Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File:                     6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier:          ozQ8ZBvyctNxnCgjVpcSOWoESOR4RGmG0/KFk5TcgQA=
Subject key identifier:   11:2D:E2:0E:28:2C:37:20:A9:B4:87:AF:C7:B1:17:7E:32:AC:8A:DB
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer:       /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial:       019D28F2E1C4568AE8FD934663E4B305B0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number:          08AE
Signing time:             Thu 26 Mar 2026 07:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:39 +0000
Files and hashes:         1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: HhPXn4N4dKDwH3N33a7kRF+esZ1787KTlUwofULYEYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:e1:c4:56:8a:e8:fd:93:46:63:e4:b3:05:b0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
        Validity
            Not Before: Mar 26 07:01:39 2026 GMT
            Not After : Mar 27 07:01:39 2026 GMT
        Subject: CN=112de20e282c3720a9b487afc7b1177e32ac8adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:50:dd:08:15:90:77:60:e7:7a:28:ca:12:
                    8c:3c:95:62:55:bf:24:86:f9:aa:c5:fc:d4:d6:c2:
                    07:02:52:c7:e2:46:28:eb:60:53:38:5b:9f:47:00:
                    b3:2b:e5:dd:3e:7b:42:7f:f9:5b:72:7b:a0:74:2f:
                    2a:8f:20:14:ca:a5:bf:58:f0:0d:78:88:81:9f:a7:
                    ee:c7:32:f8:54:76:b5:e1:7e:86:55:10:7b:c5:c6:
                    b9:ac:87:0f:2e:30:89:18:61:59:a2:08:ef:ce:dd:
                    b9:ee:86:44:f5:53:c9:f4:d7:2b:34:65:86:61:63:
                    ac:e5:f9:0d:2e:d0:ab:5d:4c:a8:32:a9:c5:e2:19:
                    d4:73:eb:7c:77:46:57:8f:47:53:97:e0:f9:ca:58:
                    de:c4:f1:03:3b:3a:69:6d:74:07:46:ea:03:bd:2b:
                    b6:da:2e:7f:63:0f:34:51:1a:8d:ab:48:2c:a4:d3:
                    f7:c8:14:4e:46:de:ab:38:07:3e:58:90:a6:1e:62:
                    16:fd:2d:3f:14:b6:27:81:94:36:3c:15:36:9e:d9:
                    b1:f4:bc:9b:f1:20:ca:6b:3a:2d:79:0d:7b:37:ba:
                    f8:8e:76:9a:c5:e4:64:3b:b2:99:c7:6f:cf:46:58:
                    06:11:5c:02:87:ec:6f:8e:93:e6:dd:5a:8a:6f:a1:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2D:E2:0E:28:2C:37:20:A9:B4:87:AF:C7:B1:17:7E:32:AC:8A:DB
            X509v3 Authority Key Identifier:
                keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:28:35:bb:42:d7:ad:4f:31:9d:09:6a:ab:82:5b:08:a6:a2:
         76:64:ba:af:65:d9:96:d5:27:e5:1d:58:30:6c:ba:d0:01:32:
         d4:46:88:80:ec:5a:f2:2f:f5:25:ad:12:4d:d7:d7:4c:c9:80:
         78:f9:35:a4:aa:05:19:00:2b:6e:04:67:94:39:5d:30:76:b3:
         ed:3a:f1:be:b6:7a:84:e8:63:15:73:4d:14:dd:90:0a:9a:e5:
         d5:72:ef:01:e7:16:27:68:f2:0d:c3:ea:61:12:85:cc:2d:fc:
         a3:61:a1:6a:05:bc:16:5b:32:82:a9:52:8f:14:fc:a7:63:78:
         18:b5:27:fa:7e:5b:e2:3f:8c:88:77:2c:f7:6e:39:ce:7b:fa:
         e4:91:d7:8b:c8:21:2a:b9:cc:49:e4:18:d5:8a:db:61:be:92:
         66:df:77:68:0c:23:4e:52:43:8e:11:cb:d2:ff:83:ec:f1:db:
         56:a5:d6:b0:f1:5b:de:9d:d7:f9:e8:e4:22:9a:34:72:d2:2f:
         9e:6a:5f:7f:31:6d:6e:18:f3:9d:58:d7:71:7e:ee:41:e1:32:
         85:c2:0d:98:26:d5:e8:3e:4c:d2:ed:69:a6:d4:95:d8:da:58:
         5e:5c:f4:34:45:95:d5:90:01:68:b5:c5:cb:16:5f:73:d8:d6:
         13:61:4d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8uHEVoro/ZNGY+SzBbD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTY4N2FmZDYyMWI1MmE5NzRjZDNhZjBiZThhMjVhNjcx
MTg2ZDIwHhcNMjYwMzI2MDcwMTM5WhcNMjYwMzI3MDcwMTM5WjAzMTEwLwYDVQQD
EygxMTJkZTIwZTI4MmMzNzIwYTliNDg3YWZjN2IxMTc3ZTMyYWM4YWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJZQ3QgVkHdg53ooyhKMPJViVb8k
hvmqxfzU1sIHAlLH4kYo62BTOFufRwCzK+XdPntCf/lbcnugdC8qjyAUyqW/WPAN
eIiBn6fuxzL4VHa14X6GVRB7xca5rIcPLjCJGGFZogjvzt257oZE9VPJ9NcrNGWG
YWOs5fkNLtCrXUyoMqnF4hnUc+t8d0ZXj0dTl+D5yljexPEDOzppbXQHRuoDvSu2
2i5/Yw80URqNq0gspNP3yBRORt6rOAc+WJCmHmIW/S0/FLYngZQ2PBU2ntmx9Lyb
8SDKazoteQ17N7r4jnaaxeRkO7KZx2/PRlgGEVwCh+xvjpPm3VqKb6EAkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEt4g4oLDcgqbSHr8exF34yrIrbMB8GA1UdIwQY
MBaAFOpWh6/WIbUql0zTrwvoolpnEYbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUt
YjIzODU2YTFhODAzLzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUtYjIzODU2YTFhODAz
LzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyg1u0LX
rU8xnQlqq4JbCKaidmS6r2XZltUn5R1YMGy60AEy1EaIgOxa8i/1Ja0STdfXTMmA
ePk1pKoFGQArbgRnlDldMHaz7TrxvrZ6hOhjFXNNFN2QCprl1XLvAecWJ2jyDcPq
YRKFzC38o2GhagW8FlsygqlSjxT8p2N4GLUn+n5b4j+MiHcs9245znv65JHXi8gh
KrnMSeQY1YrbYb6SZt93aAwjTlJDjhHL0v+D7PHbVqXWsPFb3p3X+ejkIpo0ctIv
nmpffzFtbhjznVjXcX7uQeEyhcINmCbV6D5M0u1pptSV2NpYXlz0NEWV1ZABaLXF
yxZfc9jWE2FNPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:31 2026 by rpki-client