Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          QdCLyrm8rcjI1SfH5Glabt/KFuDqobKcCLE7SeyGhVs=
Subject key identifier:   B0:B4:7F:D6:21:4F:0B:BF:34:EF:FC:F0:A3:A0:80:C0:AD:BA:CE:98
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       7983139C81AD0DEDA07226582A4DDBBBAF797BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          02C9
Signing time:             Wed 25 Mar 2026 15:41:37 +0000
Manifest this update:     Wed 25 Mar 2026 15:36:37 +0000
Manifest next update:     Thu 26 Mar 2026 18:14:37 +0000
Files and hashes:         1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: daTvpBLdsJ4lqFrviRbDd4avijKrM+X5/p6pRknpMOA=)
                          2: AS211562.asa (hash: 8C3+cv4Ox/77O136RcP0jRWcrYpRs3rcK+fBYsAe678=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:83:13:9c:81:ad:0d:ed:a0:72:26:58:2a:4d:db:bb:af:79:7b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Mar 25 15:36:37 2026 GMT
            Not After : Mar 26 18:14:37 2026 GMT
        Subject: CN=B0B47FD6214F0BBF34EFFCF0A3A080C0ADBACE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:06:5a:3b:ad:b7:12:7b:8f:1d:91:a2:3c:
                    32:00:3d:8f:4b:7e:86:ec:28:c3:53:39:57:8b:1e:
                    4d:83:9d:00:2e:7d:f7:84:26:c6:fd:c8:f3:6f:2e:
                    de:3e:51:08:c9:28:ef:2a:04:88:e5:52:d5:09:7d:
                    12:98:2c:06:d2:15:59:1d:39:fa:18:39:21:40:f4:
                    3f:51:c4:c5:76:c3:5e:eb:bd:b4:7a:81:74:00:6e:
                    14:07:1b:8b:60:06:68:fb:bc:a0:45:98:30:24:1c:
                    3a:fe:83:39:4b:0d:7b:42:97:da:99:b6:a2:82:42:
                    44:61:2b:f9:67:62:db:3c:99:cf:8b:31:f3:b8:4c:
                    4e:46:ca:2b:08:9a:d7:a2:3e:5b:64:df:05:91:72:
                    ac:57:c9:52:9a:1b:7f:26:cd:ef:7b:bb:7b:f4:c8:
                    18:f6:8e:17:13:37:3f:a2:21:ef:4f:12:51:64:60:
                    da:35:f5:4a:58:53:c3:eb:e4:0f:25:ad:ff:97:0f:
                    64:03:60:fb:c8:75:69:57:39:fb:22:25:64:b0:8d:
                    c0:cb:a6:c1:31:3d:21:6b:2e:b9:3d:84:e6:c9:f3:
                    9d:17:50:ae:6a:8a:48:b3:7d:84:9f:ca:ac:19:db:
                    0e:fa:c1:68:b9:00:df:f2:48:ad:4a:2e:bd:9a:32:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:7F:D6:21:4F:0B:BF:34:EF:FC:F0:A3:A0:80:C0:AD:BA:CE:98
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:98:c1:9d:0f:06:29:b6:3a:94:24:b9:cd:99:c0:7a:0e:
         d4:b5:5e:73:02:f9:21:c4:16:6c:73:50:b8:c5:b6:d8:3c:d7:
         02:c6:dd:3c:17:a6:94:4d:7c:b9:c6:9f:dc:6a:6f:73:40:d5:
         15:1e:cd:5c:56:a0:ea:74:f4:2e:e7:df:61:0e:de:a4:04:9e:
         09:ff:35:73:0e:95:80:03:3a:0c:24:70:d5:0f:5d:9b:52:e2:
         44:35:93:18:8a:b7:03:05:7a:98:b8:96:78:9a:be:54:fd:b4:
         00:b7:27:74:04:56:75:ca:cf:95:e4:dd:9a:3e:9d:dc:5e:d5:
         a1:66:3a:a3:b0:3e:d6:55:70:24:17:d7:57:06:82:8d:a6:da:
         fe:c7:91:89:e7:3b:17:03:8b:22:b4:d2:56:aa:09:01:72:84:
         61:72:8a:a3:25:b3:49:d6:e6:5f:3e:76:6e:7f:ab:1d:84:0f:
         7b:dd:2e:57:25:90:a8:9d:49:68:ec:f7:f5:31:a3:db:4b:8f:
         3e:cf:19:33:f2:9c:be:36:27:ae:d3:2b:e6:58:fd:25:d3:fd:
         4b:76:72:2f:6a:83:aa:2a:8e:b5:59:a1:e4:cf:0a:cd:37:59:
         63:bc:87:3b:42:fd:fd:fc:10:09:c4:f5:7f:64:86:57:41:35:
         d5:5b:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:50 2026 by rpki-client