Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
File:                     t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft (raw, json)
Hash identifier:          R2K+Ao0IH1CiAUHqeY9RgJPBavHLmhC9Ct9Tu45xfS4=
Subject key identifier:   D1:D3:C7:37:37:76:77:4B:10:79:52:1E:22:9F:B1:45:6E:D1:46:2F
Authority key identifier: B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78
Certificate issuer:       /CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78
Certificate serial:       019D3909DC931BF7585C12801CE9517F2374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
Manifest number:          0183
Signing time:             Sun 29 Mar 2026 10:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:40 +0000
Files and hashes:         1: t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl (hash: ACs6GjNvz6y2YGBg7J5hn+LQLVlgNoaJtFmZGbDO2tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:dc:93:1b:f7:58:5c:12:80:1c:e9:51:7f:23:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78
        Validity
            Not Before: Mar 29 10:00:40 2026 GMT
            Not After : Mar 30 10:00:40 2026 GMT
        Subject: CN=d1d3c7373776774b1079521e229fb1456ed1462f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:39:4f:04:85:38:7d:31:ad:23:b4:ee:11:
                    4a:7f:3b:12:3d:f5:f1:d0:ad:78:77:2f:82:4a:ee:
                    79:75:16:95:37:9c:75:df:36:ae:9f:08:80:fa:f0:
                    00:61:80:41:0e:4a:6d:39:45:07:58:35:b0:8e:6c:
                    1a:c2:32:f7:4c:c9:db:c2:ef:0d:a0:25:cd:33:e4:
                    95:6d:c9:c5:87:ec:3b:52:dc:cd:18:ac:c3:b8:98:
                    87:26:d5:a0:93:80:1e:ff:9a:91:48:20:bf:98:38:
                    e4:2e:91:2a:53:37:0e:a9:b1:3b:fd:9a:70:e3:85:
                    cc:8f:d6:71:59:6a:60:84:5d:f2:15:a0:11:fc:5e:
                    25:27:81:3a:9d:ab:0a:2a:50:ea:a3:d3:96:dd:7b:
                    eb:d3:f9:2b:7a:bb:87:c4:fc:8c:f5:85:0d:d2:36:
                    a6:69:d7:8d:af:b7:6f:a6:ba:b4:d3:56:ee:db:0f:
                    4e:24:eb:ff:ea:a9:31:ec:8e:2d:1f:33:ba:16:96:
                    27:e1:d4:63:dd:62:93:8e:91:df:53:ac:01:bf:c9:
                    ef:7e:15:81:8d:d7:27:cf:65:6f:30:3b:56:6f:80:
                    24:9c:e0:64:4e:39:51:ac:d5:51:c3:68:55:25:8c:
                    9f:55:09:e6:3b:be:cd:54:66:ef:8c:b9:c8:42:68:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D3:C7:37:37:76:77:4B:10:79:52:1E:22:9F:B1:45:6E:D1:46:2F
            X509v3 Authority Key Identifier:
                keyid:B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:73:1f:c4:1d:2c:59:a1:ea:b4:9c:fb:8a:50:11:64:e5:ed:
         d7:54:2f:94:62:4a:64:17:4f:44:68:83:fb:da:b5:d8:dc:32:
         31:87:d0:76:8c:6d:11:54:a8:bd:2a:f3:94:ee:a7:50:5f:a1:
         96:45:98:cd:db:88:09:44:e3:c0:db:ad:3b:94:7d:b1:52:07:
         18:db:d5:19:be:ef:a7:b1:09:1e:23:c3:52:f2:34:05:9a:50:
         5b:07:1f:b2:c0:44:89:17:c4:a8:c0:97:a0:09:1d:0b:f5:86:
         41:60:85:46:25:b3:fa:3d:8d:62:8c:2d:94:5c:b6:93:b3:75:
         54:2e:cd:d3:06:46:4b:ca:95:6e:45:ca:23:99:92:7f:ba:d3:
         27:8e:8e:da:fa:04:9e:5c:df:02:c5:e8:0f:9f:cb:04:cb:b8:
         c7:91:6f:5e:c1:49:d3:48:da:d4:f0:d4:27:a2:b9:ef:42:3a:
         7b:4c:3f:05:25:fa:c8:ab:85:a6:63:d2:fa:c3:a0:00:6a:7c:
         43:35:5e:df:d4:d4:8f:74:d0:b6:06:41:59:11:59:9c:5a:ec:
         bb:fc:02:83:e6:86:74:8b:ba:40:97:49:0e:4b:bd:d3:cb:b8:
         fb:80:d5:a4:5b:ce:1f:08:eb:f6:c5:51:1b:0b:2c:a3:a1:59:
         7d:90:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:23 2026 by rpki-client