Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
File:                     C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft (raw, json)
Hash identifier:          9aG7VPNupCJuIHhgAAULmY08LZuxT2uqdGjBKd8qo4U=
Subject key identifier:   77:5F:8E:25:1D:E0:B1:F8:AA:A3:03:2A:C5:3C:57:E4:8B:81:62:73
Authority key identifier: 0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
Certificate issuer:       /CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Certificate serial:       019D3941927CD166A88476CFD5735F86AEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
Manifest number:          0A42
Signing time:             Sun 29 Mar 2026 11:01:31 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:31 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:31 +0000
Files and hashes:         1: C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl (hash: b242YlJI3Lh5rCKtzjQ9TfbAPsqggfh+ngRAO3jzCTk=)
                          2: aPj8BnVqjWH3E47PP7LBKdrzCz0.asa (hash: DOTc/ieYz4f+BZdhC5DaRaGTKdAJIrC9mIZP1ZN0tzA=)
                          3: lSUwP3_EWGch21k6yUaImrmuBW0.roa (hash: QPwNQqZV3gI+gWcTQ7NnhvPJkniW1BSxBM8ezGSQu+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:92:7c:d1:66:a8:84:76:cf:d5:73:5f:86:ae:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
        Validity
            Not Before: Mar 29 11:01:31 2026 GMT
            Not After : Mar 30 11:01:31 2026 GMT
        Subject: CN=775f8e251de0b1f8aaa3032ac53c57e48b816273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:c8:ae:34:23:df:d2:f3:21:c5:71:45:3e:
                    5d:c9:5a:a7:41:d4:36:41:2e:fc:61:85:45:8f:e1:
                    6a:31:29:3d:e8:ff:9d:00:14:f5:d3:54:48:d5:76:
                    40:55:d2:96:39:f6:5b:89:58:ca:f9:82:8d:1a:86:
                    59:aa:b6:7d:ae:3c:b4:00:44:9f:9e:d3:1c:c3:ed:
                    81:4c:ef:b7:6a:10:3f:b4:57:69:de:d4:16:f2:47:
                    d8:d5:6c:ee:f2:cf:4e:91:0a:04:a1:d3:60:56:47:
                    2c:b0:ad:56:b0:c2:61:88:0b:52:cc:0e:63:68:15:
                    b6:d3:7e:56:5a:60:fa:f8:69:2b:41:43:11:81:c4:
                    72:4c:38:6e:7a:a4:8a:17:ba:0b:75:36:cf:3b:ab:
                    70:a8:7d:86:78:f1:23:0a:27:a4:e0:83:25:22:78:
                    f5:13:a6:e5:af:ca:39:d1:7e:f4:fd:4a:e1:88:a8:
                    3e:9d:d8:7b:6a:a9:dc:1c:1d:28:e4:78:71:55:19:
                    63:d1:8b:a2:1b:e7:ff:7a:12:0e:04:aa:ba:e3:41:
                    2f:2f:ae:2c:12:a4:88:7e:6c:de:e7:ac:f4:f0:14:
                    50:a5:e3:d4:2a:a1:d8:c2:b1:79:4b:26:d4:fe:dd:
                    07:f2:e0:78:b2:34:d6:c8:ce:f8:5a:35:56:b6:a4:
                    6e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:8E:25:1D:E0:B1:F8:AA:A3:03:2A:C5:3C:57:E4:8B:81:62:73
            X509v3 Authority Key Identifier:
                keyid:0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:53:e3:fd:27:10:53:a8:23:a5:83:d2:3f:41:77:fe:98:b3:
         6e:55:a8:be:1a:c6:d3:65:f7:3e:83:c3:c7:ab:ba:93:1a:ff:
         6b:98:69:d6:53:44:91:99:87:29:6c:2d:92:37:f6:b4:66:31:
         92:fa:4f:1f:6b:ca:2e:95:5b:1d:91:33:18:b8:68:cd:f2:9e:
         e5:c3:d5:13:b3:d4:8b:1e:6f:7d:f2:50:86:c7:52:1d:c3:ef:
         44:12:06:18:da:28:d8:09:bc:72:5d:61:ed:47:a4:2d:38:36:
         43:9b:11:7c:b4:9a:9f:d3:8f:04:57:ba:69:22:7e:c8:59:e8:
         0e:29:aa:5c:24:b0:cc:89:6f:10:c7:30:53:37:db:42:8b:8c:
         1c:af:3c:93:af:69:a0:5f:8e:25:61:16:1a:52:39:fb:32:ad:
         57:3e:9c:85:3f:19:03:c5:8b:bc:67:ff:ab:d4:19:cf:80:d8:
         77:a5:03:a7:6f:c9:2d:ba:a2:2a:18:1d:dd:b4:36:fb:b4:de:
         3f:d6:8a:af:3d:b5:8c:98:5b:3c:cc:78:88:2a:f5:34:4c:da:
         67:fe:ef:2f:d3:98:45:01:10:b2:b5:44:8a:66:ec:bc:a1:72:
         44:c5:a4:b4:aa:25:9c:d4:53:ec:a9:8e:cd:30:11:b2:1b:55:
         81:b6:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:48 2026 by rpki-client