Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
File:                     Pc6p140_H8L7NcKeWD2ytrYqvDk.mft (raw, json)
Hash identifier:          chdvLeGBh8AlRhoaoMl5h4NTtgkOHRmfuLlBdOJgceU=
Subject key identifier:   0D:A5:7D:27:3D:82:39:A2:04:16:97:66:95:3C:A4:39:49:17:69:F7
Authority key identifier: 3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39
Certificate issuer:       /CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
Certificate serial:       019CAB6BC695C4B7EE8C16E6EA3A3454DB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
Manifest number:          1227
Signing time:             Sun 01 Mar 2026 22:01:32 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:32 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:32 +0000
Files and hashes:         1: Pc6p140_H8L7NcKeWD2ytrYqvDk.crl (hash: PQEuqhZBFLJBVg0t90YOFEwhGWLNuqM4jh4RrZbzTJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c6:95:c4:b7:ee:8c:16:e6:ea:3a:34:54:db:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
        Validity
            Not Before: Mar  1 22:01:32 2026 GMT
            Not After : Mar  2 22:01:32 2026 GMT
        Subject: CN=0da57d273d8239a204169766953ca439491769f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:02:f6:a5:37:12:82:b4:17:dc:ab:3f:e5:
                    d2:3d:c9:3c:e3:d9:83:8b:e7:50:b4:30:46:86:62:
                    2a:03:b2:45:58:4d:f2:a8:55:63:50:b0:de:a3:28:
                    0f:47:25:a3:94:0f:3f:4d:68:ef:8b:c9:5f:53:88:
                    bd:f1:23:40:79:73:a4:b4:fc:2d:a6:de:4c:b1:08:
                    c2:b8:3f:78:3e:d1:1b:01:be:2d:05:5c:b8:25:8c:
                    60:ad:05:ac:48:9e:d6:eb:f0:d0:25:22:2f:4c:8f:
                    59:59:8f:28:f5:75:91:58:52:0f:2d:2c:b2:db:f6:
                    a4:ad:b5:80:77:71:e6:3f:38:e4:b9:e6:16:97:65:
                    13:0c:51:92:66:9c:a2:07:38:0b:75:b5:36:e1:b8:
                    ca:1f:98:41:cd:07:b6:45:d7:7d:d8:00:57:68:fa:
                    36:de:3b:32:53:c6:ae:92:9e:f4:f3:29:c7:4c:21:
                    1e:50:87:c0:3b:69:d2:ec:a9:02:85:62:ed:fe:97:
                    aa:68:f3:41:3d:5c:f4:77:08:d6:20:c9:7c:4f:43:
                    d4:98:b8:cc:99:36:4e:21:5f:c4:8c:5e:ed:ef:4b:
                    cf:6a:ae:70:66:b3:14:75:6f:de:19:71:57:ec:2c:
                    e8:d8:93:8f:a2:f9:fb:a0:bd:f6:f3:e9:d5:54:b0:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A5:7D:27:3D:82:39:A2:04:16:97:66:95:3C:A4:39:49:17:69:F7
            X509v3 Authority Key Identifier:
                keyid:3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:8a:1c:c4:db:03:86:a8:87:8e:c1:f5:a6:b9:8a:cc:70:
         94:69:25:c8:0a:b0:a1:46:79:59:d9:39:d8:d1:74:94:7a:16:
         45:d5:47:b1:48:33:de:a4:31:41:46:6c:f1:3c:9b:0e:b9:4c:
         92:e4:03:a0:6c:67:0f:b3:cd:4e:ff:b2:7f:06:59:37:e0:9e:
         d6:14:09:36:8f:79:19:1d:d6:8b:fa:c5:c1:09:9f:9c:06:1c:
         80:c1:3d:85:d7:8b:a6:50:af:6f:69:e0:83:84:c8:fb:e1:24:
         1b:68:ac:90:48:ad:27:f7:3a:23:f4:57:89:13:c6:2e:ae:17:
         fd:d1:ed:a1:95:df:6c:d0:cc:6b:1e:09:f6:7a:3f:b7:d7:c5:
         b4:60:12:99:36:d4:f4:12:df:4f:d3:bb:ee:fd:d0:50:e8:92:
         5f:36:cd:75:38:a0:d7:2d:63:d4:3c:92:fd:cb:dc:eb:c2:64:
         4d:e8:07:20:49:4c:a3:af:e7:af:3f:b5:dc:62:33:3a:25:7f:
         71:8e:14:71:13:b5:5d:47:59:30:98:b7:09:b7:ca:22:fa:2f:
         5d:ce:fc:d2:fa:5a:80:9b:77:99:01:18:13:1a:26:fb:c9:86:
         43:7f:80:72:a3:5b:63:d6:1f:63:c0:6c:b0:78:be:72:77:4c:
         df:3c:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:47 2026 by rpki-client