Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          IbjLc/GeV/PuSTuK85Ycn2k3bZLoG7i4imj8rV0VIiA=
Subject key identifier:   1B:9F:6C:80:C2:8C:A7:C9:25:A7:3D:B2:DE:B1:2C:71:35:6C:C5:80
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       019D390984CDFDE3D17D6F77CACA3B80ACD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0F85
Signing time:             Sun 29 Mar 2026 10:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:18 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: P0tTI6cXkYtM6vx5eIjYweNol3aMr57xCS3RWzz1juM=)
                          2: r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa (hash: ekj20SSmXzNkPCb5b7krZxHKnMBgi0MEQBHep36Ait0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:84:cd:fd:e3:d1:7d:6f:77:ca:ca:3b:80:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: Mar 29 10:00:18 2026 GMT
            Not After : Mar 30 10:00:18 2026 GMT
        Subject: CN=1b9f6c80c28ca7c925a73db2deb12c71356cc580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:1f:42:31:3a:dc:cb:c7:f6:d6:4d:df:0e:
                    d8:3b:b2:51:a0:8c:c5:31:db:c3:6e:ae:20:c7:a3:
                    6d:68:41:75:1c:11:9e:0e:8c:26:02:1f:70:80:52:
                    06:d9:51:7a:52:9e:64:fe:ee:dc:6a:9b:a5:ee:ea:
                    77:ec:36:3c:cc:c9:dc:70:4e:79:c7:b8:78:4f:c8:
                    2d:66:53:2f:c8:69:10:63:6f:0f:3e:b9:b1:3b:12:
                    a6:66:d2:6a:85:7c:1e:b4:44:1b:9f:ee:59:b2:77:
                    7c:22:9a:d6:91:c1:d5:9d:35:c5:6e:14:86:78:55:
                    57:0d:a0:cf:f4:75:af:27:16:fd:6f:a3:29:86:f7:
                    8b:3f:ec:6a:ce:c7:bf:a0:44:82:2f:7f:28:9c:5e:
                    13:fd:a5:2b:b1:b6:5c:36:04:ee:f1:56:bb:57:be:
                    b2:f6:23:58:9b:05:de:f8:6d:ad:4b:44:4f:a2:ba:
                    9a:b7:cd:1d:2a:0f:0e:4a:1c:ec:46:81:f6:af:a1:
                    90:4e:da:d4:fa:75:0b:c7:93:9e:bd:d3:e7:ca:e7:
                    15:1c:8a:3c:21:02:62:45:06:0b:b3:e9:be:05:25:
                    ac:bf:54:d8:64:b7:06:a0:e4:92:f7:e1:a7:ba:46:
                    41:9f:d7:ef:15:e0:e5:85:b1:67:80:a4:a0:0d:a7:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:6C:80:C2:8C:A7:C9:25:A7:3D:B2:DE:B1:2C:71:35:6C:C5:80
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:55:34:0e:86:d2:55:96:67:e5:d3:70:e6:10:3d:2b:1e:
         dd:e4:e8:e9:e9:58:24:1f:bf:b9:fe:bf:77:29:b3:d4:a2:63:
         7b:be:c3:d7:dc:9a:29:65:3b:fe:33:3f:3d:74:51:67:69:7f:
         1a:e7:6a:4f:dd:af:fd:9f:d9:ab:b3:37:23:ba:3e:21:ed:a0:
         26:31:4f:be:67:11:95:46:fd:94:06:8f:d0:c5:72:1d:57:21:
         dc:14:21:92:f3:be:c0:32:84:82:45:ff:39:26:9a:40:1c:05:
         26:2c:ab:1a:9f:74:20:ef:44:ff:4b:d1:ba:bd:fb:0e:a7:df:
         5a:01:25:c5:02:5b:e8:98:a9:b1:c0:e9:e0:ca:e5:a4:46:b7:
         22:ac:4f:8c:91:9e:40:01:33:a0:a3:f4:2b:c2:1c:f9:e3:7e:
         dd:8c:23:de:89:18:45:e6:c2:ba:ab:e3:84:cb:06:51:d4:ff:
         18:4e:da:32:7a:6b:9d:51:5c:30:97:66:72:10:28:4b:2e:9d:
         bf:79:f8:f6:79:b7:d7:f7:35:24:05:56:cd:57:5d:a4:c9:9e:
         4f:25:e8:7c:41:82:b5:3c:86:a1:d4:63:c4:9d:64:04:14:a4:
         6c:b8:e2:34:2b:ce:22:f0:7a:3c:79:f2:97:1e:25:51:e1:4e:
         65:d5:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:29 2026 by rpki-client