Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File:                     6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier:          /AV9sU0GkYz1extsxmi9FUM/elz5WhouFcclllTS2XI=
Subject key identifier:   24:2B:FC:EA:36:B5:7C:93:5B:A7:1C:19:22:63:3E:EF:86:78:F4:EF
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer:       /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial:       019D3866298056F7FA3A6997307B1E1E438E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number:          0F60
Signing time:             Sun 29 Mar 2026 07:01:52 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:52 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:52 +0000
Files and hashes:         1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: 79tNyeC7p2ELN4tkQWER9FToVz3yZrfB/0Iesfug0tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:29:80:56:f7:fa:3a:69:97:30:7b:1e:1e:43:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
        Validity
            Not Before: Mar 29 07:01:52 2026 GMT
            Not After : Mar 30 07:01:52 2026 GMT
        Subject: CN=242bfcea36b57c935ba71c1922633eef8678f4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ba:87:68:01:a1:30:65:5e:19:87:ed:89:bb:
                    3a:3f:68:1b:c6:39:25:bd:de:4d:7c:cc:3e:c3:22:
                    9a:d6:1d:c2:9e:9a:13:e1:8c:4b:23:28:94:e1:00:
                    fc:ec:f4:35:28:64:92:88:80:5f:54:8e:95:9d:dc:
                    ef:95:77:d9:de:7b:20:02:48:36:6e:0a:4d:44:a6:
                    f1:67:89:d3:04:84:df:fb:59:cf:e7:ed:2c:31:1c:
                    57:1a:4d:06:b2:e1:13:13:11:a3:4b:f2:4e:3a:05:
                    48:9e:77:61:71:13:d1:9e:e0:ae:2a:6c:a1:2a:c5:
                    7c:82:5b:9d:07:eb:32:08:d8:77:cd:55:8b:0a:ab:
                    75:f5:dd:ff:08:fe:3e:cd:15:c5:f7:0a:b9:27:5f:
                    21:24:4d:f6:51:6a:6a:84:e6:c9:36:9b:bb:ab:96:
                    fe:d4:5b:76:5a:0e:5a:98:e4:38:43:45:83:f1:52:
                    b3:a2:ea:39:8a:41:50:02:65:e1:4a:c1:84:ac:55:
                    5b:a2:60:c1:8f:b3:c2:6f:a4:db:2e:4e:c7:e0:b1:
                    35:7a:1b:d8:ca:73:05:c1:00:b5:e7:68:44:3c:67:
                    01:d8:ff:70:7b:7b:f9:f9:e0:f7:64:38:80:42:f7:
                    69:a9:62:f9:3f:9a:53:19:ae:4b:eb:91:e0:56:43:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:FC:EA:36:B5:7C:93:5B:A7:1C:19:22:63:3E:EF:86:78:F4:EF
            X509v3 Authority Key Identifier:
                keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1b:ab:d2:76:39:20:80:bf:6f:3c:1b:60:b3:da:60:9c:d4:
         ce:e2:e9:bf:78:3c:69:6b:63:ed:39:0e:f8:fa:74:01:ad:23:
         31:5c:ec:dd:00:11:b0:8c:e4:08:de:42:63:45:64:f3:dd:d6:
         da:ae:61:d3:d3:15:ee:1d:2e:41:91:38:46:a0:1e:3b:9b:71:
         26:1f:ae:e1:8b:f4:dc:be:77:6d:a2:8a:92:e7:97:ae:20:9d:
         b9:57:d1:2b:54:98:e2:1c:f7:16:c4:7e:e7:39:52:3e:97:81:
         98:d7:bb:bb:ae:b8:34:8b:a8:5f:4b:73:43:e4:54:28:2b:1b:
         f2:c6:d8:c7:bc:7b:fe:88:08:cc:8a:77:5e:33:4f:17:6f:96:
         fc:b6:8d:78:f4:91:2b:76:fe:48:85:1f:b5:3a:d0:a4:bd:f6:
         33:d2:20:77:5b:e2:45:d5:8b:85:9c:dc:90:14:76:83:28:9c:
         c8:5e:21:12:13:04:69:e9:52:90:17:0b:ce:b4:f2:14:ac:b6:
         54:65:72:02:77:72:db:2b:d4:f6:59:29:03:e5:97:a8:34:8d:
         63:9e:b6:c6:81:e2:71:4f:56:1f:46:0d:a3:8f:70:67:a2:36:
         9e:ca:ed:95:42:18:88:73:33:46:92:99:cd:f0:2e:70:35:29:
         b3:1f:28:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZimAVvf6OmmXMHseHkOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2
OTljOGMwHhcNMjYwMzI5MDcwMTUyWhcNMjYwMzMwMDcwMTUyWjAzMTEwLwYDVQQD
EygyNDJiZmNlYTM2YjU3YzkzNWJhNzFjMTkyMjYzM2VlZjg2NzhmNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77qHaAGhMGVeGYftibs6P2gbxjkl
vd5NfMw+wyKa1h3CnpoT4YxLIyiU4QD87PQ1KGSSiIBfVI6VndzvlXfZ3nsgAkg2
bgpNRKbxZ4nTBITf+1nP5+0sMRxXGk0GsuETExGjS/JOOgVInndhcRPRnuCuKmyh
KsV8gludB+syCNh3zVWLCqt19d3/CP4+zRXF9wq5J18hJE32UWpqhObJNpu7q5b+
1Ft2Wg5amOQ4Q0WD8VKzouo5ikFQAmXhSsGErFVbomDBj7PCb6TbLk7H4LE1ehvY
ynMFwQC152hEPGcB2P9we3v5+eD3ZDiAQvdpqWL5P5pTGa5L65HgVkOXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQr/Oo2tXyTW6ccGSJjPu+GePTvMB8GA1UdIwQY
MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt
OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx
LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxur0nY5
IIC/bzwbYLPaYJzUzuLpv3g8aWtj7TkO+Pp0Aa0jMVzs3QARsIzkCN5CY0Vk893W
2q5h09MV7h0uQZE4RqAeO5txJh+u4Yv03L53baKKkueXriCduVfRK1SY4hz3FsR+
5zlSPpeBmNe7u664NIuoX0tzQ+RUKCsb8sbYx7x7/ogIzIp3XjNPF2+W/LaNePSR
K3b+SIUftTrQpL32M9Igd1viRdWLhZzckBR2gyicyF4hEhMEaelSkBcLzrTyFKy2
VGVyAndy2yvU9lkpA+WXqDSNY562xoHicU9WH0YNo49wZ6I2nsrtlUIYiHMzRpKZ
zfAucDUpsx8oxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:07 2026 by rpki-client