Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File:                     6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier:          1Zn2i65vQya22PF/qy6z4tsoOx5RZ8lpCDZ2RPhsaCE=
Subject key identifier:   C9:7A:97:58:1A:1F:B3:5C:79:98:0A:02:15:D4:DF:9D:D0:65:3B:6E
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer:       /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial:       019D2884796409282296DF44B827C591B41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number:          0C6F
Signing time:             Thu 26 Mar 2026 05:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:03 +0000
Files and hashes:         1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: pypwFewPL70NceS2PmG8WNbb74u3i6OaNw44hidLBrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:79:64:09:28:22:96:df:44:b8:27:c5:91:b4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
        Validity
            Not Before: Mar 26 05:01:03 2026 GMT
            Not After : Mar 27 05:01:03 2026 GMT
        Subject: CN=c97a97581a1fb35c79980a0215d4df9dd0653b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:fe:ae:7a:01:4a:16:48:35:06:8a:c5:f0:
                    f2:c4:17:05:17:67:ed:a0:dd:6e:a6:7c:ac:b3:10:
                    61:77:04:30:aa:ad:ca:ad:bf:86:a1:57:45:d5:59:
                    92:58:d1:f0:14:9e:f5:8c:f7:49:c2:79:8c:aa:b8:
                    83:d8:20:c2:ff:63:3e:fb:f7:23:f7:bb:c9:d8:fa:
                    5b:b8:cc:2f:07:cd:57:a5:17:65:a8:d1:3b:58:ff:
                    4c:89:d8:cf:cf:b6:9f:d8:dd:a0:aa:ee:c6:02:f5:
                    fa:0d:f1:d8:10:ff:71:da:8f:a5:b4:49:88:00:19:
                    ad:fc:5c:47:5f:51:42:b9:c1:a1:c7:31:d8:49:ef:
                    2e:b0:f4:42:e8:46:87:3e:9c:83:f2:57:2f:94:55:
                    46:ac:08:9c:0c:a1:52:84:c4:69:47:04:c0:11:58:
                    69:9b:a6:f8:3a:89:5e:6d:e8:e0:fb:95:0e:a3:38:
                    37:1a:de:59:a2:a1:f5:86:33:4b:4f:b1:03:c5:ed:
                    1a:f2:31:74:ad:c1:56:5b:5b:75:83:1a:a0:df:05:
                    b0:0e:50:d3:5f:f3:ef:ca:f4:c6:58:c1:d4:d2:b2:
                    7d:98:bd:54:98:09:25:74:66:bf:8b:04:55:44:65:
                    0c:f0:95:75:94:a6:f5:f4:9b:7a:9a:b9:a1:5d:64:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:97:58:1A:1F:B3:5C:79:98:0A:02:15:D4:DF:9D:D0:65:3B:6E
            X509v3 Authority Key Identifier:
                keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9d:70:e8:56:c0:fe:25:48:87:5a:44:54:a2:a0:b7:10:76:
         b3:a4:d7:d5:64:93:10:8e:a5:99:18:df:66:69:f0:a6:a5:42:
         d6:4c:4a:85:3a:88:c3:2b:1f:d8:b9:85:dd:64:4f:fe:65:39:
         fd:bb:35:4d:3a:fe:01:9d:62:23:c3:b9:dd:2b:9e:43:61:a9:
         e9:f5:dd:64:cb:7b:3e:34:53:e8:c1:5f:63:53:53:22:0c:a7:
         2f:d1:12:66:54:0e:15:49:d7:8b:23:65:66:d3:4c:2f:cf:7e:
         cd:f8:50:79:24:bf:61:37:ec:16:81:a3:98:62:ea:4d:ab:76:
         2a:01:29:38:81:6c:b3:46:de:3a:77:39:59:e9:16:80:c3:7e:
         80:26:b7:ba:c9:7d:b5:6e:d8:fe:02:a8:7d:cd:3e:cc:b3:59:
         a3:f0:f6:f3:a7:23:01:b5:66:b7:a6:a3:b0:b0:a7:5a:ef:d1:
         a3:cf:42:ca:f2:5e:6e:40:84:ad:62:39:d1:7a:30:22:d8:02:
         0c:5c:76:a5:9a:e2:1a:82:29:51:a6:84:59:1e:f4:f3:c4:d6:
         ee:13:88:10:c9:10:c5:19:a4:83:74:3e:e8:8c:bf:84:80:14:
         f0:0f:78:6e:a8:cd:1f:c9:67:72:01:ad:01:96:7f:b4:ce:7d:
         d2:1a:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:53 2026 by rpki-client