:30:12:a2:22:ec:03:76:03:df:3e:fd:e4:c4:e4:
                    f0:3d:45:33:b2:c5:c4:97:5b:3c:82:9c:af:7d:11:
                    ab:04:54:23:5b:6b:1b:12:2f:c3:15:21:05:4a:b3:
                    3a:80:3d:fc:ec:31:05:a0:1d:c0:9a:eb:ef:f8:cd:
                    c3:ee:9c:46:9a:cd:81:83:c9:c4:78:00:9f:f5:47:
                    5b:61:89:d4:ee:c6:80:ac:80:ee:48:dd:34:2b:8a:
                    6d:09:90:c6:ad:8c:90:c9:5d:b6:f7:da:3d:ad:aa:
                    18:7d:88:20:63:10:e6:8d:29:9e:e9:5c:84:e4:a5:
                    8f:dc:1b:02:11:62:cc:10:9f:70:a6:6c:b4:a4:9f:
                    a1:9b:57:6c:d5:fb:b7:7e:28:70:ac:e1:45:17:3d:
                    1b:30:33:45:d7:a2:d4:11:d3:2f:4a:c9:ff:5c:9c:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F7:AE:C4:DB:9A:F1:F8:3B:FA:D4:E9:E9:B0:25:A6:E7:C5:F0:BD
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:f2:31:82:39:9f:62:6d:c7:39:04:b2:e4:b0:ea:4d:fc:
         0d:d8:65:30:ef:cb:9c:60:32:6d:d9:d4:0a:3e:2f:ff:bb:88:
         f8:50:41:a3:79:e3:2b:1b:e4:1c:fd:e2:e4:23:44:66:da:e0:
         44:62:90:ab:84:2a:38:52:9b:70:dd:24:e3:b5:47:d9:ff:bf:
         71:c3:62:ac:ae:bb:65:2a:32:1a:a3:85:3b:b1:95:12:aa:45:
         04:d6:3b:23:8a:93:e6:72:cc:a8:47:ec:c3:a6:20:6e:68:65:
         cd:7c:1e:17:86:da:66:35:e5:79:a8:3c:d7:22:b0:43:2a:95:
         90:23:00:1c:7a:e3:3f:e1:ba:1c:06:74:4d:29:b0:17:20:d8:
         2e:8c:fd:74:e3:f1:2c:c4:c8:c8:5d:10:51:73:00:6f:04:ce:
         0b:af:8a:5d:5c:5c:e7:48:2c:b7:eb:c8:50:4d:c3:f1:8d:68:
         34:99:fb:2d:b5:c3:83:dc:0c:95:18:c0:aa:67:e1:3b:3c:c0:
         70:c1:69:87:33:ae:88:79:93:d6:52:7e:0f:ab:13:8b:98:c9:
         08:c1:c0:28:07:b6:38:89:97:6d:50:52:d9:8e:a5:6e:6c:31:
         6f:9d:43:8f:7d:e8:8c:1a:65:73:ab:ae:bb:f7:a4:9b:3d:53:
         79:95:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:51 2026 by rpki-client