Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
File:                     b6U11TlSoTJ99CLvgOuXvABDRn4.mft (raw, json)
Hash identifier:          XI10E4SY26igj8Md48aKzImjPwdbeP82s0ZsW7038E8=
Subject key identifier:   66:9B:C1:75:6C:06:7B:BA:BF:5E:44:A8:B3:7A:1A:1B:89:3E:C5:82
Authority key identifier: 6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Certificate issuer:       /CN=6fa535d53952a1327df422ef80eb97bc0043467e
Certificate serial:       019D3A1D10AB1CB80480B822426C071ECFBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
Manifest number:          BD
Signing time:             Sun 29 Mar 2026 15:01:16 +0000
Manifest this update:     Sun 29 Mar 2026 15:01:16 +0000
Manifest next update:     Mon 30 Mar 2026 15:01:16 +0000
Files and hashes:         1: b6U11TlSoTJ99CLvgOuXvABDRn4.crl (hash: MK2bB8EaJ4uYpE3E1BefiIuUA7XhCxcfcwtBkrDmsDw=)
                          2: e0rLAG5BBaCIfpZLy8By3uCTTPE.asa (hash: qtokCrim4yA+KxjuWgp93nbMyrOloUywexvJCTub7/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1d:10:ab:1c:b8:04:80:b8:22:42:6c:07:1e:cf:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa535d53952a1327df422ef80eb97bc0043467e
        Validity
            Not Before: Mar 29 15:01:16 2026 GMT
            Not After : Mar 30 15:01:16 2026 GMT
        Subject: CN=669bc1756c067bbabf5e44a8b37a1a1b893ec582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:d1:97:25:be:c6:31:f9:d9:32:57:8c:45:
                    17:15:6c:e8:61:c2:18:9f:61:57:0d:2b:8d:94:1c:
                    de:db:6c:8f:23:97:6c:7c:e2:c3:40:ec:1f:99:6a:
                    21:91:49:7b:34:b3:5b:52:50:89:ca:5a:04:d9:74:
                    98:ce:95:29:ef:86:7c:d0:5b:8b:47:e3:c1:bc:6a:
                    c6:59:d0:26:47:5f:ef:79:13:a7:fc:f7:77:4e:d6:
                    54:48:cc:4b:6b:9c:f5:ed:fe:5c:15:a7:0c:48:3b:
                    97:c7:39:39:d2:f4:2c:9d:80:59:6b:89:26:08:c8:
                    e9:9d:71:2b:64:2c:b4:2b:74:8f:95:a1:7f:e7:9f:
                    45:de:a1:31:ca:0a:98:9a:30:41:10:26:61:27:31:
                    e5:55:c2:f9:50:a1:19:b1:79:21:35:f9:de:b6:c6:
                    0c:9e:eb:1f:05:bc:08:b8:13:86:2a:0c:09:89:4e:
                    b3:5c:fd:00:5d:8f:54:de:d8:15:77:61:2b:e9:2a:
                    65:1f:46:4b:b6:5f:59:a8:e6:d6:dc:b7:12:1a:61:
                    63:bc:e3:28:2d:f0:a7:5c:d2:22:26:48:be:bb:40:
                    10:8e:d9:16:df:f8:27:ad:45:2d:e1:1c:31:48:f6:
                    8b:bd:11:b0:1b:b5:c7:41:d1:6d:d2:8e:ee:17:e3:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:C1:75:6C:06:7B:BA:BF:5E:44:A8:B3:7A:1A:1B:89:3E:C5:82
            X509v3 Authority Key Identifier:
                keyid:6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:06:d7:04:f5:29:e6:8d:28:01:74:c6:38:11:a2:9e:b1:ca:
         1c:c1:4a:ae:1b:a1:77:0c:4d:bc:1f:71:c3:e7:ee:47:9d:2f:
         93:07:b7:10:98:96:e4:90:2d:7e:4a:37:1b:63:de:b9:4a:31:
         6d:86:6e:61:c8:9e:f4:7b:2d:8d:df:68:9d:1b:a3:ff:a9:1f:
         b1:c8:68:b7:3c:16:08:e0:8a:1a:8a:76:73:65:3f:73:2d:54:
         eb:e8:f9:f0:29:5d:23:6c:10:e1:38:2a:49:bf:83:ed:5d:52:
         ca:16:cf:d7:fd:8b:a2:33:c5:d6:b0:2e:1e:4d:38:e0:05:ce:
         2c:e1:a5:37:b4:e7:f1:79:ea:05:43:02:9c:50:aa:0d:5f:fb:
         ef:1c:38:f4:b2:fc:94:68:40:c0:84:80:b4:fd:db:b6:8e:7a:
         71:99:ca:5e:34:d7:9c:3b:74:55:4a:3f:08:af:d1:41:60:87:
         1b:f9:63:d1:5a:a9:53:a3:85:9b:f6:2d:3d:a7:42:d7:d6:53:
         92:54:f5:13:36:a7:b7:97:29:60:a0:bc:4f:c0:55:a6:bd:7c:
         61:f6:9d:d6:81:2a:1f:65:dd:d9:1d:0c:aa:31:9f:c0:73:e8:
         4c:ce:59:f4:d1:93:7d:1d:b6:44:8f:9f:02:53:27:17:4c:df:
         6d:4d:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:58 2026 by rpki-client