Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File:                     g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier:          F0QOJ2VrKPfbrR/GAKAyYDZ+tapWp2hblRjRMI5d3ic=
Subject key identifier:   FF:7D:EC:BE:9C:C4:CF:F7:93:3F:96:1F:6D:1B:D4:AD:8F:C8:01:6C
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer:       /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial:       019D27042897B05888F283D335559040AC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number:          0638
Signing time:             Wed 25 Mar 2026 22:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:17 +0000
Files and hashes:         1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: d598m4799v8j4DsviBWVC/jvvRzezbi6LCOxZgqph3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:28:97:b0:58:88:f2:83:d3:35:55:90:40:ac:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
        Validity
            Not Before: Mar 25 22:01:17 2026 GMT
            Not After : Mar 26 22:01:17 2026 GMT
        Subject: CN=ff7decbe9cc4cff7933f961f6d1bd4ad8fc8016c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:f3:37:5f:6e:85:49:09:5b:53:11:41:c0:
                    f4:8e:df:dd:57:ba:8e:75:a1:2a:cd:dd:69:65:88:
                    39:e4:e3:0c:5d:b5:1a:f7:7e:5c:75:03:25:3f:e7:
                    1f:a5:47:98:0b:d9:6b:5e:c2:87:37:f1:cf:35:65:
                    09:40:89:20:f8:5a:50:83:58:97:79:34:fd:ab:f5:
                    b9:d0:7b:26:ad:7f:b1:2d:79:dd:e9:f1:31:b3:d6:
                    09:c3:02:6c:af:6c:fe:2d:57:41:51:32:7f:48:bb:
                    10:45:b2:82:ad:2d:be:7e:b0:76:e9:22:28:db:45:
                    88:ac:e9:49:7f:b5:4b:1f:a6:8e:4f:86:36:7a:26:
                    16:68:b6:a4:ff:e4:90:0b:c9:fa:22:54:9a:9e:f9:
                    56:8b:40:f4:df:1a:48:a4:da:4f:0e:58:a1:00:f3:
                    de:08:32:55:d0:4d:fd:d0:d5:3b:3f:06:3b:4f:4a:
                    7f:86:a3:ea:73:20:91:4b:2e:4a:25:53:3d:7a:95:
                    95:aa:5a:71:ef:4e:3a:43:1a:fb:01:47:2a:38:86:
                    61:e7:08:ab:be:f2:cb:81:1e:61:b6:1a:5a:54:a7:
                    2c:44:25:f9:62:65:9b:64:2d:d8:4c:60:e1:27:15:
                    ba:4c:1b:d9:0e:94:12:9f:92:2d:97:1e:03:ef:f8:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7D:EC:BE:9C:C4:CF:F7:93:3F:96:1F:6D:1B:D4:AD:8F:C8:01:6C
            X509v3 Authority Key Identifier:
                keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:6e:fe:81:a9:fb:be:96:0f:62:b6:67:e4:2a:2d:a9:0c:
         08:28:de:94:cd:32:a1:68:4e:cd:a0:dd:b3:c2:fa:e3:8d:13:
         05:db:55:33:cb:30:fd:1d:df:c2:1a:c5:9b:6d:31:63:6d:20:
         10:d9:be:6e:67:07:fb:f9:a3:d9:0f:0e:ae:60:ae:b1:0e:2d:
         2b:95:c9:8d:0b:1e:6b:5b:a6:8a:04:7c:fb:b1:ac:57:d1:22:
         ed:49:58:ce:41:ae:3d:ac:cb:7c:88:dd:b5:3e:40:43:a6:d2:
         81:02:80:b8:be:13:c4:de:95:50:63:d9:4a:bd:f4:89:85:82:
         63:26:ff:4f:56:ce:a1:1c:49:63:40:54:aa:a7:a6:68:15:13:
         42:ad:df:ec:50:ca:c3:37:ac:b3:35:f1:e0:a7:52:f0:08:26:
         14:9f:65:30:a9:71:e8:27:31:2b:70:ab:af:1a:95:56:9c:d7:
         04:58:c0:db:9f:b8:fc:e5:c6:7b:6b:fe:5e:91:23:db:b9:4d:
         75:dd:44:5a:95:09:45:a9:66:3b:d1:05:e3:7a:c3:da:3d:54:
         9f:fb:40:47:86:4e:4f:df:fe:0e:ef:cd:bc:cf:74:87:05:a3:
         ae:8d:f0:ea:39:97:3f:c5:3d:72:47:cb:3c:b3:66:d2:a2:80:
         bb:ef:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:57 2026 by rpki-client