Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File:                     6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier:          LNFK+sdXr25lMQ+UWb0BuNPUAprZjluFOjPEcEaE+QQ=
Subject key identifier:   E1:49:21:A7:F5:A8:87:93:CB:67:D5:C8:D5:5D:8F:BD:C5:7C:96:B6
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer:       /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial:       019D378974454551A59D117E8B1BEA4E6A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number:          061B
Signing time:             Sun 29 Mar 2026 03:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:48 +0000
Files and hashes:         1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: 9DQ8p/LnDhmEnlVoXPmVUJwW18eaCpqy83GC03s/cpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:74:45:45:51:a5:9d:11:7e:8b:1b:ea:4e:6a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
        Validity
            Not Before: Mar 29 03:00:48 2026 GMT
            Not After : Mar 30 03:00:48 2026 GMT
        Subject: CN=e14921a7f5a88793cb67d5c8d55d8fbdc57c96b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:87:1b:9a:84:9c:2d:7d:c3:09:95:04:1a:
                    c2:66:70:01:6f:a3:1d:62:c6:f1:ae:bd:15:b6:5a:
                    d7:a5:0c:8a:7b:84:17:31:9a:c4:aa:1e:8b:e7:c0:
                    6f:5f:00:a9:c1:0a:03:af:f8:59:c9:ef:11:88:bd:
                    9f:0e:e4:b0:40:b1:2a:19:73:3a:7e:7a:c0:09:cf:
                    b6:3e:02:d5:a2:e2:fa:a1:67:9a:f4:0a:6b:a1:9f:
                    9d:da:1d:6f:31:0b:17:16:52:2e:77:16:99:78:e6:
                    4a:df:72:cd:da:bb:45:2a:91:fc:94:08:87:b0:34:
                    c2:1a:bf:bf:09:49:ba:e6:db:a3:29:aa:3e:5e:01:
                    9b:49:fe:d9:4a:54:c8:2a:4c:2d:5c:88:e1:c3:0b:
                    1f:f7:dd:1c:3b:49:27:73:6b:26:62:43:41:55:f2:
                    e7:ac:2c:29:ea:63:65:ef:a1:ef:30:81:fa:a5:fb:
                    c0:72:bb:13:3f:6a:a2:1f:cf:ca:ec:bc:35:b5:e8:
                    49:1f:bd:e4:a3:f7:66:1d:3e:46:59:f9:47:49:b5:
                    e8:cf:f2:d4:8a:52:83:20:28:98:f7:06:1a:7d:66:
                    c1:17:34:a6:e3:ac:96:66:c0:22:e8:10:82:5a:25:
                    52:e2:9a:0a:8a:81:fd:34:c8:e6:20:19:30:92:ff:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:49:21:A7:F5:A8:87:93:CB:67:D5:C8:D5:5D:8F:BD:C5:7C:96:B6
            X509v3 Authority Key Identifier:
                keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2a:b9:df:8e:8d:d2:a4:0a:d8:3d:78:af:b4:3c:59:ae:0b:
         d5:2d:3a:69:52:c9:5e:4a:f4:ce:e7:64:d1:51:79:46:9d:84:
         b1:0f:08:24:75:d0:e3:00:91:6f:93:ad:64:3d:e5:14:39:38:
         b7:76:f3:d7:e1:e7:39:d8:43:e7:29:1f:eb:46:9a:49:24:01:
         98:e5:40:bb:19:57:8c:76:f6:af:f9:95:4b:e9:d8:61:f1:ce:
         de:3d:0d:48:49:3a:90:af:88:90:1b:93:f4:7b:d7:a7:ea:2b:
         8c:4d:41:21:40:1b:a2:ea:ef:dd:4e:d9:7a:78:a7:49:b1:5b:
         7c:54:2c:b5:85:08:85:38:3c:62:40:d5:c8:5c:63:ac:b4:a7:
         c0:54:9f:d9:78:1e:23:1a:45:39:b7:85:50:44:24:5a:21:1c:
         d6:ca:e3:ac:9f:a6:22:93:f0:b9:8e:9a:77:fe:95:a2:e5:dd:
         c8:84:63:41:da:18:b0:d6:df:a8:f0:a3:e0:55:b5:cc:de:80:
         04:83:fb:2d:6c:7e:4d:98:a7:35:ab:6d:2d:37:d8:85:54:ef:
         fa:b2:19:4f:4a:a9:e1:40:e0:a2:ca:b8:b3:8d:20:ea:57:d9:
         21:bf:e1:61:bf:cf:fe:88:6e:3d:b1:33:43:e2:7a:b6:17:d0:
         9a:da:55:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client