Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          0g8FE8NMkxIYzwYGrhkwls9JfEEHLcC3tfqTxQed4Zk=
Subject key identifier:   26:9A:CB:6E:17:4E:8B:4C:F1:66:BE:F9:00:2B:D3:23:52:7C:1F:4B
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       74F1219EFDEBCAF4A7AD330E71386DA4908D1AAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          0450
Signing time:             Sun 01 Mar 2026 18:20:26 +0000
Manifest this update:     Sun 01 Mar 2026 18:15:26 +0000
Manifest next update:     Mon 02 Mar 2026 18:55:26 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: +XTkHm5/b4Daira7AteAYMOeujoqcKtt0op5FOzUp3A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f1:21:9e:fd:eb:ca:f4:a7:ad:33:0e:71:38:6d:a4:90:8d:1a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Mar  1 18:15:26 2026 GMT
            Not After : Mar  2 18:55:26 2026 GMT
        Subject: CN=269ACB6E174E8B4CF166BEF9002BD323527C1F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:c6:e2:fc:c1:69:1e:e0:84:5f:a2:9b:9c:
                    fd:bd:26:6e:6e:7f:fe:df:23:bc:59:5f:50:55:6d:
                    7a:25:b5:03:6a:fa:18:46:09:19:24:87:d5:51:1a:
                    f3:a3:fb:4a:46:c1:39:91:ab:ce:ba:12:90:f6:9d:
                    58:3d:dc:b5:60:98:45:4a:c0:c0:e9:a9:85:40:8d:
                    3f:b6:c8:4e:0f:ed:ee:af:77:d6:95:8d:11:c7:14:
                    5b:a8:06:2e:71:84:30:15:77:ee:01:da:f6:c6:49:
                    04:73:e3:a4:fe:96:d8:2b:e9:56:8b:fd:59:05:5e:
                    fd:2f:22:b2:16:12:eb:9a:95:4a:1e:d7:81:9c:b4:
                    95:10:c7:59:a9:1e:58:2e:17:9a:25:c6:5a:d2:fe:
                    c9:a4:29:fe:ec:b5:90:60:45:ac:f9:3f:17:fa:ef:
                    83:80:6f:bf:f0:71:9d:7f:1a:90:53:a0:af:17:8e:
                    bf:4e:3f:46:e1:cb:b5:32:ad:8c:65:c5:fd:24:57:
                    47:38:cb:7f:c7:80:fe:c7:9b:6d:a7:e3:f2:dc:c5:
                    47:28:d9:60:55:ab:69:4f:bb:d5:64:0b:ce:af:53:
                    fe:63:64:f9:e4:41:4e:42:a9:3a:8a:f6:d1:04:67:
                    73:fd:71:14:4e:35:0c:f8:f0:5c:d6:0e:b9:00:4b:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:CB:6E:17:4E:8B:4C:F1:66:BE:F9:00:2B:D3:23:52:7C:1F:4B
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:08:1e:55:13:0e:33:c8:93:d7:c9:12:aa:e1:0a:bb:59:02:
         db:8b:19:32:47:d0:c3:5a:80:59:dc:02:f4:b7:db:83:09:06:
         b5:98:05:c2:f1:72:d4:25:4a:a1:58:3c:5f:fa:01:79:70:55:
         e0:ee:91:9c:68:de:98:cd:11:70:14:20:ec:ad:c9:47:ce:5a:
         ed:77:d2:5d:b9:00:34:35:3a:16:e9:08:08:49:81:3a:50:60:
         22:0b:04:b5:8c:e3:a4:30:68:88:d8:cb:9f:af:f5:fd:51:6a:
         7d:53:a0:67:05:b7:10:87:77:ee:44:0a:f1:5d:7f:b2:0f:ab:
         58:db:ba:6a:e1:fa:ee:c0:57:ca:9a:be:4b:e4:e5:dd:1a:82:
         5a:8f:cf:7e:16:1a:1a:c2:e1:47:e0:e4:95:16:1d:7b:02:9a:
         e3:c2:b0:45:11:4e:01:2a:e4:86:ce:a1:9b:a9:a0:04:34:82:
         e9:78:9b:16:a6:7f:96:b4:38:c4:2a:b0:62:fc:bc:f4:5a:80:
         e3:16:09:1f:6f:53:34:84:80:4e:35:23:d7:67:4f:c9:00:e8:
         cb:5a:4a:5b:ae:4a:df:57:eb:1d:42:72:be:9b:8d:4d:76:66:
         61:dc:68:f6:34:64:04:ce:e0:a7:66:99:23:71:d5:85:93:6d:
         ca:ae:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:53 2026 by rpki-client