Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File:                     C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier:          tHvrqBhbWndNsOIM3twaz3WU1cxNFUJ1mWNIqCRBRoo=
Subject key identifier:   F9:A9:F7:63:BD:A4:7F:0F:33:10:25:AB:C0:C1:50:05:97:95:0F:08
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer:       /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial:       019D37BFFF4FFAF664F19E81915A7450C935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number:          0F6E
Signing time:             Sun 29 Mar 2026 04:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:22 +0000
Files and hashes:         1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: JoePlfxjYXyiCI6sqFpfhuN3dUKQZlD/57+3sb0WgHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:bf:ff:4f:fa:f6:64:f1:9e:81:91:5a:74:50:c9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
        Validity
            Not Before: Mar 29 04:00:22 2026 GMT
            Not After : Mar 30 04:00:22 2026 GMT
        Subject: CN=f9a9f763bda47f0f331025abc0c1500597950f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:7c:54:8a:de:eb:b6:70:ef:34:d6:a6:80:
                    22:14:45:f0:8a:a0:b8:7b:bb:89:b1:4b:aa:d6:13:
                    53:cc:b6:7c:28:e7:ea:e8:0b:69:29:0f:48:25:0e:
                    8f:05:12:84:6f:64:71:e1:aa:b8:a6:86:10:d5:06:
                    b4:4d:a4:62:04:ad:d1:b1:db:53:63:bf:8d:99:5a:
                    6e:4d:fb:7b:aa:dd:12:43:95:cd:71:58:17:d4:d0:
                    f3:4f:dd:5c:16:7a:35:4a:f2:c0:be:41:56:ed:b9:
                    d2:d9:6a:56:31:ae:3d:ce:3f:3b:73:44:ef:1c:f7:
                    42:9a:d6:7f:46:43:de:d6:19:7f:9d:ff:ce:14:38:
                    68:de:5e:e2:8b:4e:b8:c9:cd:31:57:2e:8c:74:7b:
                    20:0f:c0:70:10:51:54:ae:9b:b4:13:be:8f:16:1b:
                    b4:fb:06:2a:6f:11:56:10:e4:40:54:4c:f4:f8:15:
                    c3:37:10:a7:db:bb:7b:56:e1:07:8b:db:92:49:3c:
                    49:19:00:13:1b:bf:ca:03:0c:75:cc:f8:9f:ac:9e:
                    45:3b:b4:77:8f:6d:ff:82:a0:09:6f:96:0c:ba:62:
                    2a:1e:55:c1:6b:63:74:95:01:4c:48:f4:68:c2:06:
                    c2:b6:3f:d1:f1:22:db:b3:93:7a:a9:08:ab:7e:46:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A9:F7:63:BD:A4:7F:0F:33:10:25:AB:C0:C1:50:05:97:95:0F:08
            X509v3 Authority Key Identifier:
                keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:29:cb:27:95:1f:ee:f7:fd:2c:7d:9b:70:68:4d:e3:c8:
         0e:ab:ba:eb:c0:47:66:24:53:31:b8:b2:19:f0:41:57:91:9d:
         ec:da:9a:c2:99:e2:1f:60:9d:68:4a:f3:d9:7a:02:7d:9f:fd:
         cc:b0:be:a1:aa:b9:a9:75:ba:44:b8:a1:d0:e7:b0:8b:f2:71:
         d0:5a:9e:00:e1:df:33:0e:0c:10:64:ae:de:3e:5a:4d:32:a9:
         9d:ac:7a:44:e3:1d:21:3e:70:21:2d:96:9c:d7:fc:e0:ed:2b:
         82:22:54:1c:e0:0b:de:0b:be:ac:56:f0:6f:d8:f9:fc:58:85:
         de:43:d4:0f:7f:fd:be:1b:b2:7b:38:44:40:38:8e:15:bf:e6:
         44:19:15:71:a6:eb:18:71:81:05:11:c7:bc:f6:c8:b5:f3:40:
         fa:03:50:ec:40:46:d6:cb:eb:67:e7:aa:dc:c8:83:3b:0a:e2:
         db:6f:a6:35:78:2c:4f:c0:c6:d2:12:96:2f:05:b8:66:c1:ab:
         40:b0:81:78:3f:bb:46:4a:c4:9e:3a:25:61:8d:d0:1e:59:c5:
         78:7c:67:49:3f:0c:c2:2d:4b:76:97:41:65:c6:31:8a:69:bc:
         72:35:25:34:36:5a:9a:f3:b9:c1:63:6e:69:e8:c2:ee:fc:bc:
         b4:23:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:16 2026 by rpki-client