Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
File:                     6u-o-3F64LhsHl1nA1DSxzuefE4.mft (raw, json)
Hash identifier:          93u46nO0e1X20RObF7KplJ5drBMUssyEKc0fRZJenZI=
Subject key identifier:   4D:58:BC:95:36:0F:7F:B5:DB:9F:1E:5B:75:9B:F6:CD:A8:D9:6D:E9
Authority key identifier: EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E
Certificate issuer:       /CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e
Certificate serial:       019D38655F193AB957936F02AB262F021ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
Manifest number:          0181
Signing time:             Sun 29 Mar 2026 07:01:00 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:00 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:00 +0000
Files and hashes:         1: 6u-o-3F64LhsHl1nA1DSxzuefE4.crl (hash: Byfl0n+PZIQfEjo1sV79EUoqSUQmKZTyorpnpYoZ6mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:5f:19:3a:b9:57:93:6f:02:ab:26:2f:02:1e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e
        Validity
            Not Before: Mar 29 07:01:00 2026 GMT
            Not After : Mar 30 07:01:00 2026 GMT
        Subject: CN=4d58bc95360f7fb5db9f1e5b759bf6cda8d96de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:0b:c9:22:45:87:bf:62:91:a2:32:cf:44:
                    0a:34:70:a4:54:9c:fc:43:fb:11:d9:ab:bb:db:df:
                    07:5d:88:42:55:c6:06:b6:f1:ed:8f:9b:bf:86:24:
                    f6:1b:8f:66:5c:7f:dc:f8:96:c2:c4:18:45:0a:0c:
                    a8:26:05:c8:5f:9a:bb:92:33:23:6e:85:d2:73:c9:
                    c4:c6:42:35:15:81:e7:20:3b:1d:ea:83:9a:5d:00:
                    83:92:3a:5b:65:b7:58:e4:cd:f3:aa:bf:19:2c:8b:
                    7d:d6:50:df:a7:23:1e:4d:91:24:da:18:5e:94:c2:
                    a5:67:f6:ac:ef:dc:50:05:78:b0:75:59:80:c6:ca:
                    5e:20:a2:9a:3b:d6:9c:ee:86:77:04:25:e1:ae:b2:
                    d5:1b:97:d2:c8:2b:a1:48:e7:52:e3:0f:fa:0c:98:
                    10:7e:85:50:11:79:7a:a0:fc:94:77:a4:9b:16:3f:
                    1f:9a:69:8a:c4:85:f5:9a:df:93:54:55:0f:74:20:
                    66:11:68:9a:7e:3f:02:c5:41:c7:ab:a7:ec:38:86:
                    07:bf:cc:05:f9:51:09:98:12:6a:be:25:c9:2d:76:
                    82:6a:25:e3:30:37:cb:38:d2:b5:17:21:b8:21:3c:
                    55:bb:03:57:03:26:a5:90:99:1e:e9:7b:34:3c:11:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:BC:95:36:0F:7F:B5:DB:9F:1E:5B:75:9B:F6:CD:A8:D9:6D:E9
            X509v3 Authority Key Identifier:
                keyid:EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:df:57:d5:83:f5:1b:6c:8f:6a:00:11:d7:76:8c:16:00:dd:
         fe:88:9d:4c:f2:c9:5e:4e:8a:7d:8f:fc:f0:5e:9b:72:7f:44:
         8e:72:b7:c8:37:3f:ff:38:9d:af:ff:16:c4:73:f1:0d:3a:53:
         dd:0c:83:49:34:62:0b:ca:a3:9f:7d:83:7b:dc:1a:78:a7:96:
         b2:64:4f:72:3a:53:c9:1b:e1:fb:c7:44:d5:43:07:21:47:45:
         79:bf:7f:6f:1a:af:53:d7:4c:27:ec:f8:86:a1:19:18:6e:7c:
         ce:3e:94:da:a7:b3:8b:be:e2:3d:fc:22:c9:9f:76:4d:dc:b4:
         7f:2b:26:5a:a5:4e:d1:af:7b:a1:da:23:99:ba:58:f7:99:99:
         05:4e:6e:a6:e3:34:ef:ab:87:68:19:03:8e:bc:bd:22:58:7a:
         37:52:1f:19:0d:84:82:2b:29:ff:c0:8a:b3:1f:27:ff:ae:fc:
         1c:dd:f5:0c:f2:8e:6c:32:5b:58:ae:ce:46:26:d7:25:89:41:
         29:7a:69:19:ec:3c:de:50:39:2d:14:16:ca:9f:85:ea:a1:03:
         06:ca:00:0e:1f:22:e2:af:ff:80:c9:68:dd:84:59:1e:d5:07:
         76:ba:2f:92:3a:4f:30:a5:78:50:34:0d:9f:37:a5:c6:59:30:
         87:33:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client