Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
File:                     6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json)
Hash identifier:          Y1T0bCMx27OfwHKeP0N5Rn3nozKGBjjJIWSsesN1Uck=
Subject key identifier:   23:53:BE:94:EC:A9:C3:1C:21:93:8B:B5:05:15:76:52:AB:E9:72:6C
Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
Certificate issuer:       /CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Certificate serial:       019D39AE74EA5A0E5110ECBFB985003E8A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
Manifest number:          01DC
Signing time:             Sun 29 Mar 2026 13:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:27 +0000
Files and hashes:         1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: ZqsMAcSZ7N3XIzF27tIYaX5uzLEzaGSxY2oOrk8YAOU=)
                          2: TCYoAFJaTqATlFl0u6eQAyMZXJ8.asa (hash: v+oV8YQrF1EVh7SFPiMT8Uf4NtlNNpd/LZU5zlH6PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:74:ea:5a:0e:51:10:ec:bf:b9:85:00:3e:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6
        Validity
            Not Before: Mar 29 13:00:27 2026 GMT
            Not After : Mar 30 13:00:27 2026 GMT
        Subject: CN=2353be94eca9c31c21938bb505157652abe9726c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:3f:4a:c5:05:97:51:8f:0e:2b:73:d6:2f:
                    8b:44:7c:60:9e:6a:e4:cb:b8:cd:cd:27:02:e3:7f:
                    8f:34:26:1a:92:72:03:f0:92:13:cd:3b:20:59:7f:
                    b7:af:46:2e:7f:46:88:1f:53:d0:a3:28:af:e7:a3:
                    d3:bf:15:45:e3:52:a2:5a:cf:8a:f8:9c:40:b7:5e:
                    60:25:32:0a:9c:ea:b2:af:20:61:7d:e8:fc:62:d6:
                    cb:19:9b:cf:2d:9d:8e:8c:f5:1c:5c:9d:a9:00:a3:
                    ae:04:47:0b:17:60:03:4b:38:f7:2f:3f:9c:bf:d4:
                    48:22:73:dd:26:ec:b2:e7:35:cf:54:8e:3c:0d:70:
                    62:35:57:f7:b1:79:b9:8d:92:aa:f6:45:b1:ac:bf:
                    5b:2c:5f:73:02:de:24:02:a3:05:93:3f:14:5c:bb:
                    d1:a4:7d:eb:cc:07:51:7b:a1:3e:0a:a2:3f:b7:cc:
                    01:8d:37:f0:b0:93:28:5f:cc:27:a8:09:4a:f7:24:
                    f4:83:24:d2:2f:19:cd:4e:5a:e3:3f:29:f5:9a:ad:
                    ee:b8:93:a8:51:52:41:d0:82:82:44:d5:7b:a3:f0:
                    01:7f:5c:8f:f5:bd:ba:e2:18:f3:23:1f:f7:9c:5f:
                    5b:d1:8d:f2:b4:e8:d9:e2:60:ed:22:0f:6e:ed:fb:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:53:BE:94:EC:A9:C3:1C:21:93:8B:B5:05:15:76:52:AB:E9:72:6C
            X509v3 Authority Key Identifier:
                keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:ad:8a:0b:8c:e7:68:f2:e4:29:94:ba:0c:99:a9:93:40:
         68:bf:90:0d:79:c1:4d:85:27:e6:2e:80:0c:f8:35:4f:11:00:
         27:8e:86:f6:78:c1:0a:b3:07:44:87:09:d8:07:8a:38:cd:7b:
         84:6e:16:ae:cb:52:ff:fc:95:bc:20:8d:95:8d:90:ef:ef:65:
         a2:ee:34:ea:c7:04:50:5d:d9:56:d6:5a:75:da:22:ab:ce:72:
         95:c8:09:a2:3b:72:45:d5:9f:3f:f7:07:a2:f4:41:e2:e3:de:
         37:d0:33:9c:48:74:b3:cc:e8:98:29:c5:ab:41:9b:a0:5f:45:
         b7:d2:20:f1:4b:bd:aa:91:d2:b3:d8:b6:c6:b6:e0:56:6b:ec:
         6d:86:29:fc:7f:d2:3c:57:89:02:72:04:2c:e5:e8:36:99:7f:
         d5:03:19:e8:1f:b1:b2:e9:2f:75:9a:66:c8:86:0b:6e:79:c4:
         0f:fb:14:4f:46:4f:f3:3b:e6:4b:28:fa:fa:20:1e:15:79:7e:
         6f:f6:18:a0:92:90:90:8c:5f:67:23:05:57:5d:3b:ce:50:70:
         20:3a:9b:65:de:9e:63:cb:47:3d:af:ae:61:32:0d:d6:49:c1:
         af:e8:1d:5f:fa:d7:93:74:ce:a1:10:04:07:9e:4e:3d:12:ec:
         0e:fc:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:16 2026 by rpki-client