Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          c50bHazR+aHMJWb435hNy3xJjlym9EAF7v1Cidhc18M=
Subject key identifier:   47:47:A2:62:1D:7B:B0:0F:75:16:3C:00:00:78:A5:B7:4D:FD:16:C3
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       019D38668437268DD017E7F2E731AC60A611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          10B6
Signing time:             Sun 29 Mar 2026 07:02:15 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:15 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:15 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: vL/0WmZpO6KvIrdeuV//1oJCBKCcIHihvI/zMtpyKLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:84:37:26:8d:d0:17:e7:f2:e7:31:ac:60:a6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Mar 29 07:02:15 2026 GMT
            Not After : Mar 30 07:02:15 2026 GMT
        Subject: CN=4747a2621d7bb00f75163c000078a5b74dfd16c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:14:a7:eb:36:16:f7:96:42:f9:13:ee:61:
                    ac:e6:15:8e:b8:ca:4c:67:b1:79:7c:53:8f:17:8e:
                    2b:46:e8:17:7f:65:f6:0d:3e:73:74:dd:49:86:4a:
                    21:1b:6f:be:15:a3:d4:b7:ed:15:bc:88:63:b6:69:
                    68:5c:92:6f:3f:da:f9:d3:70:cc:ee:59:2b:04:0b:
                    86:f4:bf:0e:f5:4f:06:f0:df:11:c9:be:7e:c4:3a:
                    a7:fe:8e:ca:24:dc:7c:bf:aa:1d:19:7a:e2:a2:1c:
                    64:16:73:9a:f5:2d:df:84:71:94:6b:de:62:8f:96:
                    a2:fd:97:9e:a4:df:36:97:c2:cb:83:76:f5:b5:6e:
                    25:40:0a:77:9c:d4:59:f1:f4:45:64:08:4a:b3:9f:
                    28:8b:e0:12:df:9b:69:dd:7d:49:7e:60:97:bf:11:
                    c0:f7:dc:bf:e3:f7:df:c6:78:93:0b:d5:12:5a:4c:
                    16:45:7e:6e:4e:f7:6c:65:81:96:bb:49:a2:fc:00:
                    03:ec:29:6d:04:e3:66:58:1a:c3:ef:cd:b0:bc:9f:
                    dd:8e:b0:d0:ec:3b:b5:77:57:14:bc:bd:f5:f5:a8:
                    85:5f:3f:e2:ca:05:71:00:a2:c2:a4:57:c3:6c:6c:
                    47:8d:06:b4:b7:95:12:15:41:e8:36:17:45:dc:e2:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:A2:62:1D:7B:B0:0F:75:16:3C:00:00:78:A5:B7:4D:FD:16:C3
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:be:a5:96:1b:0a:45:b1:53:a5:55:28:ca:1a:7a:b0:18:f5:
         4c:40:17:75:83:87:05:e6:e4:4d:b5:e2:ff:d5:1d:60:00:94:
         6f:f0:23:49:15:13:3f:9b:93:eb:39:50:50:47:72:71:bc:e4:
         d1:45:54:c7:6c:7c:1c:14:24:76:05:72:84:ee:77:7a:2f:1e:
         03:07:70:fa:09:c9:4b:7a:12:23:ad:44:31:9a:de:b4:19:93:
         a5:22:81:c1:05:49:b3:c1:ee:cc:43:7c:16:56:a6:f2:e7:6d:
         55:c1:58:c7:56:69:a2:a8:a8:20:d7:b3:f4:90:3f:14:bd:44:
         99:8e:74:b1:df:17:46:66:00:d7:03:fc:f0:3f:31:36:54:fb:
         2c:a9:03:6c:5b:92:5a:0d:eb:35:84:a1:b5:dd:27:a5:e1:b8:
         27:a6:17:1c:ac:00:d8:8f:b7:87:e5:12:3f:30:48:02:48:62:
         bd:bf:6d:21:fc:a0:7b:bd:cb:79:f8:b0:ae:1d:c4:e7:8d:a3:
         44:f9:58:9a:5b:55:f5:84:a1:57:93:da:62:93:39:8e:4a:1a:
         3a:45:48:2b:82:11:98:30:35:83:38:d3:38:a6:87:05:af:f6:
         05:65:4c:70:01:eb:93:23:ef:d8:6f:ea:c1:7c:ff:ff:e8:b8:
         3e:0a:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:52 2026 by rpki-client