Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File:                     r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier:          g1MBg00IMjI2fcXKnaKkID83cqNmOiy08az7+qeB/ng=
Subject key identifier:   D3:97:B4:95:72:54:DC:0D:1A:7D:E7:04:1E:62:6E:6F:45:EE:26:E4
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer:       /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial:       019D3909892871779C6CF917F91406741C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number:          0F74
Signing time:             Sun 29 Mar 2026 10:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:19 +0000
Files and hashes:         1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: dLlN3XI+nEWnDmvhNo2PQ73q1dem41+ix9MY2w64rmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:89:28:71:77:9c:6c:f9:17:f9:14:06:74:1c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
        Validity
            Not Before: Mar 29 10:00:19 2026 GMT
            Not After : Mar 30 10:00:19 2026 GMT
        Subject: CN=d397b4957254dc0d1a7de7041e626e6f45ee26e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:f9:4c:75:f2:07:9a:34:37:d7:39:22:1d:
                    17:9b:20:0d:a9:86:d8:fe:48:64:6f:03:63:d5:95:
                    cb:a4:cf:c3:ce:5c:a7:e6:34:73:c1:73:16:49:6d:
                    25:6c:16:9d:48:0c:dd:32:95:cd:9b:24:4b:38:0a:
                    5f:20:2d:b0:4b:59:19:23:f8:f9:e8:e0:49:6a:a3:
                    df:10:53:ea:9c:7a:02:c7:0c:32:c4:e5:68:6d:ba:
                    b8:87:a4:13:9a:65:5b:8f:a8:eb:b1:44:6e:70:98:
                    ec:a8:11:70:c1:03:2f:28:38:6e:b4:c4:d5:f7:33:
                    eb:53:ab:d8:45:11:4d:1c:f0:f7:42:b4:e1:d5:e8:
                    c6:65:89:be:54:fa:af:13:eb:bf:f1:da:66:b9:00:
                    37:2b:26:08:b2:d7:de:92:ab:74:1a:b7:71:8b:fc:
                    84:54:8b:cf:c0:31:03:f0:6c:e5:5c:95:d9:4a:3b:
                    ae:82:d4:5d:d3:f9:8c:d5:27:a7:64:20:4a:57:1a:
                    c3:d4:e3:71:11:38:d0:66:e7:19:88:01:61:5b:ac:
                    5a:96:67:9f:66:69:d2:55:29:4e:52:83:b0:e6:41:
                    6d:00:5d:a0:ef:21:88:fc:71:ae:34:68:90:05:48:
                    a1:f8:df:db:70:31:f5:32:c7:0a:82:60:55:0d:d1:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:97:B4:95:72:54:DC:0D:1A:7D:E7:04:1E:62:6E:6F:45:EE:26:E4
            X509v3 Authority Key Identifier:
                keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:76:97:42:6d:60:dc:0e:74:da:d2:16:cb:bd:ae:08:4c:24:
         d7:4f:ee:22:38:26:1f:7f:15:c1:25:73:33:d4:96:d5:3d:68:
         b3:44:04:b2:da:f9:a6:2b:b3:2a:a0:d3:f1:82:e3:63:19:ca:
         ce:8e:50:db:93:b0:f8:77:fe:43:5a:69:18:be:24:15:6f:b6:
         a3:82:02:ad:f3:46:13:f7:9f:32:6f:8f:73:6d:22:0b:a3:01:
         6b:3d:b8:ea:c3:25:cc:6c:22:49:bf:30:e9:98:c8:26:f0:3b:
         de:2b:92:7b:c4:26:e3:ca:6f:a3:e8:97:fe:df:8f:80:f6:ec:
         1c:b8:4a:c6:1c:cc:ef:9b:3a:65:1e:41:7f:59:47:c6:86:ca:
         8d:ad:7a:84:45:04:06:b6:94:3b:29:0a:e2:e0:98:66:69:91:
         1e:3e:87:17:bd:06:23:dd:c6:ca:8c:f3:ec:19:0c:0b:87:55:
         5e:88:f2:2d:64:d3:b2:e8:94:df:5e:b1:58:20:9e:3c:b7:db:
         2b:b3:14:49:7c:17:89:00:90:92:2b:ec:33:0e:22:ed:23:7d:
         74:70:84:e5:7b:c7:75:14:22:b2:a2:81:9b:ec:1e:c4:b9:73:
         c8:76:fd:85:0d:4f:83:63:a2:9f:b3:33:8b:a1:5e:35:ac:be:
         9a:5c:d4:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CYkocXecbPkX+RQGdBw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl
NjE4YmYwHhcNMjYwMzI5MTAwMDE5WhcNMjYwMzMwMTAwMDE5WjAzMTEwLwYDVQQD
EyhkMzk3YjQ5NTcyNTRkYzBkMWE3ZGU3MDQxZTYyNmU2ZjQ1ZWUyNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovz5THXyB5o0N9c5Ih0XmyANqYbY
/khkbwNj1ZXLpM/Dzlyn5jRzwXMWSW0lbBadSAzdMpXNmyRLOApfIC2wS1kZI/j5
6OBJaqPfEFPqnHoCxwwyxOVobbq4h6QTmmVbj6jrsURucJjsqBFwwQMvKDhutMTV
9zPrU6vYRRFNHPD3QrTh1ejGZYm+VPqvE+u/8dpmuQA3KyYIstfekqt0Grdxi/yE
VIvPwDED8GzlXJXZSjuugtRd0/mM1SenZCBKVxrD1ONxETjQZucZiAFhW6xalmef
ZmnSVSlOUoOw5kFtAF2g7yGI/HGuNGiQBUih+N/bcDH1MscKgmBVDdEXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOXtJVyVNwNGn3nBB5ibm9F7ibkMB8GA1UdIwQY
MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt
OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm
LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnaXQm1g
3A502tIWy72uCEwk10/uIjgmH38VwSVzM9SW1T1os0QEstr5piuzKqDT8YLjYxnK
zo5Q25Ow+Hf+Q1ppGL4kFW+2o4ICrfNGE/efMm+Pc20iC6MBaz246sMlzGwiSb8w
6ZjIJvA73iuSe8Qm48pvo+iX/t+PgPbsHLhKxhzM75s6ZR5Bf1lHxobKja16hEUE
BraUOykK4uCYZmmRHj6HF70GI93Gyozz7BkMC4dVXojyLWTTsuiU316xWCCePLfb
K7MUSXwXiQCQkivsMw4i7SN9dHCE5XvHdRQisqKBm+wexLlzyHb9hQ1Pg2Oin7Mz
i6FeNay+mlzUjw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:02 2026 by rpki-client