Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File:                     6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier:          Kfrx8YLu1EGccJb2O5CZl40+oeLMT5d639Wsbxz6dkE=
Subject key identifier:   4E:2E:D0:1C:77:75:6F:39:22:61:AB:61:29:35:78:F6:8F:0F:2E:21
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer:       /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial:       019CAC7E2A49BCD5DD2BA804986215C6F071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number:          05D3
Signing time:             Mon 02 Mar 2026 03:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:15 +0000
Files and hashes:         1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: /HOBDRFtIJYYBBdtJkRmZLvNl4iNRkx2ey28LQ8PdHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:2a:49:bc:d5:dd:2b:a8:04:98:62:15:c6:f0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
        Validity
            Not Before: Mar  2 03:01:15 2026 GMT
            Not After : Mar  3 03:01:15 2026 GMT
        Subject: CN=4e2ed01c77756f392261ab61293578f68f0f2e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:0b:af:79:b6:7b:e5:19:ab:26:7f:42:ae:
                    5b:de:f3:49:80:a9:8f:d6:50:f1:aa:e5:44:22:a1:
                    66:ed:12:e4:1e:ec:99:a7:1c:62:ed:d5:03:e9:5c:
                    c0:75:79:f6:f4:4e:34:06:a9:b7:da:ba:b1:0c:71:
                    b3:7c:ee:1d:87:c6:f1:73:63:41:9f:26:a8:0d:e1:
                    44:a4:90:68:28:0e:fc:19:b5:b4:d4:9d:66:b4:e3:
                    12:50:a3:2f:d8:9f:1f:c5:91:ba:23:ef:1f:f1:19:
                    ef:30:33:f6:b4:7f:ba:52:18:21:65:2a:4d:f7:19:
                    41:7d:7e:94:90:19:9b:81:36:86:b7:79:02:b7:17:
                    53:89:21:69:97:08:a1:21:95:5a:a0:ef:e2:78:b4:
                    ed:59:10:9b:20:21:b5:c8:6e:30:0b:ec:54:d8:14:
                    40:1c:de:12:69:68:38:a1:57:6d:80:42:0e:8f:d9:
                    8f:42:14:d3:66:e0:3d:15:d3:18:c4:77:8b:d8:07:
                    be:27:38:e8:ef:b7:dc:7e:1b:1f:7e:a1:6d:fb:64:
                    2a:08:d2:48:3f:98:95:cb:05:d5:57:50:62:86:3f:
                    76:46:93:43:00:7f:10:bc:00:55:cd:d4:bf:70:49:
                    8c:6f:8f:be:89:ea:93:93:c1:b8:cf:f6:a0:17:1f:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:D0:1C:77:75:6F:39:22:61:AB:61:29:35:78:F6:8F:0F:2E:21
            X509v3 Authority Key Identifier:
                keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:78:44:a6:a2:91:81:d4:4c:73:65:83:29:27:27:68:60:
         f9:3f:66:4f:a3:f2:84:89:9b:3c:4a:06:c5:db:d9:d1:4c:4f:
         25:05:03:0f:e0:ba:92:12:53:5c:70:77:6f:60:10:aa:e4:0a:
         12:17:3c:0e:99:bd:a0:63:4c:c0:17:bd:93:3a:b5:fa:24:ff:
         e9:c0:68:c1:52:f0:51:8c:98:d7:72:5d:c8:ef:bd:d9:02:29:
         46:2a:b8:c2:9a:51:ef:68:cc:c2:5c:aa:e2:4c:cb:3a:d4:86:
         f7:03:ea:f0:54:f0:5f:48:fd:99:1a:14:84:3f:48:d0:24:02:
         a3:e3:c6:ee:2a:23:d5:d4:e7:7d:bd:90:4b:f7:39:12:5b:df:
         aa:98:99:0b:43:bf:86:e7:44:ca:97:1b:b3:ec:75:0b:5b:dd:
         6e:16:60:0b:50:d5:47:5d:f8:b1:01:2e:8e:2d:97:56:9f:52:
         dc:75:c2:fa:c5:19:b3:96:81:c2:50:a1:6c:28:72:5f:4c:34:
         7c:d4:c4:af:55:6f:66:23:5f:ea:5a:4a:59:e7:b2:31:8a:8a:
         8f:66:7c:e6:4e:c9:43:b3:01:62:ff:a7:73:1a:37:2f:fe:63:
         e5:4a:18:e5:ae:77:59:6c:2c:e8:37:08:7a:2d:e4:6e:0b:9d:
         e1:0f:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:01 2026 by rpki-client