Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
File:                     6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json)
Hash identifier:          xd9/w9P18gbGirrUZmR26abL/WiZ5HhG3aa2lpMjVvI=
Subject key identifier:   33:81:61:BE:3D:4B:0E:07:D0:D1:2D:66:7A:FC:94:77:3D:E3:37:DF
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Certificate issuer:       /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial:       019D3A1C8B312948C30CD603BA89D375F4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
Manifest number:          174C
Signing time:             Sun 29 Mar 2026 15:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:42 +0000
Files and hashes:         1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: GoQjwDay/t7C6m+2u2Hpqy/lYXM6jxMW/aLxv7PbT14=)
                          2: JVnNDue1yDItEpFp0OCuNkyOxQM.roa (hash: rvpaHWXJ88W6TCf5XtdW918xCJCQp2lb/JSktVJEhS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:8b:31:29:48:c3:0c:d6:03:ba:89:d3:75:f4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
        Validity
            Not Before: Mar 29 15:00:42 2026 GMT
            Not After : Mar 30 15:00:42 2026 GMT
        Subject: CN=338161be3d4b0e07d0d12d667afc94773de337df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:85:7b:a8:02:5e:9e:b6:26:0e:45:25:d9:
                    f6:4e:b0:22:80:c4:42:32:4e:2d:55:99:ca:1d:2e:
                    e8:3f:1f:f8:2a:b0:e6:2f:6d:d4:64:9e:36:ac:21:
                    87:73:2f:63:49:de:1d:7c:4d:e7:15:6d:b6:b8:be:
                    8a:f1:df:9c:1a:bc:2e:d3:c2:ac:04:d0:aa:6d:82:
                    f8:d3:21:4a:e0:2f:f7:d7:02:48:79:ec:4f:c2:20:
                    01:dd:be:a8:a8:f6:cd:61:b2:93:31:aa:a9:a0:1c:
                    a8:df:19:32:e4:21:ed:4c:da:06:5a:e2:a0:c2:7b:
                    bd:d0:53:ba:47:9a:ac:59:e4:b1:29:6b:45:81:99:
                    93:46:ff:7f:c5:9f:7d:12:96:a8:3f:46:e0:a4:79:
                    c3:86:38:7e:fc:dc:05:cf:5e:26:2b:cf:2a:90:06:
                    39:5a:88:24:fe:bb:d4:ff:be:b3:ee:f8:d7:2e:18:
                    e3:9a:39:b8:4c:6c:1e:b2:0e:a6:3b:cc:8c:15:c2:
                    f1:dc:aa:9a:6b:68:78:01:e2:f1:1a:e1:77:dc:36:
                    38:f1:57:8f:33:24:de:b0:6c:0d:da:9b:0e:49:d2:
                    8f:c5:ab:d1:0f:2d:9b:8d:04:fe:5e:83:bc:a4:03:
                    66:c7:79:1e:77:9e:c7:27:5f:47:a6:ef:6d:7c:53:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:81:61:BE:3D:4B:0E:07:D0:D1:2D:66:7A:FC:94:77:3D:E3:37:DF
            X509v3 Authority Key Identifier:
                keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:68:72:2b:e6:77:84:cc:16:9a:bb:cc:95:f9:f9:6e:ca:
         b0:71:fa:db:2d:d0:bf:83:73:89:7a:0e:7a:b6:61:2c:eb:3d:
         88:9c:3b:2f:60:c7:a3:58:88:20:fb:b7:2b:8d:2b:0e:98:8c:
         f1:3a:04:ba:e8:22:9d:8d:ed:7b:91:8f:24:f9:c6:cb:7c:7e:
         fd:f3:45:e5:a5:a1:39:76:b7:99:8f:e0:72:80:36:23:3a:a8:
         f3:eb:a9:3f:c1:96:41:99:32:c8:8e:b9:70:b4:22:ed:ab:6c:
         0a:e5:8e:34:1f:59:cd:63:4e:ae:a5:4e:a3:8a:d4:8b:ef:1d:
         c8:de:cb:64:dd:5a:b5:be:a6:f9:48:18:a3:49:55:88:5a:91:
         9f:fe:b7:52:d5:0f:9e:52:82:de:f6:28:7e:90:b9:30:31:e7:
         43:6b:44:33:30:92:51:c4:20:c7:1c:e3:97:b0:2f:84:68:94:
         54:ac:81:96:02:00:79:cd:67:72:8f:5c:be:82:57:a8:57:af:
         f4:f5:96:26:f3:a4:51:e1:19:2a:d6:40:18:15:d3:75:b7:af:
         77:55:40:1d:c0:14:b9:84:91:a8:96:9a:7d:a8:93:15:e2:00:
         62:6e:82:7a:f0:87:23:92:06:2e:71:4b:45:d8:8e:5e:9a:05:
         e7:2f:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:08 2026 by rpki-client