Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
File:                     6RWHvbAFQCxqRx-yQ3WyJtoticU.mft (raw, json)
Hash identifier:          kjliKegT32pVUCG3KND5Wk0J7kVa8/PtByff7r+yJLI=
Subject key identifier:   B9:E1:5B:5A:19:44:2E:72:F5:56:DC:06:59:0E:70:D0:B7:D9:09:B0
Authority key identifier: E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5
Certificate issuer:       /CN=e91587bdb005402c6a471fb24375b226da2d89c5
Certificate serial:       019D397794E2A00CD7C005A08250EAC79076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
Manifest number:          0342
Signing time:             Sun 29 Mar 2026 12:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:31 +0000
Files and hashes:         1: 6RWHvbAFQCxqRx-yQ3WyJtoticU.crl (hash: ryBSQGumlU4dooSQZbzzYS26PxGogQprne49PxKy2xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:94:e2:a0:0c:d7:c0:05:a0:82:50:ea:c7:90:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91587bdb005402c6a471fb24375b226da2d89c5
        Validity
            Not Before: Mar 29 12:00:31 2026 GMT
            Not After : Mar 30 12:00:31 2026 GMT
        Subject: CN=b9e15b5a19442e72f556dc06590e70d0b7d909b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:6e:07:0b:9c:9e:33:23:82:09:a1:10:d3:
                    4a:07:c6:ab:ad:1e:9a:a4:1e:00:b1:90:1b:ce:dd:
                    e7:31:45:f6:dd:e5:6c:45:f2:ef:79:f4:13:f1:1d:
                    ad:be:eb:82:e2:9a:a8:4a:ce:d3:35:c4:a2:9d:00:
                    80:bf:2f:e3:25:54:db:22:9e:52:5a:64:a4:9d:e0:
                    53:a0:bb:2d:1e:c7:e5:c3:20:fd:a0:7b:74:55:65:
                    d8:88:b1:e3:48:be:91:bf:f5:7c:dd:db:15:5d:13:
                    74:d0:e7:c9:2e:54:03:3a:c0:ba:af:92:24:5d:91:
                    b3:0c:51:01:3b:08:91:dd:ae:19:51:ba:0a:d9:89:
                    32:f7:da:05:30:3f:52:bb:ee:cc:ed:8f:eb:63:41:
                    f8:06:a8:45:69:1b:54:52:3e:23:c2:15:b0:d6:19:
                    76:bc:c1:bc:67:e9:6d:29:bf:18:28:26:67:fd:b8:
                    d1:b5:f3:33:9e:35:ab:bc:c9:56:60:f5:ce:fd:1f:
                    f1:13:07:14:10:fd:28:bc:6a:d8:f0:eb:5f:78:ad:
                    2f:22:09:80:b8:6e:91:f5:43:2f:38:6d:ed:ba:aa:
                    4e:b6:4f:41:c1:00:42:d6:ec:c1:50:27:09:3b:5d:
                    31:32:d1:64:f4:30:62:9e:3c:4b:4b:0e:dc:2a:e2:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:5B:5A:19:44:2E:72:F5:56:DC:06:59:0E:70:D0:B7:D9:09:B0
            X509v3 Authority Key Identifier:
                keyid:E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:40:b6:a0:d2:4a:97:1a:4d:13:09:24:e6:51:12:23:7f:
         6b:1b:45:af:a0:50:bd:5a:4f:49:c8:01:ed:c8:1f:02:1f:e7:
         ae:77:6f:2a:d4:fc:7b:34:12:16:c7:0a:0c:02:fe:04:7a:8d:
         d5:0a:99:3f:55:53:2a:8b:39:cf:d4:65:bc:c3:88:d6:5c:64:
         3c:82:3b:db:e8:64:fd:0f:3f:38:3a:56:4b:7a:99:6c:3c:f4:
         d6:e0:e2:ce:c0:3e:d2:e9:db:b1:63:32:b8:91:4d:1a:3b:de:
         94:17:5a:4b:88:a0:af:ad:7f:b6:e0:59:5b:82:01:68:d6:9a:
         7b:f9:a4:1c:ba:47:62:77:93:e1:89:7f:2a:92:6c:3b:9b:5e:
         03:c2:15:bb:c6:ab:b9:97:93:92:cc:6e:2a:54:29:ac:fa:a2:
         c5:fa:02:e3:28:48:59:da:0e:15:06:77:ed:c2:52:95:fa:e3:
         e1:f7:bc:91:2b:d9:0f:a6:de:a7:2b:ed:03:a0:cf:9d:df:11:
         1e:2c:f1:8c:f4:47:6a:d1:2e:db:e4:a7:09:56:59:5b:9b:6a:
         37:b0:62:89:30:ea:f3:6a:a2:a8:f9:14:d1:a0:a6:02:2f:ab:
         73:5d:34:f1:ee:97:b8:2c:c2:88:ae:9f:42:cc:69:88:1a:60:
         2e:b9:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:51 2026 by rpki-client