Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
File:                     6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json)
Hash identifier:          TQh3DtdQHFVlVLajN0mNmCyLZddh51UsVb8DIzT5QqY=
Subject key identifier:   94:D4:91:63:4E:43:38:50:2E:61:E0:8F:21:83:53:ED:08:43:6D:54
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Certificate issuer:       /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial:       019D37F716E19D41D9DF8E9D703B8743DB1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
Manifest number:          17B6
Signing time:             Sun 29 Mar 2026 05:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:33 +0000
Files and hashes:         1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: XmrnEJ+EFahhCd9JcuawTK1d0xnX6DMLY/94S9mX1/U=)
                          2: Q-XaXdYNyXwK0mc7YIVoepDORlM.roa (hash: d+yMV8SrvvLaa9ouz0mOIlebIPHpwRPv3zGG1GfdREw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:16:e1:9d:41:d9:df:8e:9d:70:3b:87:43:db:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
        Validity
            Not Before: Mar 29 05:00:33 2026 GMT
            Not After : Mar 30 05:00:33 2026 GMT
        Subject: CN=94d491634e4338502e61e08f218353ed08436d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:90:70:d4:a4:50:4e:cf:8f:58:72:c7:27:
                    0d:60:a6:af:8b:4f:5a:3b:df:83:ad:32:a1:8b:38:
                    8a:1c:ae:b2:7b:0d:fc:42:2c:80:0a:06:28:38:26:
                    33:f9:61:59:fd:14:ad:f4:0a:67:46:86:99:ba:3e:
                    11:1c:c6:e1:de:49:6d:a1:ab:91:4f:a9:e9:40:aa:
                    1b:3b:a2:ec:34:0a:2d:41:b1:22:0e:24:c3:b3:13:
                    60:b4:49:f5:fe:cb:9d:b6:cf:a9:34:63:7a:ce:f7:
                    c3:d3:8a:05:7e:6b:c4:0e:d6:2b:3e:33:0f:bb:20:
                    64:b7:17:33:48:51:ea:fc:66:33:9e:20:8c:c0:31:
                    40:6a:9c:a3:2b:26:b9:e0:0c:c4:52:fc:42:26:87:
                    37:ea:90:36:b0:51:ff:6b:9b:78:a5:ca:31:39:6c:
                    e8:a7:54:bf:4e:9f:c7:e2:db:07:b6:90:26:f5:83:
                    5d:23:63:6e:2d:b4:df:80:14:2e:71:e1:00:7f:0d:
                    a5:7b:4d:97:be:86:5d:60:3c:cf:9c:e1:c8:08:f0:
                    cf:6f:93:3d:80:a1:59:7b:bb:63:93:52:66:2f:ef:
                    74:4c:dc:17:d1:9b:09:4b:a5:db:ff:43:2c:97:b5:
                    98:c5:83:5e:c7:33:a0:86:e5:c1:9a:85:c1:64:8c:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D4:91:63:4E:43:38:50:2E:61:E0:8F:21:83:53:ED:08:43:6D:54
            X509v3 Authority Key Identifier:
                keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:70:b2:c6:fd:82:48:c8:9c:cc:cd:86:4f:3d:02:58:80:80:
         4c:40:68:92:e5:ad:6e:6f:b4:f9:6e:d7:4f:19:51:88:a1:f2:
         d5:c3:5c:11:c6:9f:7f:d4:77:ca:83:f6:e3:04:37:a6:78:ce:
         68:96:f5:51:2b:29:56:6c:af:2b:5e:f4:c1:b8:58:93:19:aa:
         18:90:a9:53:77:fb:41:28:82:80:ab:bb:2b:95:aa:b2:8f:c2:
         0a:ed:75:d1:b7:b5:51:65:d9:33:ce:5e:6d:52:70:56:79:2d:
         22:60:86:74:ab:10:28:4c:30:a0:5f:0d:10:c2:1f:09:89:e2:
         f1:17:ea:24:0a:2c:1b:46:e9:c4:50:49:66:ca:db:aa:18:79:
         db:ce:b3:23:7f:66:f0:f3:54:47:ad:20:1e:5f:61:64:80:c6:
         f6:56:0c:ab:b2:1e:b6:3a:22:3e:db:c8:07:3c:3c:54:a1:c1:
         28:f4:54:88:36:a1:70:ac:1d:5f:bc:e2:a2:4d:39:94:2a:1c:
         a0:6e:57:68:2e:8d:87:1d:ed:73:da:59:7c:b9:a3:82:12:4a:
         fb:00:28:dd:a5:30:b6:e2:0b:2e:24:51:23:2a:8f:f5:ec:48:
         d0:73:83:e0:0b:10:9d:39:c2:5a:d7:78:cd:e5:79:b5:ed:a9:
         e3:77:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client