Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File:                     6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier:          cxXT2UtQ7SeIe0qnu3/bxt239o7XiBiMQxhLJWHbCPY=
Subject key identifier:   6C:16:7A:15:1E:C1:87:A0:5F:1E:FC:76:50:55:66:DB:72:CE:07:18
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer:       /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial:       019D38659F764B59F44E69927FF7476FD618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number:          0916
Signing time:             Sun 29 Mar 2026 07:01:17 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:17 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:17 +0000
Files and hashes:         1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: Av1nPxCsmevH3cph4gu9kxf5VPKiVLxt4pTF32Lbt7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:9f:76:4b:59:f4:4e:69:92:7f:f7:47:6f:d6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
        Validity
            Not Before: Mar 29 07:01:17 2026 GMT
            Not After : Mar 30 07:01:17 2026 GMT
        Subject: CN=6c167a151ec187a05f1efc76505566db72ce0718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6a:63:46:5a:8a:7f:0e:4d:6c:85:44:8e:01:
                    87:ae:c2:e6:34:de:ac:aa:58:ee:f3:16:40:34:09:
                    d5:4b:ab:2c:27:db:77:e1:0c:a3:96:35:00:10:fe:
                    07:3b:9a:00:29:0e:8b:18:73:32:fb:93:3a:45:bf:
                    b1:2f:3a:36:f1:4b:50:18:42:da:3f:0a:b0:7f:0a:
                    7b:f2:f6:7a:37:86:13:6d:6b:99:b5:93:a4:4f:38:
                    3f:21:27:d1:39:a9:c1:fe:77:12:89:3e:79:ba:1d:
                    cf:d9:1a:8f:b8:3c:b9:70:d3:8f:87:87:a4:6a:52:
                    bf:56:f9:4d:62:0a:4e:98:dd:e2:98:cf:d5:84:d9:
                    a1:71:1e:40:c2:73:62:7c:c0:4b:fb:51:53:76:f3:
                    f2:31:1e:38:92:1d:6e:fd:d6:1a:63:fb:99:9c:a3:
                    e5:3b:22:0d:c1:b6:38:2a:fe:09:f0:07:39:97:a3:
                    9b:e5:0a:40:66:b8:4e:9c:da:4e:c0:3f:c3:65:2a:
                    dd:2a:da:b8:e7:04:b0:b0:6d:66:0d:b1:56:92:da:
                    5f:fa:76:aa:d6:8e:b2:9d:c6:9c:65:6e:46:7e:31:
                    25:ac:50:b5:0a:03:a0:1d:8d:0d:73:cd:bc:bd:c0:
                    1f:fc:3e:4a:cc:7a:b9:d2:2a:60:a6:02:73:d5:e0:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:16:7A:15:1E:C1:87:A0:5F:1E:FC:76:50:55:66:DB:72:CE:07:18
            X509v3 Authority Key Identifier:
                keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:28:48:39:2b:ee:27:5a:ab:2c:69:cf:8b:34:b8:b4:fd:39:
         a4:d6:a3:0c:c7:8e:00:13:f3:3f:ef:08:64:c2:90:21:a2:77:
         6d:9c:b8:16:52:76:21:10:cf:e0:c2:11:e2:ce:a4:16:76:b8:
         70:22:bc:b4:52:3f:eb:4f:e4:53:de:31:9d:37:0f:28:a8:53:
         44:db:23:b0:b8:8e:6c:51:84:4a:61:3b:b5:e0:69:a5:2c:24:
         7c:94:ff:43:1c:06:6d:40:e9:f2:01:df:30:17:f2:4f:3b:4f:
         66:ee:2d:bf:37:41:9f:f1:e6:2f:47:40:e8:52:fb:57:4a:46:
         6b:7f:09:35:3d:3d:02:6f:b7:4c:b7:f1:f0:3b:45:b7:dd:50:
         d3:68:9f:4f:15:89:af:04:c5:b7:b9:a6:25:8f:44:a2:27:47:
         95:61:d6:7e:38:a7:df:65:ae:3e:49:16:dd:64:44:bc:83:71:
         19:aa:30:6c:cf:64:c3:94:97:f0:c5:a1:23:96:9f:37:da:9a:
         9e:e2:5f:65:dd:14:7d:58:be:70:96:21:e5:a4:27:71:cf:6b:
         f9:b6:26:3d:75:c5:48:e6:30:21:f5:8e:75:de:89:14:49:9d:
         78:c9:a4:56:48:01:3b:7d:6b:45:77:b6:5b:34:df:71:8b:d2:
         4b:7f:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:34 2026 by rpki-client