Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File:                     a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier:          8zDctTWaW4VCr0HbXhf7mocf2Wt+kQWyU1FSRv6fgpY=
Subject key identifier:   3A:C0:95:60:A4:C9:F3:C3:A3:42:4F:85:E9:94:09:3F:4A:99:87:9F
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer:       /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial:       019D284D89AF9521251309F17F04C6F3EA8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 04:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:03 +0000
Files and hashes:         1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: GrkMrMAUvrYFxNjOM+Oe4W7GCIkAtoaTYbGuA0nVID8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:89:af:95:21:25:13:09:f1:7f:04:c6:f3:ea:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
        Validity
            Not Before: Mar 26 04:01:03 2026 GMT
            Not After : Mar 27 04:01:03 2026 GMT
        Subject: CN=3ac09560a4c9f3c3a3424f85e994093f4a99879f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:c8:62:b5:35:3f:d1:88:ca:86:dd:40:e2:
                    e8:46:51:eb:4e:7a:90:e7:1a:44:81:50:cb:fa:10:
                    76:aa:9d:b7:7a:e8:28:8f:3f:f2:b8:6c:47:26:18:
                    2c:f0:d2:d0:f4:c0:a2:a2:40:7e:85:e0:01:4b:5c:
                    eb:d7:c6:16:8c:f9:42:8b:82:05:66:91:d6:d0:ca:
                    92:9a:6e:31:cd:e9:79:1a:eb:4b:f7:97:d1:58:84:
                    d3:da:d0:4d:63:2f:1d:ee:8b:c6:29:f0:73:05:cc:
                    b4:16:e0:23:c0:8b:1b:1a:1b:1a:7b:5f:c7:7c:31:
                    d7:7c:f0:7e:ac:1f:93:a3:18:6e:52:89:c0:0c:a2:
                    c2:f2:9a:de:31:b6:95:3f:e5:2f:7e:99:98:12:cc:
                    78:33:a8:5c:f0:33:48:58:fe:b7:48:ca:19:f7:1a:
                    b4:51:0f:16:ac:ba:fa:23:a4:ea:bf:4e:51:47:6a:
                    03:82:e3:90:bb:42:fd:c7:8d:78:ee:c9:c5:fe:f2:
                    70:fa:eb:d7:05:9b:06:ab:79:fd:f7:58:a1:41:5a:
                    af:89:46:5c:32:ac:71:c2:b2:41:85:bc:fe:06:1b:
                    99:de:bd:d2:a3:88:5e:ed:e0:1a:48:10:7d:fa:c0:
                    0e:e9:70:99:44:3d:ae:f5:42:48:0f:93:37:b4:a0:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C0:95:60:A4:C9:F3:C3:A3:42:4F:85:E9:94:09:3F:4A:99:87:9F
            X509v3 Authority Key Identifier:
                keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:d3:d3:d4:68:41:81:a4:28:72:ae:23:61:5a:b5:8f:02:ab:
         5a:0a:22:fb:c9:8e:a7:5c:ac:f6:5d:54:b9:bb:62:7a:45:dc:
         ac:b1:9a:a8:2e:fc:1a:37:a2:9f:9c:69:24:a4:4b:45:56:cc:
         92:bf:dc:ad:52:b0:7e:0f:c4:29:f1:aa:d7:c5:12:69:96:00:
         7a:95:0c:28:fc:1c:16:25:e4:f2:97:c5:19:b1:bd:09:66:25:
         26:93:72:51:de:41:cf:47:27:c7:46:86:14:d7:62:3b:08:31:
         55:f9:59:32:05:f1:17:86:4e:91:62:21:83:55:01:b9:a5:39:
         31:55:10:38:09:f9:83:09:98:1c:88:05:89:bd:d0:58:42:4a:
         4d:f9:59:32:c8:49:f8:d7:e6:bb:ea:68:4d:4b:68:60:ed:1c:
         c2:6b:fd:31:b5:03:7f:8e:9e:38:0b:7a:80:b5:f3:56:c2:f6:
         68:77:36:e6:01:3e:24:69:c2:1c:7b:67:c2:9b:e5:4f:2b:95:
         95:dc:18:80:50:38:3a:62:38:40:e5:20:77:3b:62:7e:1f:61:
         ba:72:0b:27:f9:a8:f7:f2:59:2a:a5:fc:71:cf:a3:96:24:be:
         b2:88:17:49:3b:bd:54:6a:af:72:4c:5a:10:d4:0d:91:fc:96:
         af:14:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:09 2026 by rpki-client