Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
File:                     c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json)
Hash identifier:          TiwJY7mCX+r/sqiIhMV9RaoKqkT+bXrrgD3qjxpMWTA=
Subject key identifier:   59:2D:12:5A:A1:28:6E:1A:3B:07:9D:48:DE:5A:14:60:17:99:AF:B8
Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
Certificate issuer:       /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Certificate serial:       019D37C10C72367F15BEC07AD7FA334D71A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
Manifest number:          181A
Signing time:             Sun 29 Mar 2026 04:01:31 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:31 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:31 +0000
Files and hashes:         1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: GpiDkJ7NowGIFYmeMgD+Q/lzPDz9SwYuybaw6gGoYdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:0c:72:36:7f:15:be:c0:7a:d7:fa:33:4d:71:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
        Validity
            Not Before: Mar 29 04:01:31 2026 GMT
            Not After : Mar 30 04:01:31 2026 GMT
        Subject: CN=592d125aa1286e1a3b079d48de5a14601799afb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:95:57:d8:b0:2a:47:e4:a1:11:ca:69:a7:
                    4b:95:7a:a7:22:75:fa:ae:a1:04:b3:05:d9:e2:f4:
                    54:59:7c:68:a5:00:47:40:70:58:24:cc:62:ea:cb:
                    c7:ed:0e:5a:cc:ca:76:ed:8c:3c:91:ed:8a:b5:39:
                    07:51:10:f4:a5:56:ff:cb:9c:e2:1b:09:59:49:2c:
                    19:87:1b:1c:50:80:3b:26:3f:9f:02:b5:e5:64:41:
                    d7:fc:5f:81:2f:b6:42:fc:d3:4b:76:71:25:f2:57:
                    4b:10:b4:08:64:2a:26:da:ea:32:36:2f:b1:9d:ed:
                    11:c1:4d:7c:6a:29:81:72:62:36:80:69:76:34:62:
                    0a:8b:47:69:7e:f0:aa:73:07:df:da:c4:77:47:9f:
                    1b:9d:3b:ba:0b:5d:1b:b7:d6:d8:a5:e1:0c:b7:59:
                    8c:85:1a:f6:33:1b:8a:12:5a:b0:f3:33:15:7d:45:
                    df:6f:6f:42:ed:79:e8:a1:e7:31:57:c9:f4:5b:a4:
                    c1:f6:fd:50:65:00:16:e2:95:87:78:57:99:68:5b:
                    b3:fd:d3:d3:f6:3e:0a:be:56:85:58:e0:36:8e:22:
                    55:36:3a:5d:e9:34:82:e0:f4:17:91:18:d4:c8:8a:
                    8e:0f:02:a4:49:da:9d:c4:33:33:24:4d:19:1b:ff:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2D:12:5A:A1:28:6E:1A:3B:07:9D:48:DE:5A:14:60:17:99:AF:B8
            X509v3 Authority Key Identifier:
                keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:05:4c:4f:9e:00:3f:5f:f7:f1:e4:02:e5:ba:57:5d:db:a3:
         5d:7b:a4:d2:a7:ab:4a:d0:64:e1:9d:43:27:af:a2:d1:01:a2:
         5f:6f:79:db:3c:a0:05:9b:50:16:7c:fc:a6:d2:58:a2:b5:45:
         02:7b:67:1e:0d:f0:1d:69:12:13:69:03:e6:4d:94:03:65:4a:
         eb:08:40:3e:ae:df:de:c7:5c:09:a6:27:09:f7:cf:46:b1:87:
         c4:f4:a3:5c:11:88:82:d8:ec:f1:3e:16:26:18:a1:02:81:72:
         06:29:60:28:9b:6f:b4:5f:8f:9f:af:25:24:2d:6b:53:be:95:
         76:fa:66:3a:81:6d:4f:8b:71:56:9b:24:30:b8:81:b5:49:63:
         98:56:da:a6:7d:c4:37:86:27:27:85:76:65:e9:26:c1:fa:66:
         41:a1:c8:c8:82:b8:fa:35:9a:60:0a:88:15:27:c4:4c:97:2b:
         85:62:21:b3:fc:16:82:4b:51:36:1e:80:75:b9:2b:84:df:fe:
         38:11:cd:20:06:18:2b:b3:0e:0e:7f:ec:9f:6a:68:3e:59:b0:
         3e:83:08:81:cb:c5:07:7e:7d:d4:b4:9e:12:0b:ca:eb:60:0a:
         ac:30:3a:a2:6d:f9:3d:9e:1c:af:b8:43:cc:e4:2c:99:a1:74:
         35:ec:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:29 2026 by rpki-client