Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          hmSMaDyV8i2xGHIXFpDJUmteQRJlJOfe44y4cRTjLlE=
Subject key identifier:   29:82:C7:63:50:DA:D9:24:0B:3A:35:25:CD:D1:BC:F4:10:97:85:0B
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       019D3865B8065B3B634C787124E20E5D58B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          0781
Signing time:             Sun 29 Mar 2026 07:01:23 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:23 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:23 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: eOLpbxyH9WLfJkn9NlVKh9Uety3C0d5NvIWNXlpVT5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:b8:06:5b:3b:63:4c:78:71:24:e2:0e:5d:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Mar 29 07:01:23 2026 GMT
            Not After : Mar 30 07:01:23 2026 GMT
        Subject: CN=2982c76350dad9240b3a3525cdd1bcf41097850b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:a5:28:16:cd:cb:5f:62:45:d1:ed:d3:0c:
                    f7:89:c9:f5:14:1d:2f:c0:12:b6:bb:6f:03:2a:2b:
                    01:27:90:6e:0f:74:8c:6a:9d:fe:8f:dc:c4:fa:5e:
                    d1:b0:8f:0c:c3:60:11:13:02:6a:31:82:f9:fe:2d:
                    d7:fe:ec:a8:8a:db:5d:a5:23:df:c9:43:7e:04:5f:
                    55:85:cc:2b:4e:60:0a:cf:1d:9a:ae:0b:77:d5:fa:
                    25:88:8d:c1:3d:c8:24:67:78:0b:74:09:53:67:6e:
                    60:3f:76:cf:97:65:fe:a0:81:10:9d:52:cf:a7:1a:
                    c8:49:94:0a:c3:6c:89:01:09:2b:3d:f8:7d:16:98:
                    ae:3b:37:d0:e0:a1:ad:ba:3d:eb:bc:93:5b:47:41:
                    f7:05:33:23:f5:a9:e0:2b:be:05:b3:33:69:88:00:
                    ae:ca:2d:5d:51:0a:93:a0:8c:77:d0:a4:fa:09:61:
                    b1:6b:3c:f1:67:25:d3:c0:71:07:53:6c:ba:95:75:
                    6e:5c:fd:51:ad:75:b3:a0:50:36:e6:3d:ff:4e:f2:
                    50:31:e7:88:7e:cc:cc:a3:92:d9:8a:95:07:e0:23:
                    c6:ef:11:8a:46:19:47:6f:9e:f2:1a:a1:6b:14:73:
                    25:fa:42:bb:22:27:0d:0d:fc:25:99:cf:c0:75:fd:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:C7:63:50:DA:D9:24:0B:3A:35:25:CD:D1:BC:F4:10:97:85:0B
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:91:06:eb:9b:43:97:4b:5a:04:b7:1e:c4:2b:02:22:22:70:
         2b:1f:93:65:7a:4d:d6:2e:74:08:25:05:cc:2a:86:e4:28:2e:
         8a:96:ae:ef:7e:53:ee:b0:4b:1b:58:13:7b:01:2e:a1:c7:36:
         c4:36:31:de:56:45:f2:b3:41:df:a6:01:17:21:fb:9d:b6:6c:
         b5:e1:12:7c:07:5d:45:ee:bc:35:fc:3e:5d:b4:46:ac:8a:ba:
         e6:81:e6:e2:94:34:7d:bc:d6:59:de:ec:b2:d1:2e:78:5e:59:
         9a:5a:f1:96:6f:7b:4d:41:2b:a2:86:9c:14:13:d0:04:be:8d:
         a5:68:0e:47:3d:3f:cd:39:a5:98:b2:ea:d8:2b:db:32:98:3c:
         04:a2:95:41:ec:8f:1c:83:dc:99:47:10:18:64:3f:96:42:f8:
         60:21:31:cd:67:b1:b5:c4:38:bc:e1:43:58:9d:41:6c:6b:44:
         a3:86:76:72:ea:47:a0:4d:c2:e0:6e:d2:8a:a0:5d:90:51:cd:
         e5:40:d1:52:1e:1e:f2:e2:bf:cc:7d:3f:cf:14:aa:05:65:9e:
         31:bb:1d:d1:ff:6e:f7:d7:86:80:99:26:35:34:7a:f8:97:0d:
         50:06:7f:83:f0:a1:5e:7c:6d:50:e7:f9:80:82:65:19:b3:ee:
         e4:f9:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:37 2026 by rpki-client