Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
File:                     o6_aacqxv_Ujyj71dLh8oTD96iw.mft (raw, json)
Hash identifier:          qVT+xV6el48LBWCkMYhmHckUXfR+HBPeKNEfgzeMSzM=
Subject key identifier:   34:E0:F7:92:96:1E:45:3B:C7:1C:EC:0D:3E:C4:1C:47:82:16:E1:FD
Authority key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Certificate issuer:       /CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Certificate serial:       019CAB34B4DB0354035388FDD42BA56AEE4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
Manifest number:          113B
Signing time:             Sun 01 Mar 2026 21:01:23 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:23 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:23 +0000
Files and hashes:         1: o6_aacqxv_Ujyj71dLh8oTD96iw.crl (hash: SjbvQ98jdZ5qRbHddDbCEIf21QdxlIHLK3yifeofSM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:b4:db:03:54:03:53:88:fd:d4:2b:a5:6a:ee:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
        Validity
            Not Before: Mar  1 21:01:23 2026 GMT
            Not After : Mar  2 21:01:23 2026 GMT
        Subject: CN=34e0f792961e453bc71cec0d3ec41c478216e1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:e7:88:59:ef:3a:f5:fa:73:58:84:e4:6f:
                    f2:0b:bb:e7:f4:d2:2e:e8:66:71:ad:12:f0:da:d7:
                    0c:74:01:a6:3a:d4:63:6e:16:fc:b8:9b:f6:b1:0c:
                    f9:8b:d5:56:01:9d:87:c7:bb:3e:78:78:b1:90:81:
                    91:93:bc:85:e6:b3:8b:74:83:01:9a:b3:02:3c:d3:
                    d1:c0:ce:21:de:8d:fa:ad:47:4d:8a:87:b4:70:ea:
                    2b:30:32:ee:85:c3:8c:81:57:f9:96:56:9f:e0:0d:
                    de:80:23:6f:6d:46:c8:d5:c0:0b:7b:08:b8:43:02:
                    8a:a8:e3:13:d9:34:5c:7d:e4:48:20:5c:08:85:d6:
                    ba:ba:d7:9d:e7:d6:6c:16:a9:64:1b:64:eb:99:e4:
                    bc:18:f0:d9:81:a2:71:3a:df:5d:44:7a:7f:1e:2f:
                    7f:01:27:99:cc:7f:ea:28:4d:bd:ec:64:c8:49:bb:
                    2b:f2:db:9f:69:67:b3:3d:47:c5:bd:bb:31:2c:30:
                    fd:24:a6:e3:a9:96:18:ce:9c:7b:66:c3:8f:6c:88:
                    be:e5:63:d7:b9:31:55:1b:c4:e5:d7:c1:a0:df:e1:
                    08:7f:af:3e:12:d4:bb:e3:b7:0e:a9:62:8a:d3:30:
                    48:fd:4d:87:f3:3a:32:3d:26:f0:42:00:27:97:76:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E0:F7:92:96:1E:45:3B:C7:1C:EC:0D:3E:C4:1C:47:82:16:E1:FD
            X509v3 Authority Key Identifier:
                keyid:A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b5:2b:01:23:dd:93:be:f0:fe:80:67:2c:c5:42:25:28:cb:
         75:d8:c2:6c:87:6b:df:9d:3f:aa:5d:58:3c:69:c8:6c:4c:cc:
         50:ff:83:c6:58:df:45:0e:80:34:59:42:a8:ee:08:e7:7a:f4:
         39:6b:49:32:01:8b:aa:2a:dd:24:07:ff:8a:83:e8:7e:e8:4f:
         74:33:a1:16:a4:bc:6b:e3:8f:40:23:06:76:c7:7f:da:3a:a5:
         3f:ab:00:d8:2e:5c:d8:6b:22:c7:85:34:09:26:c9:0d:9f:04:
         b7:53:60:b8:9a:58:0a:28:37:99:a9:b6:db:8e:1b:54:71:88:
         58:e6:e9:89:4a:6e:f9:a3:b5:a9:7f:b3:4c:91:90:be:32:a4:
         23:8c:a4:07:a4:da:84:dd:29:cf:b5:7d:f1:0c:e5:4b:9c:a7:
         cb:bb:a3:81:fc:51:c2:7b:27:e4:4f:ea:5d:82:65:f0:59:4f:
         fb:04:2a:05:55:75:d2:2b:c1:71:c7:bd:de:42:2d:57:58:1c:
         1b:c9:48:f4:66:2a:f1:f1:33:c2:4a:53:32:00:15:5a:51:43:
         98:2e:0d:71:4d:21:47:b4:2e:2e:f9:c1:fb:8b:1f:4c:16:6e:
         0f:db:b6:02:32:83:83:8c:6f:9d:89:5c:8d:10:ba:e7:95:b0:
         46:d3:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:22 2026 by rpki-client