Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File:                     SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier:          j4eSK2sG6ZThi0XT+8j66TdrsEXgavg2y1VqnuTO7jg=
Subject key identifier:   79:D7:E1:C7:EC:07:56:CA:CB:D6:35:50:10:74:30:C7:53:74:8B:BE
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer:       /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial:       019CAC1047093FC57C529B22F76778EB788D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number:          0768
Signing time:             Mon 02 Mar 2026 01:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:13 +0000
Files and hashes:         1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: 6VIq3jSzBoJ/sU2aX4eCYewo4a7dkbRGwXTIfJTRW18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:47:09:3f:c5:7c:52:9b:22:f7:67:78:eb:78:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
        Validity
            Not Before: Mar  2 01:01:13 2026 GMT
            Not After : Mar  3 01:01:13 2026 GMT
        Subject: CN=79d7e1c7ec0756cacbd63550107430c753748bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:ef:e3:eb:8f:d6:f4:32:3d:1e:fd:43:e6:
                    f4:80:54:e1:60:8b:fd:86:1e:98:70:8f:fd:5e:d9:
                    5d:ad:ee:78:28:0b:12:03:14:e6:ea:45:69:6a:8f:
                    ef:41:f9:7c:4f:64:6b:9e:c0:c2:90:32:fc:7a:81:
                    60:80:04:93:97:47:af:71:b5:c4:f4:35:e4:2e:15:
                    8a:a1:36:d4:6e:a6:28:bd:8c:80:20:d7:91:b9:9d:
                    24:4d:6c:9f:5c:d6:25:4f:00:bd:88:00:6e:ad:ad:
                    6a:e1:2e:a5:55:a0:24:7a:68:8a:21:50:14:00:c2:
                    1c:1d:60:f0:64:50:42:a1:6f:9b:de:e1:06:0b:94:
                    a7:e8:3e:b6:96:6f:4f:7e:6a:26:07:94:be:80:88:
                    5d:bd:51:17:ff:eb:e8:af:66:3e:b6:76:e4:1c:b7:
                    93:e5:42:63:d0:89:67:1b:7c:bb:0d:f7:20:f4:f4:
                    2c:4a:30:bc:dc:b9:49:b2:e3:2e:82:90:e7:6f:12:
                    77:bb:3e:8a:c6:29:5c:8f:89:7e:9b:89:d1:73:b3:
                    8a:48:b7:0d:a4:95:89:99:d9:43:6b:25:7e:e6:15:
                    58:3b:83:53:03:d5:a1:b3:64:d0:3c:2d:8a:cc:b2:
                    1e:21:11:3c:8a:44:ee:8b:f5:e4:08:09:69:90:8f:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D7:E1:C7:EC:07:56:CA:CB:D6:35:50:10:74:30:C7:53:74:8B:BE
            X509v3 Authority Key Identifier:
                keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bf:f6:46:9e:b3:40:ba:6b:de:2b:f5:e7:87:d9:8a:7b:ef:
         e0:24:97:52:62:f5:32:d0:84:d3:9e:02:86:c2:25:9c:04:f4:
         35:18:8b:e4:f5:7c:62:8c:91:91:c1:c4:cc:fc:06:6b:a8:20:
         c6:80:76:4c:34:08:31:17:45:28:86:d5:c1:2d:6c:83:26:6c:
         e8:02:7e:1a:a2:df:5a:20:2b:36:63:a5:35:7b:7d:ff:9a:d1:
         31:39:d8:2a:8f:c9:0e:43:00:77:d1:b5:e3:18:1b:dc:2c:62:
         3f:41:34:d6:f0:6c:54:b9:c3:ec:04:aa:8c:76:ae:f4:c2:79:
         36:6c:c4:0e:97:79:71:b1:59:ee:7d:3b:c9:f1:a0:6c:87:95:
         8c:f1:91:9b:91:8f:13:c6:10:f0:38:1a:72:a0:73:57:94:ba:
         fa:37:08:ab:5a:51:9c:2e:10:8c:cc:12:fd:ee:b0:4e:7d:6d:
         1d:35:8d:de:87:87:23:bd:89:0f:80:0f:39:d9:b3:98:e3:49:
         b5:26:b4:b6:7c:1c:a3:80:c7:72:0c:53:12:9c:d8:09:7d:e5:
         3b:d8:13:0b:09:5e:8d:b2:85:e5:7d:ce:c0:06:7d:59:bc:3f:
         f2:c8:b6:52:3c:c2:23:7e:35:ed:3e:77:1a:8c:06:9e:45:90:
         5c:11:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:42 2026 by rpki-client