Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
File:                     vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft (raw, json)
Hash identifier:          9OTrxYPxHjtWc3T5QOhb4ycp8HsA27+fhXPgfpMj7Xw=
Subject key identifier:   3C:6E:DB:86:FB:60:BA:19:C6:CA:51:71:49:E2:73:03:FC:09:0A:2A
Authority key identifier: BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
Certificate issuer:       /CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
Certificate serial:       019D27E032BCEF5846489C52A5E1A6238D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
Manifest number:          0210
Signing time:             Thu 26 Mar 2026 02:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:37 +0000
Files and hashes:         1: vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl (hash: UvisApeNppd92iLXCp3gQQ4ojnWVEDmWou8yHgzwpDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:32:bc:ef:58:46:48:9c:52:a5:e1:a6:23:8d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
        Validity
            Not Before: Mar 26 02:01:37 2026 GMT
            Not After : Mar 27 02:01:37 2026 GMT
        Subject: CN=3c6edb86fb60ba19c6ca517149e27303fc090a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:e9:b7:c6:31:25:5b:b2:ca:4d:01:58:83:
                    ce:e5:da:6f:06:43:6a:34:a3:0e:90:90:42:bb:9b:
                    e6:7d:ab:11:6c:22:98:26:db:b9:af:af:50:6c:f6:
                    60:6f:91:c0:0c:8f:b2:28:f8:d3:9e:ee:d7:d8:0e:
                    a6:03:f7:68:a6:d5:fe:4e:2e:e5:1d:2a:0c:b5:46:
                    86:dd:af:c0:7d:6e:4c:32:5f:a9:c2:4a:0f:38:96:
                    40:8d:ce:94:59:5d:7e:eb:b1:83:3a:b5:82:b9:38:
                    57:cf:86:ee:20:1c:5a:f7:eb:76:06:eb:08:03:2b:
                    81:33:84:a5:3c:ac:bb:01:63:20:95:e7:77:0e:6e:
                    ef:a1:0f:7e:1e:d1:92:d1:92:a0:34:ac:8d:79:d3:
                    f2:ac:34:0f:9e:a2:f4:49:de:be:18:ed:0b:2e:aa:
                    a7:75:1c:9c:6e:17:5c:b5:a9:90:3a:00:6a:27:a3:
                    f5:58:99:6e:9d:90:1a:3d:1f:b1:cd:d4:ae:57:6f:
                    82:3a:77:b5:ea:e1:2f:2a:ae:4e:2a:26:6a:02:cc:
                    c2:3f:24:d6:d2:59:42:8a:26:38:fc:88:9a:d8:20:
                    bc:69:51:cb:6f:c4:74:81:0c:5b:3d:5e:23:52:e0:
                    05:db:fa:92:91:b0:4f:5a:e1:05:de:39:06:a4:0d:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6E:DB:86:FB:60:BA:19:C6:CA:51:71:49:E2:73:03:FC:09:0A:2A
            X509v3 Authority Key Identifier:
                keyid:BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:83:6c:06:f4:23:c5:4d:c8:1b:fb:d0:e4:b2:0a:37:7e:
         3d:a6:f5:7f:ca:47:74:1e:73:d6:60:a6:65:36:cb:eb:d4:0c:
         54:6f:17:93:7c:a7:d9:7d:90:22:e6:0d:a7:20:35:6d:00:df:
         fc:8c:19:05:6e:70:39:c7:65:d2:89:5d:20:4c:b7:06:50:57:
         c1:eb:c0:00:98:a5:7a:06:9e:1e:65:f3:3f:81:54:14:63:90:
         e8:dc:b1:a2:78:12:86:d7:99:4c:93:22:58:83:81:6d:94:ab:
         8f:7c:3e:0e:6d:57:2f:c3:ec:52:4d:b5:81:63:94:6b:1d:12:
         9a:f6:88:a6:fb:1e:e5:6f:99:58:66:91:e1:15:c4:62:e5:63:
         d9:b0:1a:95:42:c3:fc:7b:c1:2b:ec:09:ca:42:bf:18:fe:41:
         df:4b:90:47:de:ff:8b:25:c1:67:d8:f1:5f:26:63:48:3a:fb:
         65:ba:87:a5:22:6b:ec:db:aa:0d:be:b1:fe:6a:6d:4b:d9:6d:
         70:2d:30:9f:3c:fb:2b:0b:22:41:7a:97:46:da:2a:96:9e:14:
         2a:e4:ef:06:e0:8c:f4:8b:d0:58:ba:f9:c5:d3:4c:2a:39:3e:
         9f:7d:80:36:88:f5:40:8d:6d:c9:d4:5f:f5:f2:12:f4:a4:ed:
         4e:7c:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:45 2026 by rpki-client