Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          T0PPUBLyEYQvIGVf/h+ix7cNBT8C5mUe+gZOrL5u824=
Subject key identifier:   45:04:55:64:07:19:EA:52:1C:27:2F:44:98:76:AE:B7:81:9E:33:64
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019D386589C69A72FD9635A799868BA025A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          1025
Signing time:             Sun 29 Mar 2026 07:01:11 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:11 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:11 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: AXd2dJj3p/4Lx7GUmyzCzlZGvDFQydfLV/r/T8ym/Hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:89:c6:9a:72:fd:96:35:a7:99:86:8b:a0:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Mar 29 07:01:11 2026 GMT
            Not After : Mar 30 07:01:11 2026 GMT
        Subject: CN=450455640719ea521c272f449876aeb7819e3364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:1b:aa:54:53:51:6a:fe:af:c8:5c:b1:d2:
                    f1:ca:02:49:88:b0:d5:aa:ea:92:84:98:e7:7e:64:
                    09:8e:2c:74:ac:f8:09:d4:3c:9e:17:25:b4:1e:22:
                    fb:ee:ba:1d:ad:c2:5e:99:4f:11:41:5c:c5:d0:67:
                    31:49:cf:1a:44:cf:63:5e:3f:3b:e8:36:b6:c6:44:
                    64:91:a5:7f:93:3e:aa:34:3d:50:77:ad:49:89:fc:
                    af:e4:ed:70:c9:d9:99:28:fd:96:10:ea:1e:5c:72:
                    84:cc:ac:2b:e2:5d:9a:2d:7f:f7:84:f9:b7:6c:14:
                    8b:eb:55:04:43:90:0f:28:98:c5:0d:9b:79:7c:be:
                    80:3a:f4:f9:8f:7d:0a:9a:b7:e2:63:ee:cc:53:d8:
                    bd:0b:2b:f9:6e:29:09:31:57:53:86:30:e8:69:4c:
                    1c:2b:03:0f:a1:68:97:b8:9b:78:25:01:85:b5:33:
                    63:f1:0c:b8:a2:7f:f3:eb:93:e5:0c:d0:5b:3f:7c:
                    b1:a7:09:fa:b9:c7:24:50:af:2c:15:6b:ba:a6:34:
                    68:9d:29:a9:98:3a:1e:ee:35:21:7f:7f:be:94:c0:
                    e3:b8:52:fa:66:e3:f5:26:c9:a2:bb:d0:20:87:43:
                    1b:9c:10:b5:08:0a:71:4f:40:43:e4:eb:d3:7e:50:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:04:55:64:07:19:EA:52:1C:27:2F:44:98:76:AE:B7:81:9E:33:64
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:30:39:8c:1e:6d:ff:6c:b9:0f:4e:3c:ab:70:eb:55:d8:a9:
         85:aa:a9:c9:10:59:ac:9b:52:d1:ae:97:0c:a0:4a:e7:c9:0e:
         05:07:5c:13:b8:6b:ac:2b:e8:be:a7:05:5d:50:8b:d0:e5:5d:
         37:1e:0b:be:ea:80:8c:01:ff:2a:46:a5:ac:6a:19:20:63:94:
         f9:55:43:c5:20:53:a5:4a:86:18:43:00:4d:18:19:fb:c5:c6:
         f4:e3:39:c9:17:8a:ef:4d:b2:89:ce:c5:e2:f0:9b:30:5a:5c:
         a5:19:69:ce:e8:d9:8a:47:a2:27:63:32:23:42:e2:d5:32:ce:
         65:72:ad:d4:9d:e7:87:46:45:a1:ad:bc:80:57:9c:90:23:36:
         59:0f:c2:d1:90:89:53:1e:8e:cf:ec:01:30:20:ba:d8:93:15:
         48:79:cb:ce:89:5d:86:21:b3:a0:cb:22:ad:fb:49:3a:ae:75:
         97:07:a3:bd:e7:c2:b1:fc:0f:a9:78:94:75:f4:ec:84:c3:d3:
         dc:b0:00:2e:cb:b0:5b:c6:00:0a:60:b2:9d:bc:6e:16:71:3a:
         2e:f2:6b:0e:d1:b8:30:2a:49:7f:51:bc:df:50:a0:55:c6:80:
         ec:af:f2:37:6c:b9:32:ed:07:4f:2a:5b:b2:d1:e5:dc:7f:50:
         ca:51:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:16 2026 by rpki-client