Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
File:                     dg6-87rwwTdAhVCVOQhSzkQlzkw.mft (raw, json)
Hash identifier:          sUIg9Z/FxQGXkCOsq3uoxLGl//gI0zbCnObCH3wyvxI=
Subject key identifier:   E1:D2:00:EF:E1:4F:F8:81:3C:51:EE:3B:14:61:2C:42:98:B4:70:0B
Authority key identifier: 76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
Certificate issuer:       /CN=760ebef3baf0c13740855095390852ce4425ce4c
Certificate serial:       019D273AA371D4CE1D370248443BD708029C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
Manifest number:          020D
Signing time:             Wed 25 Mar 2026 23:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:47 +0000
Files and hashes:         1: dg6-87rwwTdAhVCVOQhSzkQlzkw.crl (hash: kPRFmzNFMnwaJn9FEx7mv0Ue1uSRGMrmB3O74Y7Yl78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a3:71:d4:ce:1d:37:02:48:44:3b:d7:08:02:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760ebef3baf0c13740855095390852ce4425ce4c
        Validity
            Not Before: Mar 25 23:00:47 2026 GMT
            Not After : Mar 26 23:00:47 2026 GMT
        Subject: CN=e1d200efe14ff8813c51ee3b14612c4298b4700b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:7a:c7:58:bb:9f:c3:c7:23:e6:4c:4b:42:
                    d9:b5:96:87:44:9d:83:ad:f6:90:9f:7e:35:13:62:
                    f9:94:c1:40:9f:81:b4:91:e9:aa:32:1c:40:de:fc:
                    c1:e4:9c:b1:fe:dc:1a:f5:28:5b:b1:73:26:24:6c:
                    16:83:83:11:d9:15:78:9e:26:6a:d5:9d:b5:d7:1d:
                    86:f1:2f:0f:ca:a0:4a:2b:5b:ba:2c:00:1e:c1:e0:
                    17:8a:41:ae:36:30:81:25:3d:df:44:e8:38:51:f6:
                    31:04:97:80:be:6b:7f:2f:70:c7:1b:ae:5b:5b:41:
                    af:19:23:09:fb:73:5b:6c:35:67:e8:37:f7:78:70:
                    9a:c3:5e:f2:56:97:90:bd:30:d7:0b:88:53:fa:44:
                    01:ad:dc:03:e2:79:e1:58:d5:8b:0c:da:6e:29:94:
                    9d:e2:1c:45:dc:0c:fb:ea:d9:c7:c5:19:e6:4e:01:
                    a6:45:08:a9:c8:8a:f4:5d:84:94:3d:c4:b8:17:73:
                    6b:73:cc:99:d1:14:37:23:d7:2a:aa:9a:62:02:d6:
                    31:3f:f1:27:20:e3:48:1d:e7:5d:8a:a9:d2:bb:6d:
                    be:ac:38:ab:27:7f:74:a1:ef:29:ac:7a:9c:5a:4d:
                    af:4d:bf:ef:58:e8:28:9e:b1:0a:cd:32:59:c2:8b:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:00:EF:E1:4F:F8:81:3C:51:EE:3B:14:61:2C:42:98:B4:70:0B
            X509v3 Authority Key Identifier:
                keyid:76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:53:cc:67:40:d2:17:4c:67:61:49:e6:cd:1f:3d:b9:85:
         24:ea:1d:0a:cd:0a:c9:0f:51:51:84:c4:25:ef:64:ac:4e:9f:
         a8:20:34:32:b6:57:77:2a:36:42:5f:24:7a:a7:2c:67:6d:9d:
         18:de:84:2f:42:d4:04:22:c4:53:b5:9c:9f:4d:29:88:a7:f5:
         41:66:c8:89:68:ba:19:66:67:71:2e:d0:1a:9c:64:5a:58:3e:
         42:2e:ff:4a:b5:09:45:93:7e:e7:2c:aa:3a:3e:b8:77:09:29:
         c0:34:b9:ed:1d:fd:87:e5:43:25:9e:85:ea:71:be:77:c5:a7:
         42:e9:db:b9:de:c9:bf:28:d8:59:28:8a:31:b6:78:d7:d9:a0:
         98:42:6d:c7:76:b8:81:f0:78:d5:a9:a7:18:c0:12:ab:f5:6d:
         27:38:a5:6f:e5:38:33:1d:9c:a0:b6:45:9a:b4:d3:33:d6:99:
         48:5d:a9:34:aa:41:7e:03:71:3c:97:7b:17:71:b7:b9:4a:d1:
         c0:eb:bc:d5:ee:57:71:db:1f:88:02:bd:38:a1:ac:7e:65:83:
         7c:9c:eb:34:78:da:05:e0:8a:36:7b:b3:24:88:46:1d:6a:63:
         2f:37:6e:d1:82:d4:fd:01:2e:66:73:ea:18:04:08:3f:de:cc:
         f5:c4:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:32 2026 by rpki-client