Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c6660c-6efc-46bf-a99a-472f80cb5d96/1/wBNVxzmXU2QwjmpZqyZTdjIXhaY.mft
File:                     wBNVxzmXU2QwjmpZqyZTdjIXhaY.mft (raw, json)
Hash identifier:          t0kEAfWwxY3aEmy1lW79bZwT2CEO9Pw+t41O2EQccqQ=
Subject key identifier:   6E:E6:8D:DC:36:5B:5F:05:0B:0D:AE:D4:8D:1E:01:48:25:14:77:0A
Authority key identifier: C0:13:55:C7:39:97:53:64:30:8E:6A:59:AB:26:53:76:32:17:85:A6
Certificate issuer:       /CN=c01355c739975364308e6a59ab265376321785a6
Certificate serial:       019D28843C496451549D423BEC2E5BAB2DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBNVxzmXU2QwjmpZqyZTdjIXhaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c6660c-6efc-46bf-a99a-472f80cb5d96/1/wBNVxzmXU2QwjmpZqyZTdjIXhaY.mft
Manifest number:          A6
Signing time:             Thu 26 Mar 2026 05:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:47 +0000
Files and hashes:         1: wBNVxzmXU2QwjmpZqyZTdjIXhaY.crl (hash: +1z56aAtMFSoJWOOkS1viJxGVsUZngl+6dlo7+muSCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/c6660c-6efc-46bf-a99a-472f80cb5d96/1/wBNVxzmXU2QwjmpZqyZTdjIXhaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/c6660c-6efc-46bf-a99a-472f80cb5d96/1/wBNVxzmXU2QwjmpZqyZTdjIXhaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBNVxzmXU2QwjmpZqyZTdjIXhaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:3c:49:64:51:54:9d:42:3b:ec:2e:5b:ab:2d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01355c739975364308e6a59ab265376321785a6
        Validity
            Not Before: Mar 26 05:00:47 2026 GMT
            Not After : Mar 27 05:00:47 2026 GMT
        Subject: CN=6ee68ddc365b5f050b0daed48d1e01482514770a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:6f:1f:4d:5e:f3:b9:44:95:35:53:05:4b:
                    9e:50:12:3a:33:70:30:f3:3e:52:0c:f4:a5:93:ee:
                    b9:40:23:5a:ed:c4:b7:aa:99:d6:57:81:58:c6:8e:
                    46:58:78:0e:9a:5e:cf:6d:08:ba:26:4e:21:74:54:
                    af:29:a3:d8:fc:58:ac:68:85:a8:ba:2e:f4:5c:64:
                    f2:84:c3:6d:97:27:fa:14:db:6a:8f:17:fc:84:b0:
                    67:14:26:21:23:8e:c6:05:7f:5e:ce:5f:56:5c:97:
                    f7:b0:f9:f3:f5:63:0e:e3:50:6d:75:7e:cf:80:40:
                    3a:f6:a1:43:2c:78:5a:f2:09:9b:9b:b0:92:a4:d0:
                    a0:0b:6d:de:1e:d8:36:27:16:c9:89:2e:d6:12:6e:
                    c5:e7:4a:81:ca:97:d6:24:79:86:31:d2:6b:8b:1e:
                    ba:77:d6:f7:c5:11:24:74:15:f9:a0:ba:14:42:58:
                    e9:f2:bf:e7:32:c4:d8:c5:41:c3:3a:98:ae:fa:be:
                    68:f9:f9:e8:0f:30:95:c8:57:b8:54:58:2d:59:9e:
                    c1:c1:72:b0:2b:e8:ba:48:81:1e:5e:e3:01:c0:43:
                    2b:ee:0e:96:a8:8c:49:60:78:ac:a8:74:16:cc:da:
                    7e:fd:b0:fe:bf:98:06:e0:cb:2b:f7:56:ee:6e:8e:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:8D:DC:36:5B:5F:05:0B:0D:AE:D4:8D:1E:01:48:25:14:77:0A
            X509v3 Authority Key Identifier:
                keyid:C0:13:55:C7:39:97:53:64:30:8E:6A:59:AB:26:53:76:32:17:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBNVxzmXU2QwjmpZqyZTdjIXhaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c6660c-6efc-46bf-a99a-472f80cb5d96/1/wBNVxzmXU2QwjmpZqyZTdjIXhaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c6660c-6efc-46bf-a99a-472f80cb5d96/1/wBNVxzmXU2QwjmpZqyZTdjIXhaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:85:9b:d0:da:1d:f0:fc:8e:cd:a8:8a:ce:7f:67:3c:c1:9a:
         b9:c4:b7:64:ca:0f:bc:1b:01:ec:94:76:26:e4:b3:7d:a6:f6:
         1d:d9:ea:75:9d:78:9d:d8:c9:b8:2f:4c:9e:17:f0:42:09:bd:
         87:e2:c1:a4:c6:95:ee:ec:b3:78:17:41:75:3f:ff:f6:e6:79:
         f9:14:f2:f5:6e:52:14:25:e4:f6:1b:f3:f0:35:3d:d4:d6:08:
         4a:e0:81:72:2d:ca:8a:46:14:3f:f1:df:1d:f2:e9:0f:6a:27:
         c5:19:36:40:07:df:6d:9b:97:1b:5f:3b:2d:c3:69:08:9a:da:
         af:13:b2:b0:a6:4d:65:95:be:2b:97:85:12:f6:33:61:34:7b:
         56:22:6d:61:94:c9:9c:fd:27:ff:cd:7d:e3:2d:49:30:e7:aa:
         e2:28:14:3e:31:2e:5f:db:1d:5a:fd:de:21:19:53:2f:87:06:
         4f:ba:4d:ed:1b:4c:87:b6:85:ef:32:8f:aa:30:cc:7a:20:ea:
         6c:82:f8:7b:82:a4:74:26:f8:50:7e:66:00:23:f7:d4:b7:d3:
         fd:c2:2d:c5:b7:da:f3:ad:cc:26:29:8a:90:e2:9d:a3:3b:1d:
         0e:80:42:ee:8d:03:16:97:af:c2:3d:f6:75:ce:cf:35:d3:aa:
         33:93:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:46 2026 by rpki-client