Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          eKa0ge2EdBWLc9ZjVlgvTxoyLX5jacHI/x2vMm42M5w=
Subject key identifier:   9D:14:90:FA:87:62:53:A3:5B:F9:AF:B9:02:30:22:11:4F:1F:1E:5D
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       5DCF1CFC9A435CF5FEEBB160D4671746096B39DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          03EC
Signing time:             Sun 01 Mar 2026 19:55:46 +0000
Manifest this update:     Sun 01 Mar 2026 19:50:46 +0000
Manifest next update:     Mon 02 Mar 2026 21:20:46 +0000
Files and hashes:         1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: gepmSEzkNcdXPHTBEGWuR6LwMphcSMOSMGzPuIWzgiM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cf:1c:fc:9a:43:5c:f5:fe:eb:b1:60:d4:67:17:46:09:6b:39:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Mar  1 19:50:46 2026 GMT
            Not After : Mar  2 21:20:46 2026 GMT
        Subject: CN=9D1490FA876253A35BF9AFB9023022114F1F1E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:30:d0:43:86:c3:c7:2f:eb:2b:a5:f9:8d:
                    ed:fb:f9:92:e1:20:b3:c5:cd:7c:f2:2a:71:4f:12:
                    35:bf:ba:b6:72:97:c7:c2:24:ac:5c:ed:e2:50:49:
                    32:2e:51:01:3a:a5:a2:22:d0:1d:88:b7:93:aa:a7:
                    a3:b4:da:74:fd:44:fa:3a:3c:9a:0f:27:dd:1e:9c:
                    a5:3b:68:37:45:1b:4d:94:28:94:84:8a:6d:e6:f4:
                    d4:b6:14:e8:2a:75:d7:b3:6a:00:e6:bb:6a:19:10:
                    50:3d:3b:58:63:e6:9b:0a:15:2b:f7:65:e9:15:5b:
                    67:67:67:8c:b5:d0:b8:13:a8:70:0c:05:24:49:67:
                    47:5c:d2:12:2d:79:54:36:82:4c:2c:92:ca:66:13:
                    1f:18:a6:21:6c:6d:94:d4:3f:be:27:dd:5f:8c:90:
                    e8:d9:f7:44:bd:26:10:43:30:d2:bc:d2:b3:5a:8e:
                    f4:e3:33:77:61:2d:7a:bc:01:b1:89:4b:18:a0:5d:
                    b3:a9:ab:eb:03:3c:14:49:c1:0b:99:26:aa:aa:4d:
                    02:d2:00:70:6f:eb:4b:c9:18:a6:f5:01:e7:8b:1e:
                    58:bf:69:e3:f4:00:79:7e:64:fb:16:ea:13:0c:44:
                    26:d7:58:94:04:d9:de:17:3b:bd:48:71:df:0f:8c:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:14:90:FA:87:62:53:A3:5B:F9:AF:B9:02:30:22:11:4F:1F:1E:5D
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5b:12:41:2a:7a:27:8e:a2:13:6c:b4:aa:58:8e:c2:ed:28:
         79:9b:b9:16:85:90:c5:88:85:c6:99:23:3d:37:b7:2e:8d:34:
         dd:a8:eb:24:66:c5:3c:6c:da:8d:33:c5:16:3c:31:c1:dc:49:
         28:14:8a:76:57:01:b0:bd:d2:87:2c:69:b3:fc:19:f9:5d:1c:
         d3:1c:96:8c:61:8a:99:41:6c:ca:64:8d:26:c6:93:d1:cc:18:
         52:bd:03:c0:fb:bc:3c:71:6a:e3:19:40:b4:cf:24:bb:f9:5a:
         27:e3:6f:26:b9:b5:ef:60:de:91:09:2f:51:56:a4:82:67:1d:
         d3:d5:7a:83:73:23:23:a8:28:f1:8c:81:b2:32:00:d6:a7:65:
         9b:a5:6e:79:ff:80:b1:51:b8:85:01:8b:26:2f:62:f1:68:f8:
         a3:60:82:8f:69:99:6d:43:f7:38:8f:ab:b5:f3:4d:79:16:40:
         c3:9b:70:4c:7f:ee:3a:59:50:a5:60:f8:d3:18:54:7d:07:fa:
         bf:66:6c:ee:40:ae:62:48:92:c8:15:e0:0d:01:15:2e:be:19:
         39:b6:b6:c8:aa:d4:d3:74:67:8a:9f:dc:cf:f2:8d:f8:ce:df:
         c3:c0:c8:55:0a:c6:30:6b:0c:da:d2:0d:6e:e7:e9:74:ad:98:
         0b:1c:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:29 2026 by rpki-client