Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File:                     C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier:          0M61ksoiOLz6V4m67pqROUMsBISaPRmHSlrGY87sl4U=
Subject key identifier:   39:B8:67:C0:B6:FA:58:61:8A:D6:39:13:40:05:71:4F:C7:8A:92:F8
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer:       /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial:       019D28F2C529A56EF32911EAE46B27C87F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number:          0741
Signing time:             Thu 26 Mar 2026 07:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:31 +0000
Files and hashes:         1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: 3g9bZfSiS0BoMGIJDhN8td0wUXQAfqX90q47rEgDi24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:c5:29:a5:6e:f3:29:11:ea:e4:6b:27:c8:7f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
        Validity
            Not Before: Mar 26 07:01:31 2026 GMT
            Not After : Mar 27 07:01:31 2026 GMT
        Subject: CN=39b867c0b6fa58618ad639134005714fc78a92f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:44:d3:bf:04:12:46:1c:51:72:26:7c:d2:
                    c1:5c:6a:4d:0a:76:3a:9e:64:60:20:34:f6:7c:fb:
                    4b:77:35:87:a9:bd:36:00:b5:1a:41:e4:ec:54:07:
                    9c:a3:6e:30:b6:53:e9:df:78:f0:02:9e:a9:4e:40:
                    37:e7:67:d1:de:1e:1b:20:11:cb:8c:9c:4f:ce:cd:
                    13:e9:3b:18:b5:b7:01:8e:a0:95:25:a7:ec:6f:8d:
                    6c:73:e8:7d:67:55:2b:a8:26:38:71:29:e6:a9:b3:
                    c1:59:ef:ac:a0:9e:8e:79:2a:26:a3:14:eb:55:76:
                    42:60:7a:1d:38:9b:8c:2c:68:b8:d0:ca:61:d6:29:
                    1d:f8:70:b3:23:2f:df:70:b2:ef:70:be:20:45:78:
                    4f:6f:70:c1:4a:57:d2:0b:5f:7c:01:e0:3f:77:8a:
                    93:4c:f4:0c:5a:26:3a:c9:ec:0a:3d:ca:57:ae:d8:
                    8f:3f:c1:5c:d8:39:83:90:bc:de:e3:a6:51:12:d5:
                    c9:05:55:82:e1:91:5d:86:d2:f0:fa:0a:e0:d9:c4:
                    32:64:ca:82:84:fd:09:ee:dd:38:09:7b:45:63:4d:
                    66:55:51:42:08:e6:ea:e7:b5:20:4e:34:17:8c:ca:
                    7b:2e:67:b1:e3:21:85:b6:fb:9c:09:a5:e3:e7:8c:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:67:C0:B6:FA:58:61:8A:D6:39:13:40:05:71:4F:C7:8A:92:F8
            X509v3 Authority Key Identifier:
                keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:21:9a:0c:b1:3e:20:2f:36:69:de:3c:68:e7:3d:77:69:
         90:b2:67:f3:1b:24:3e:30:9a:fd:22:51:82:a4:68:cf:11:b1:
         3a:9a:a5:6b:4e:51:59:b3:45:8b:79:62:ff:bb:c0:08:bd:18:
         9c:47:63:66:0a:da:7d:ef:de:89:7b:50:0e:76:0e:33:31:bd:
         27:5a:76:6b:a4:3b:bd:41:e0:95:b1:bb:d7:91:61:a2:a6:72:
         ca:da:c1:38:40:2f:5c:02:ea:19:d8:b6:d9:0e:79:a6:e0:94:
         f7:25:9a:77:0f:dc:d4:dc:0d:b7:f1:b2:61:c1:d6:9b:0f:9c:
         68:94:87:7c:c1:05:f5:93:c8:02:cd:93:c0:e0:1f:05:21:8f:
         f1:4e:06:a6:b2:89:57:c2:68:b4:61:ef:f1:38:80:84:40:1e:
         f4:de:e4:e0:59:2f:3e:3d:df:7a:48:6f:1e:08:bd:3a:09:db:
         a3:a3:f0:d9:16:9b:f2:af:da:f0:55:ad:54:14:cf:8b:86:9c:
         ae:c3:86:62:a2:b7:2f:e0:a1:ed:33:a9:cf:aa:1f:3d:0e:db:
         bf:ff:82:82:27:d0:ab:d2:e1:68:5c:85:24:0b:2a:b9:07:12:
         1b:dc:4a:b3:b0:bc:c3:84:e4:d3:ee:cf:75:bd:9d:bc:5a:50:
         d0:9f:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:55 2026 by rpki-client