Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          dGDtBjQ6/xrdNcx38cc5fBCpUXEQAA36bVd/YXpKe20=
Subject key identifier:   8B:09:7F:8E:84:71:22:24:09:E9:EB:19:A1:78:E4:B9:54:56:B2:03
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       019D37C08B2A81577A3B77925F3A9ACE7484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          1598
Signing time:             Sun 29 Mar 2026 04:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:58 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: ZFH/bHFp8POtWaNicAjY3FGLFZtwQjBx8iEH4B/1K6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:8b:2a:81:57:7a:3b:77:92:5f:3a:9a:ce:74:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: Mar 29 04:00:58 2026 GMT
            Not After : Mar 30 04:00:58 2026 GMT
        Subject: CN=8b097f8e8471222409e9eb19a178e4b95456b203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:43:54:ed:19:c0:13:d8:30:9e:cf:de:8e:
                    36:01:a3:32:8d:6c:16:c6:ed:ad:41:a9:82:35:fe:
                    62:5e:c7:e6:27:65:5b:41:4c:a3:71:79:c1:b6:99:
                    43:94:38:ab:42:42:f9:2c:6a:c0:01:1f:fe:c8:38:
                    e6:48:17:e5:21:af:ab:d6:a2:32:05:c9:2d:56:de:
                    47:76:bb:9a:fd:01:22:d6:8f:b2:56:a7:b2:24:31:
                    38:01:c5:4d:39:9b:33:8d:4e:b0:59:37:c9:9b:09:
                    e8:16:df:ae:e9:4d:1c:fd:03:8e:75:cb:ef:25:d8:
                    1d:54:71:bf:66:12:f7:21:20:e7:84:c7:e2:32:01:
                    17:86:95:28:f8:21:f9:36:cd:9c:79:85:b5:50:20:
                    97:b2:6f:f0:aa:85:4b:e3:e6:5b:36:b0:d1:a4:c9:
                    6b:6e:fd:aa:70:96:81:5d:f8:5f:94:93:90:e3:5e:
                    18:d7:8b:34:45:22:e7:43:34:6f:63:39:0b:fa:8d:
                    ed:f1:1b:b9:64:9c:ad:1c:4d:dc:ff:1c:e7:b5:4e:
                    0c:72:3a:22:ce:ce:50:41:c8:3b:e4:03:d9:89:f7:
                    ba:5e:4f:3e:38:a2:a9:b2:dd:a4:99:7b:a1:31:a4:
                    97:0d:3d:c3:19:cf:81:56:60:7b:e8:09:66:71:04:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:7F:8E:84:71:22:24:09:E9:EB:19:A1:78:E4:B9:54:56:B2:03
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:59:1e:12:9a:09:a6:20:90:40:cc:0a:e3:64:0d:ca:19:
         06:ce:b1:e0:eb:c8:10:c4:ad:c1:cf:50:08:48:bc:d3:c7:f5:
         eb:24:61:e9:32:cb:b5:b7:4e:d9:60:f9:dc:7e:dc:af:ee:dc:
         a9:2a:58:19:f3:51:fd:84:ad:50:62:18:f2:f2:3c:65:a1:85:
         cb:dc:8e:58:a6:23:6d:73:cc:50:d3:fe:75:1d:74:67:8f:fb:
         91:55:65:f6:ad:8a:ce:ad:e7:f6:c7:56:f7:fb:8b:45:fd:d7:
         f2:5e:9b:03:e7:e3:77:c3:40:04:ea:9f:a9:5e:4e:53:96:98:
         a5:9a:f9:62:63:50:13:a8:02:91:3c:4c:d2:54:17:b2:35:39:
         c4:af:c5:c4:b1:4b:d6:33:85:b3:90:04:b0:4d:ad:3a:e5:7d:
         ac:31:f2:5e:cb:ea:69:4c:db:29:61:8c:6e:b2:a7:2c:11:26:
         66:98:99:34:e2:24:48:de:81:c4:6d:39:72:54:23:9e:2e:65:
         cf:4b:c4:e6:57:cc:06:07:df:84:2c:ed:16:20:bf:21:21:a1:
         69:3e:2d:5f:1a:fb:60:ec:80:ee:f7:c9:5c:7b:48:42:08:63:
         db:2d:0d:0f:73:d1:b7:11:a1:2b:e0:62:95:b3:98:24:6f:d2:
         42:a1:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:27 2026 by rpki-client