Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          Lpqbvsf2TS5yfDNpasBcz/LnjwOvonKUbXXn96pjx2E=
Subject key identifier:   64:D2:6C:52:28:AE:EE:08:92:8D:C7:2F:C4:DF:70:84:54:00:74:C1
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       019CAA589726026637C746BD064AE7377031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0F27
Signing time:             Sun 01 Mar 2026 17:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:58 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: 8bS0TYXG/0g4WeEDgVlzLxCJACuVSmOtE6BFl4TTqTs=)
                          2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:97:26:02:66:37:c7:46:bd:06:4a:e7:37:70:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Mar  1 17:00:58 2026 GMT
            Not After : Mar  2 17:00:58 2026 GMT
        Subject: CN=64d26c5228aeee08928dc72fc4df7084540074c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9a:ea:09:ed:89:1f:42:b8:ac:72:d9:44:a0:
                    55:fa:16:0d:79:08:b1:ba:3e:01:69:dc:9a:0c:98:
                    84:73:6b:80:16:88:73:cb:78:45:bf:81:7d:d0:9a:
                    2b:07:1f:22:21:1b:7a:48:c5:9a:0a:e8:f2:a7:17:
                    c0:c7:c6:40:e2:70:49:cd:ca:50:87:9c:0e:c5:8f:
                    0e:32:f0:03:8b:e6:ee:12:98:88:dc:ca:02:64:bc:
                    1f:d4:88:54:93:ee:ff:f3:fa:10:56:a1:b0:7f:42:
                    79:03:59:17:b0:e3:70:32:ad:37:af:b0:72:38:4d:
                    23:d0:ad:47:37:ca:4e:d4:36:6e:70:c3:8b:b8:92:
                    7e:9e:68:6d:4c:ed:8d:80:98:d6:90:69:ac:c6:f4:
                    5a:af:fc:35:47:51:b6:cf:76:10:57:3f:18:87:6b:
                    fe:0c:75:ed:d5:e4:87:d0:b2:e8:c0:b1:a7:fc:06:
                    71:e4:5f:70:49:fc:32:c9:9a:fa:89:69:db:cd:c2:
                    61:11:bc:20:39:b1:68:2b:ca:68:fb:06:38:6e:ae:
                    85:88:5c:c5:c0:85:6d:2f:66:ae:93:64:19:55:6d:
                    f1:68:f5:ba:30:34:6c:c9:0d:11:2f:fa:96:8c:ce:
                    8c:b4:79:54:7c:a1:76:10:78:7c:e0:f7:e8:53:0a:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:6C:52:28:AE:EE:08:92:8D:C7:2F:C4:DF:70:84:54:00:74:C1
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:cb:f7:57:d4:ef:c9:43:a6:4f:85:98:f5:d0:1a:84:c1:
         75:bc:be:df:34:74:a8:2f:1e:e0:5c:8e:18:91:f2:55:23:67:
         28:43:f3:d5:d2:21:1e:4a:de:f4:b3:48:40:cc:56:12:25:c4:
         8f:e8:a6:9c:ea:0e:6b:97:7e:35:e6:49:bf:a8:25:74:9a:d7:
         73:59:23:68:e3:e5:92:62:52:04:c1:4c:eb:84:03:b1:9e:aa:
         15:09:9d:94:24:6b:33:fb:70:a9:fb:a1:f2:19:2a:30:10:e0:
         36:a7:fc:dc:8b:d5:b2:db:a6:7d:24:00:18:08:97:fc:6a:af:
         a8:22:60:93:dc:1e:46:3a:eb:01:3c:9d:4d:de:37:49:64:10:
         86:ea:e0:ff:51:06:55:f7:c9:f1:33:f2:bc:39:e4:3f:11:8f:
         b4:84:57:21:6a:00:87:af:86:0d:ef:89:69:72:76:ac:3e:db:
         a2:fe:4d:b2:9c:61:78:0d:54:d1:89:e1:a7:c5:39:50:71:a7:
         1f:02:a0:10:e1:29:2b:e2:af:f4:e9:cd:eb:5a:ce:7c:17:26:
         6c:d8:8e:46:6e:2a:c7:84:b8:55:09:b4:f1:3e:ba:5c:fc:3a:
         cf:b9:f8:ae:ce:5d:1e:92:77:60:2f:30:65:4c:02:71:49:f3:
         d5:04:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:04 2026 by rpki-client