Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File:                     Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier:          ira4mBlixXSMmtD50V7zowzAwV6yV96Waoffl2bDshM=
Subject key identifier:   C9:E8:3F:57:D7:B1:7C:16:67:B4:32:F1:E0:9D:7E:BE:CF:E6:95:3F
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer:       /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial:       019D2703C2A4EB405DE42E72E89E26778111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number:          10F6
Signing time:             Wed 25 Mar 2026 22:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:51 +0000
Files and hashes:         1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: Syak/sRDzZihR1uWmNbkxlSjoeTfnFGLXcjyXv74xVI=)
                          2: michsV01Z00JBjY24wayKz4Cjf8.roa (hash: e303uFjUpDcLP+u96UOiCW3TEo59fwyiJHUokZB7KIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c2:a4:eb:40:5d:e4:2e:72:e8:9e:26:77:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
        Validity
            Not Before: Mar 25 22:00:51 2026 GMT
            Not After : Mar 26 22:00:51 2026 GMT
        Subject: CN=c9e83f57d7b17c1667b432f1e09d7ebecfe6953f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:ce:e9:14:f1:9c:22:46:b8:76:6f:ee:bb:
                    de:8b:da:5c:08:75:21:c2:0f:be:17:87:2d:6b:e9:
                    6c:97:77:b6:eb:65:67:61:99:da:aa:ee:b5:94:38:
                    af:29:4c:1f:3a:51:9e:8c:e7:b0:48:bc:62:66:d5:
                    4e:6d:b8:d0:43:0f:de:7e:33:41:d0:7d:c6:96:64:
                    37:dd:3b:d7:eb:ee:34:08:27:72:a0:60:8c:0b:69:
                    a8:7e:df:08:4b:6b:be:9b:5f:bf:6c:66:77:cb:38:
                    e6:c6:74:8d:9f:b3:10:31:84:51:5b:36:06:3b:28:
                    8c:7c:37:05:ee:af:ae:84:cd:42:d9:ee:c9:6b:3d:
                    4a:7e:06:ff:1a:e6:0f:ee:91:62:55:62:67:8c:01:
                    d0:41:5b:25:57:f6:22:4c:09:3a:2c:91:0a:06:dc:
                    52:25:8f:71:75:d4:65:5e:d4:e8:74:f1:48:c3:aa:
                    b9:6b:82:25:c6:be:f3:47:07:f6:f2:f2:2a:cb:5b:
                    c2:86:31:70:08:03:9c:61:25:a2:58:73:cb:74:eb:
                    78:0a:5a:3b:ae:71:95:40:cc:13:44:b3:21:5c:64:
                    96:e0:0d:cc:3d:ff:20:6b:55:8b:9e:21:24:08:43:
                    66:37:b0:5e:ec:37:42:55:1b:f5:da:cd:b7:07:09:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:3F:57:D7:B1:7C:16:67:B4:32:F1:E0:9D:7E:BE:CF:E6:95:3F
            X509v3 Authority Key Identifier:
                keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:65:fb:12:bb:bb:cf:5f:6e:be:1e:6e:47:bf:c5:e1:6a:
         95:56:64:f9:36:4f:f9:0c:43:59:8f:e7:d7:1d:64:04:a0:4a:
         5f:80:9b:b7:38:93:c0:68:c9:b5:a0:0a:89:b9:57:09:09:ac:
         c8:4b:03:fc:cf:2e:7a:fc:a3:7d:99:a4:b9:0b:b1:68:a3:83:
         b4:a9:a4:c0:39:01:2f:7c:a2:1d:da:a7:95:32:c4:87:89:ae:
         b7:51:9e:2a:55:16:34:d6:fb:07:87:da:bf:b6:51:2c:60:ad:
         c6:dc:1f:ba:c3:0c:4d:ca:2d:7a:e9:d9:fb:ef:17:63:c3:ad:
         c7:10:eb:db:70:31:87:b2:16:d6:7f:bb:f2:b5:a5:59:ea:0a:
         5c:2c:93:9a:cb:91:6e:26:49:6c:b6:34:42:fd:7d:83:18:17:
         af:83:a2:94:8e:c1:41:d0:99:c7:eb:66:8e:e5:5d:a6:40:cb:
         ea:4a:fe:3b:b8:6b:99:00:e6:00:a9:21:b8:76:f0:02:d2:82:
         d1:d4:8f:35:be:6a:ab:62:11:93:f9:7a:3e:db:46:86:06:86:
         64:c2:56:b6:8b:7c:f7:0f:d1:13:0c:dc:f3:f1:bf:f3:87:a9:
         15:69:5e:ff:38:f9:aa:99:8e:fb:b6:0f:4b:35:74:0b:57:90:
         40:3b:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:00 2026 by rpki-client