Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
File:                     B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json)
Hash identifier:          xk956+xKiBdyRHDve/UxzJuNSys33q7Ty2RZjHSsg0w=
Subject key identifier:   D1:FF:E0:01:76:D5:EB:E1:2A:FC:45:43:39:10:A5:7D:67:29:D3:2E
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Certificate issuer:       /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial:       019D25F193800761EDED97591748D9F7DFEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 17:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:21 +0000
Files and hashes:         1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: p00vqU8b7MXqyx1Is1m6cyuo6UWX/xbva38JadDh81I=)
                          2: z0RxzKUmGvdiXVqo5YVLQIA15ao.roa (hash: +26ezE/PG8fzSDohvHnBiXyXfPXqiwQfhlM6I+79ozE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:93:80:07:61:ed:ed:97:59:17:48:d9:f7:df:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
        Validity
            Not Before: Mar 25 17:01:21 2026 GMT
            Not After : Mar 26 17:01:21 2026 GMT
        Subject: CN=d1ffe00176d5ebe12afc45433910a57d6729d32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:99:bb:80:92:3b:e4:77:c9:9c:e8:72:08:
                    9b:5c:12:0a:75:4f:7b:8d:47:ae:24:69:e8:d7:af:
                    4d:53:38:f5:c8:07:a9:a5:d1:aa:a7:e6:5f:2b:12:
                    3c:04:6a:08:f9:40:9e:e8:fd:d8:58:95:47:4a:4c:
                    cf:43:eb:f4:90:d6:20:c4:b7:5b:61:8f:db:c1:2a:
                    55:2f:6b:39:54:15:cd:14:ac:f6:73:7b:47:c9:da:
                    4f:4b:77:b6:d1:ac:0b:d9:67:4d:1e:46:87:c2:70:
                    fc:29:73:f8:8c:24:80:8c:0e:2d:36:0a:66:a1:a9:
                    68:39:36:85:b3:83:be:84:22:6f:b4:2a:bd:66:b2:
                    02:d6:3e:29:68:4f:0f:b1:f0:09:02:c7:9a:bb:b5:
                    13:72:80:81:19:6c:cd:e0:65:8d:ed:2c:ab:d6:22:
                    c7:62:b3:33:c5:35:fe:da:99:76:d3:38:9b:a4:0f:
                    45:b9:22:3a:22:ab:c9:62:53:20:d3:71:37:39:7f:
                    c9:3d:58:14:b7:ef:82:ba:26:e6:21:96:59:92:9e:
                    06:c0:63:36:8f:aa:70:ca:2a:56:4c:46:95:da:ea:
                    81:0b:57:c5:47:81:af:ee:54:42:a6:90:34:25:cb:
                    1f:73:b0:d9:ae:e8:8f:af:a2:89:da:74:6d:9c:8a:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:E0:01:76:D5:EB:E1:2A:FC:45:43:39:10:A5:7D:67:29:D3:2E
            X509v3 Authority Key Identifier:
                keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:48:35:54:6a:d5:ce:e5:fb:33:24:2c:57:f5:eb:8d:55:ba:
         c0:c8:c6:df:58:2e:8a:cc:24:fc:c3:79:db:f4:f8:ed:c3:ab:
         e5:8d:2d:16:77:b2:34:16:65:e7:57:f4:34:0f:ed:d7:c2:89:
         63:68:39:ac:91:a7:7e:84:9f:48:0b:c8:dc:f8:18:ff:a3:cf:
         ab:8d:99:95:55:b4:67:8f:b8:77:c2:d1:46:e7:bc:e4:4b:0c:
         00:ae:f0:9d:6e:0f:82:3c:b9:5e:2b:85:85:e2:34:1c:c7:64:
         fc:ae:5b:c0:97:f4:ac:36:c8:cd:bb:93:b1:a9:d6:cc:05:53:
         7d:c1:af:7b:bd:99:8c:ac:a1:8c:06:2c:e0:42:be:9c:e5:40:
         04:ae:22:af:ec:67:7b:eb:93:17:de:24:ce:52:17:2e:b1:99:
         ca:61:35:b8:c7:9e:96:06:96:60:aa:c6:c3:92:56:6e:42:ae:
         7f:77:a0:80:07:83:1f:78:43:84:01:1f:77:f4:37:c2:f6:98:
         72:3a:e1:14:bb:c4:99:3f:96:ad:f6:68:89:e6:f6:ed:c7:ea:
         c1:55:b7:76:7f:69:43:7e:b6:1f:71:cc:d8:6b:9e:f8:15:0f:
         3f:4a:b3:f3:13:4d:f1:4f:83:e2:01:cf:1c:84:56:29:dd:06:
         b5:e0:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:01 2026 by rpki-client