Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
File:                     6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json)
Hash identifier:          E54rS2/NoG1Pe4/5/b52PKJVwFd/YQS2EGdubejjuQk=
Subject key identifier:   C6:38:67:09:76:95:FE:6D:BE:72:B4:27:34:A2:35:9C:B8:5B:18:08
Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
Certificate issuer:       /CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Certificate serial:       019D265ED60E1349C70DD7C369C4403C3298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
Manifest number:          01D2
Signing time:             Wed 25 Mar 2026 19:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:42 +0000
Files and hashes:         1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: rmdg4l5M6ff5DFgglkWNn/5mFUoJe+tgFOIFxpZmu0E=)
                          2: TCYoAFJaTqATlFl0u6eQAyMZXJ8.asa (hash: v+oV8YQrF1EVh7SFPiMT8Uf4NtlNNpd/LZU5zlH6PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:d6:0e:13:49:c7:0d:d7:c3:69:c4:40:3c:32:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6
        Validity
            Not Before: Mar 25 19:00:42 2026 GMT
            Not After : Mar 26 19:00:42 2026 GMT
        Subject: CN=c63867097695fe6dbe72b42734a2359cb85b1808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:79:63:2a:36:26:ea:af:f8:02:0e:62:eb:
                    3a:9e:aa:d6:af:ea:04:7e:bd:7a:db:e1:cb:cd:f7:
                    5f:4d:bf:c7:50:f8:62:47:f9:f5:b5:f5:05:71:12:
                    f4:83:0d:5c:36:d1:e3:2c:cb:b9:63:d9:ab:97:b9:
                    4d:b3:99:4f:62:31:97:a7:1c:a3:7f:58:67:3e:2e:
                    61:1d:59:cb:36:58:e4:9b:3a:73:19:78:8b:43:c5:
                    0d:a1:4c:3f:8b:27:0e:dc:8b:69:aa:55:c7:62:6f:
                    83:0f:4d:db:de:5a:42:59:d1:a1:ea:21:e3:42:cd:
                    bd:88:09:29:75:c8:ea:35:66:b7:96:5a:f3:6b:9e:
                    6d:4f:f9:77:1a:b2:45:af:a9:68:71:31:38:67:ae:
                    86:b3:a4:d6:c7:fe:bd:a4:a2:cc:04:34:f5:2a:27:
                    f5:62:c1:9a:fb:8e:15:1e:b7:94:d6:66:69:4d:64:
                    c4:5a:6e:28:62:a6:a4:a6:f7:96:a0:e5:25:ae:4a:
                    50:3d:d6:c0:1b:b5:c8:9d:36:21:2d:b3:08:50:c9:
                    ab:1e:f1:3c:d6:03:37:da:93:8c:80:c0:9d:bb:a8:
                    18:e7:22:9d:74:79:b9:84:80:5e:c8:7a:c2:c8:8d:
                    1b:bd:b1:02:0b:c4:8e:97:62:81:d9:3b:5f:1f:ee:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:67:09:76:95:FE:6D:BE:72:B4:27:34:A2:35:9C:B8:5B:18:08
            X509v3 Authority Key Identifier:
                keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d3:26:3f:0b:50:75:f6:33:67:48:40:ef:06:9b:d2:96:56:
         c7:85:3b:fc:76:87:07:cc:f7:aa:77:d6:f0:c6:7e:32:c3:3a:
         0f:40:2c:af:7e:80:12:8b:5e:38:c2:2e:8f:b4:67:28:09:85:
         f4:da:49:62:07:f6:8c:5a:28:42:6b:f7:d4:95:d2:56:0e:26:
         bd:13:7a:6c:cb:e7:7b:db:36:61:07:11:e8:39:0f:e0:f6:ec:
         41:f5:6d:b9:05:69:12:87:51:42:45:0c:db:56:3c:03:85:38:
         88:17:28:ec:74:02:6a:70:00:e6:c0:ec:d4:1c:ba:06:32:b7:
         41:57:26:d9:e3:cc:55:f5:01:83:5c:76:40:b6:61:30:0f:9c:
         ee:86:67:c1:b3:21:ab:9d:e9:a0:e9:c6:dc:a1:a0:86:52:d8:
         14:b8:79:1b:8c:1f:37:5a:10:ab:7e:5c:0d:4f:c7:a7:68:ec:
         f7:a9:19:02:ba:32:0a:9d:8d:a8:aa:01:ab:0f:94:53:88:20:
         3b:81:ca:5c:9e:df:1c:17:40:13:77:52:dd:37:db:23:ca:60:
         f4:8b:99:6d:08:51:20:06:46:e0:3c:a4:56:01:90:64:32:42:
         e5:f6:0b:0c:85:f3:1a:1a:c1:35:a6:48:fc:79:98:f5:ce:10:
         b9:68:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:04 2026 by rpki-client