Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
File:                     6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json)
Hash identifier:          R0ARBP9QBYhUL6MukhgwS/NKQ8d3WHClV2vmswPUOuA=
Subject key identifier:   6F:00:34:EB:C2:FB:9C:3A:B3:0B:FB:C4:28:44:0D:EA:42:41:9F:1A
Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
Certificate issuer:       /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Certificate serial:       019D3866B3F5D0EB7E77200610E9DC64AA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
Manifest number:          1551
Signing time:             Sun 29 Mar 2026 07:02:27 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:27 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:27 +0000
Files and hashes:         1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: ornS/QHLQmBHzI1/vPuKT4lglNsKK7j/kg9KBKaXVKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:b3:f5:d0:eb:7e:77:20:06:10:e9:dc:64:aa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
        Validity
            Not Before: Mar 29 07:02:27 2026 GMT
            Not After : Mar 30 07:02:27 2026 GMT
        Subject: CN=6f0034ebc2fb9c3ab30bfbc428440dea42419f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:9f:94:ff:01:d0:78:e8:9e:ab:7a:69:5b:
                    bc:7a:b8:73:a2:2b:87:57:63:66:79:94:a7:5e:41:
                    67:d6:ac:31:fb:51:7e:7e:c6:7d:35:27:91:66:5a:
                    28:68:55:c8:77:bd:a3:c3:6d:23:08:fc:ed:46:47:
                    78:85:ca:2f:f4:a7:05:a1:a6:f9:43:e7:d6:61:1c:
                    49:1b:72:74:48:90:d4:a7:78:14:02:40:f2:6d:b9:
                    0a:7f:5d:8a:58:88:89:ea:8b:99:17:57:31:15:c2:
                    e0:b6:fa:85:f9:bd:4f:da:6d:57:03:f1:9b:e8:6e:
                    13:4c:19:8e:c5:79:c1:60:3e:20:13:df:54:f9:de:
                    f0:be:cf:5e:aa:86:c2:37:8a:3e:70:05:44:c5:f3:
                    e3:0a:39:8f:7e:78:9d:63:a8:a8:5e:33:1a:ad:59:
                    35:01:45:15:33:85:f6:3e:e3:11:4f:cf:15:5f:73:
                    6b:81:b2:9d:61:90:c4:9e:45:e0:c3:d4:ed:e7:ae:
                    94:78:82:b0:bb:6b:59:d8:ff:87:e7:b9:de:9a:b0:
                    ac:7d:3a:d8:9d:96:3c:93:65:0b:43:3a:42:a6:58:
                    9e:e3:95:31:62:d1:a0:4f:b8:6a:fa:f6:e7:83:1e:
                    9d:9a:e7:e4:bc:5f:26:fc:09:ca:a5:7f:89:46:d6:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:00:34:EB:C2:FB:9C:3A:B3:0B:FB:C4:28:44:0D:EA:42:41:9F:1A
            X509v3 Authority Key Identifier:
                keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:26:a1:10:0c:c6:28:f5:53:bb:3b:f2:22:f1:fe:c7:24:fb:
         55:73:27:0e:98:d5:c6:9d:1a:54:c9:a0:1a:b3:98:36:c7:f7:
         f2:b8:8e:f9:4c:44:6b:5d:34:7d:29:9a:0c:70:85:2f:23:83:
         69:36:f8:77:2d:ef:61:e7:6a:f5:aa:f3:fd:fe:64:b1:fa:13:
         39:e9:e8:19:ff:bd:4f:7e:65:c7:16:6d:5c:78:55:1b:7b:77:
         b3:bf:2f:63:95:ba:83:99:9e:61:42:34:75:cd:1b:d8:d7:19:
         d5:34:e0:05:d4:67:1b:75:d5:64:99:5d:2f:eb:86:4d:1f:a8:
         69:c0:35:e3:ba:0c:51:41:55:e6:0e:85:3f:01:41:3b:74:a5:
         c1:d8:1d:b1:10:38:32:63:60:44:b4:c2:ff:5d:0e:c5:aa:b8:
         2b:c0:85:a5:27:23:76:b7:42:25:a3:56:3c:56:fa:d9:92:5e:
         10:5b:84:16:ab:e1:f5:bb:20:87:24:ba:a0:08:a7:0e:d7:86:
         80:81:d2:15:74:e7:47:ca:11:84:45:6d:5b:03:c1:fd:57:c2:
         4d:63:1e:39:3b:7c:85:d0:c8:f0:c4:a0:ca:e3:ba:d0:69:d7:
         42:0b:5d:6b:b7:48:0e:f8:fb:84:25:d4:5f:b1:2b:e7:5f:76:
         c2:a0:b1:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZrP10Ot+dyAGEOncZKoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ODJjMjYwNDE1OWJjMzBjMDViOWYwY2Y2ZTlkODM2MTAy
ZWE5NGIwHhcNMjYwMzI5MDcwMjI3WhcNMjYwMzMwMDcwMjI3WjAzMTEwLwYDVQQD
Eyg2ZjAwMzRlYmMyZmI5YzNhYjMwYmZiYzQyODQ0MGRlYTQyNDE5ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a2flP8B0Hjonqt6aVu8erhzoiuH
V2NmeZSnXkFn1qwx+1F+fsZ9NSeRZlooaFXId72jw20jCPztRkd4hcov9KcFoab5
Q+fWYRxJG3J0SJDUp3gUAkDybbkKf12KWIiJ6ouZF1cxFcLgtvqF+b1P2m1XA/Gb
6G4TTBmOxXnBYD4gE99U+d7wvs9eqobCN4o+cAVExfPjCjmPfnidY6ioXjMarVk1
AUUVM4X2PuMRT88VX3NrgbKdYZDEnkXgw9Tt566UeIKwu2tZ2P+H57nemrCsfTrY
nZY8k2ULQzpCplie45UxYtGgT7hq+vbngx6dmufkvF8m/AnKpX+JRtYqHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8ANOvC+5w6swv7xChEDepCQZ8aMB8GA1UdIwQY
MBaAFOiCwmBBWbwwwFufDPbp2DYQLqlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iOWRjNDAtNTQ3MC00NTY4LWJiYjkt
NjMwNTg5YzY4ODg5LzEvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iOWRjNDAtNTQ3MC00NTY4LWJiYjktNjMwNTg5YzY4ODg5
LzEvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSahEAzG
KPVTuzvyIvH+xyT7VXMnDpjVxp0aVMmgGrOYNsf38riO+UxEa100fSmaDHCFLyOD
aTb4dy3vYedq9arz/f5ksfoTOenoGf+9T35lxxZtXHhVG3t3s78vY5W6g5meYUI0
dc0b2NcZ1TTgBdRnG3XVZJldL+uGTR+oacA147oMUUFV5g6FPwFBO3SlwdgdsRA4
MmNgRLTC/10Oxaq4K8CFpScjdrdCJaNWPFb62ZJeEFuEFqvh9bsghyS6oAinDteG
gIHSFXTnR8oRhEVtWwPB/VfCTWMeOTt8hdDI8MSgyuO60GnXQgtda7dIDvj7hCXU
X7Er5192wqCxnQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:10 2026 by rpki-client