Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          KJe2/ZcoFgRgd4MFp5QigySh/czhShG3lT6WYUmDRDg=
Subject key identifier:   A9:E2:B7:35:93:A7:88:A8:98:7C:48:F2:40:A0:5D:E2:5A:7D:3A:E9
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019D382DDE485F7D630F27050C7FA65258E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          14A4
Signing time:             Sun 29 Mar 2026 06:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:23 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: rOlpNr4/f7VlvqFYtaaG8utjVPNrN2K6RaWzyIXLz+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:de:48:5f:7d:63:0f:27:05:0c:7f:a6:52:58:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Mar 29 06:00:23 2026 GMT
            Not After : Mar 30 06:00:23 2026 GMT
        Subject: CN=a9e2b73593a788a8987c48f240a05de25a7d3ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:d8:23:b8:f9:aa:66:84:fc:1d:0f:01:f8:
                    7a:ff:26:f7:5d:2b:75:c6:93:2e:12:42:d6:01:4a:
                    5d:a2:8d:8d:38:54:76:3a:ee:28:41:44:2e:52:28:
                    2f:ef:0f:cd:50:a2:cc:2b:56:89:58:16:d2:55:36:
                    ef:7a:97:e5:6f:a0:a2:27:d2:59:49:80:d0:b6:1b:
                    81:f8:76:6b:f5:18:9b:ea:a9:d7:53:6a:b5:96:00:
                    4b:d9:40:0e:5d:7b:43:1a:4b:73:fb:9d:6e:3d:38:
                    42:4a:47:5b:1b:59:0b:4f:fa:34:8c:f8:71:0a:08:
                    84:bf:e7:f6:16:cd:ec:bc:8a:32:7f:9a:93:92:da:
                    70:f7:45:20:e5:0f:7e:f4:6a:5b:af:f9:e4:26:dd:
                    85:42:5c:ba:22:cb:60:73:e8:9f:2a:7d:66:19:7d:
                    21:10:7e:02:2e:00:47:bf:11:4b:9a:71:9d:8c:da:
                    79:96:82:2c:ca:98:dd:90:17:f0:72:31:63:50:c9:
                    65:e4:50:60:88:7a:8a:7d:e3:7d:83:7e:aa:d7:c0:
                    3b:70:11:04:8b:3d:85:03:e3:c5:3e:eb:cd:84:e8:
                    ab:37:76:d6:25:b8:5f:74:c2:75:cc:47:38:94:cf:
                    73:23:d3:68:b3:04:0a:5f:31:eb:b8:b6:96:6c:8d:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E2:B7:35:93:A7:88:A8:98:7C:48:F2:40:A0:5D:E2:5A:7D:3A:E9
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:59:34:1e:7a:21:00:7b:36:f1:2a:82:88:45:1a:41:11:6b:
         6c:c1:86:8a:d8:15:c0:9c:ce:c9:7b:9f:e5:fa:7e:cf:98:f1:
         92:48:f6:90:5d:b6:c1:74:dc:16:5d:ad:df:45:59:8d:c3:a3:
         1f:d6:c6:7e:3a:82:e1:fb:46:69:70:c6:f6:60:75:51:fc:35:
         21:9c:69:5b:6a:b7:8b:51:8d:b3:ba:3b:57:5f:18:d4:44:9f:
         2c:5f:1d:20:4b:81:0f:ed:b3:65:a0:fb:a2:60:6f:7b:43:db:
         9a:d2:5c:cf:ec:a6:28:c5:5c:10:62:1d:92:5a:6c:b0:43:07:
         3d:55:59:31:ed:a7:0a:8f:f0:a7:6e:9e:49:79:d3:64:77:e6:
         9f:30:6b:f5:16:23:34:a0:a1:fe:bb:dc:b6:23:c8:ce:15:46:
         d1:8e:5a:7c:43:d2:99:3f:10:2f:5f:20:73:0b:d0:1a:e4:37:
         ff:54:a3:80:0d:d2:49:1f:b5:21:fb:f3:0a:b1:1c:44:3c:db:
         23:13:10:74:47:c0:9a:87:c3:66:1b:8f:7e:70:c5:79:58:87:
         a2:04:6d:f7:24:35:b2:03:d0:37:53:b9:07:ef:40:64:8c:ae:
         6a:7a:a3:df:b5:d4:58:aa:0e:60:2d:9d:96:82:79:2a:41:d8:
         57:2c:11:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ld5IX31jDycFDH+mUljmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGIzNWY1OTllZjFjMjZmMjQ5ODNmOTE1YTdlYWVjNjc5
N2M3ZmEwHhcNMjYwMzI5MDYwMDIzWhcNMjYwMzMwMDYwMDIzWjAzMTEwLwYDVQQD
EyhhOWUyYjczNTkzYTc4OGE4OTg3YzQ4ZjI0MGEwNWRlMjVhN2QzYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrvYI7j5qmaE/B0PAfh6/yb3XSt1
xpMuEkLWAUpdoo2NOFR2Ou4oQUQuUigv7w/NUKLMK1aJWBbSVTbvepflb6CiJ9JZ
SYDQthuB+HZr9Rib6qnXU2q1lgBL2UAOXXtDGktz+51uPThCSkdbG1kLT/o0jPhx
CgiEv+f2Fs3svIoyf5qTktpw90Ug5Q9+9Gpbr/nkJt2FQly6Istgc+ifKn1mGX0h
EH4CLgBHvxFLmnGdjNp5loIsypjdkBfwcjFjUMll5FBgiHqKfeN9g36q18A7cBEE
iz2FA+PFPuvNhOirN3bWJbhfdMJ1zEc4lM9zI9NoswQKXzHruLaWbI0LXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnitzWTp4iomHxI8kCgXeJafTrpMB8GA1UdIwQY
MBaAFOiLNfWZ7xwm8kmD+RWn6uxnl8f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjIt
NzcwNTk1MzYzZTY1LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjItNzcwNTk1MzYzZTY1
LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElk0Hnoh
AHs28SqCiEUaQRFrbMGGitgVwJzOyXuf5fp+z5jxkkj2kF22wXTcFl2t30VZjcOj
H9bGfjqC4ftGaXDG9mB1Ufw1IZxpW2q3i1GNs7o7V18Y1ESfLF8dIEuBD+2zZaD7
omBve0PbmtJcz+ymKMVcEGIdklpssEMHPVVZMe2nCo/wp26eSXnTZHfmnzBr9RYj
NKCh/rvctiPIzhVG0Y5afEPSmT8QL18gcwvQGuQ3/1SjgA3SSR+1IfvzCrEcRDzb
IxMQdEfAmofDZhuPfnDFeViHogRt9yQ1sgPQN1O5B+9AZIyuanqj37XUWKoOYC2d
loJ5KkHYVywRmg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:26 2026 by rpki-client