Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          yZtNn7qi9LTGAyD83Hc7vS6WAt+2y5G0HbAQ4TWD3TA=
Subject key identifier:   D6:F0:E3:7F:B5:33:8E:85:E9:D5:46:EF:23:1E:3C:94:F5:5A:A4:7B
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       019D27A92DDDAFEC0AAF8C496DE120AD6E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          085E
Signing time:             Thu 26 Mar 2026 01:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:31 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: 2U0Lao1Zjhe/kNDDpVMP20Mg2doCJP/nPVHjTua9Ud4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:2d:dd:af:ec:0a:af:8c:49:6d:e1:20:ad:6e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Mar 26 01:01:31 2026 GMT
            Not After : Mar 27 01:01:31 2026 GMT
        Subject: CN=d6f0e37fb5338e85e9d546ef231e3c94f55aa47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:33:ca:d3:60:46:68:d9:05:e7:a4:4c:c9:
                    28:65:80:ed:c7:1b:fc:49:b5:cb:58:ca:0f:17:3f:
                    ad:68:21:05:eb:f1:9e:43:8e:d2:ca:7a:ec:3c:d9:
                    72:eb:58:97:93:f2:67:4b:57:af:b2:ad:2b:d8:76:
                    6a:f7:5c:d2:a5:ef:d3:16:57:73:60:53:17:18:19:
                    51:8e:e8:c3:6c:96:d9:ed:75:8f:9d:f2:34:bf:96:
                    65:8d:e5:93:4b:8e:f0:f0:8e:5e:30:11:cd:6a:08:
                    60:be:61:be:0b:90:9b:b0:98:65:22:fd:43:94:bf:
                    9f:d2:34:ef:1c:df:37:18:d5:af:1e:ed:25:51:8a:
                    25:8c:a8:6f:9a:7c:1c:ea:33:f5:59:f6:6e:e9:6f:
                    99:b3:03:97:a3:f2:70:53:79:1e:fc:4e:71:36:bb:
                    fa:4a:ff:73:e6:a5:a5:a7:40:01:cf:c4:91:fb:57:
                    23:6a:fb:b5:ba:26:e3:b3:0d:22:2c:89:32:58:4a:
                    09:05:ad:fb:81:b3:e6:67:10:22:bf:6a:93:71:60:
                    d7:d2:83:10:33:36:49:fe:53:62:4b:f8:b9:b4:56:
                    9e:e7:63:53:62:ee:ab:99:7f:dc:52:da:3a:4a:43:
                    33:93:87:1c:5e:48:7e:84:cd:fd:53:05:0d:4c:04:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:E3:7F:B5:33:8E:85:E9:D5:46:EF:23:1E:3C:94:F5:5A:A4:7B
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:48:6a:7a:a4:3e:70:34:89:f2:3e:2b:6a:28:a3:a9:f2:
         aa:41:8a:34:10:c1:80:4e:7a:d4:18:ec:ac:a6:77:40:4c:43:
         d4:9d:38:1e:b7:73:61:7b:4d:12:5b:7b:59:c7:0c:97:9a:b7:
         00:f2:56:a6:2f:c6:b7:fe:2c:3e:11:1a:39:be:64:0e:82:3a:
         f1:b7:95:43:75:9b:54:22:94:48:27:73:fb:80:5c:64:af:43:
         49:1f:f9:0f:79:fd:09:31:7c:51:ee:bf:c5:0a:6e:d6:4e:ac:
         a2:21:56:b2:11:8f:71:e9:c9:0f:3f:1f:37:a7:03:30:12:76:
         26:e2:35:57:4c:10:6f:a2:d5:19:4f:d7:70:32:af:e1:9c:44:
         dc:ae:63:af:f6:ac:76:47:74:fa:eb:be:95:aa:6b:f5:4d:1d:
         f0:24:f9:c9:5d:c7:09:54:b1:2a:bf:39:27:93:3d:e4:97:a3:
         d1:c4:74:40:94:c3:0c:93:b8:8f:84:8c:eb:31:6c:9b:54:32:
         9c:6e:11:53:c0:c2:a1:04:ee:80:50:7f:f5:82:eb:f9:72:53:
         7c:3c:ca:3d:2e:88:ab:80:9c:7f:73:7c:3d:0d:db:6d:26:10:
         c3:a8:d2:06:68:12:f8:df:ed:6a:cb:50:ab:b0:f1:61:f7:36:
         3c:cd:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:11 2026 by rpki-client