Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
File:                     P6xpra8ADdd6SwAYd8JYoh0f9qA.mft (raw, json)
Hash identifier:          w+2FlzeeBkr8OhkZfRrl2UyYU3aM7lq2h1CcAAJo2QU=
Subject key identifier:   D3:29:F9:54:43:F6:F2:13:6D:82:04:74:2D:DB:8F:A8:29:B0:ED:62
Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Certificate issuer:       /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Certificate serial:       019CAA8FEB90677E767C3588FBB12FECC0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
Manifest number:          1143
Signing time:             Sun 01 Mar 2026 18:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:24 +0000
Files and hashes:         1: 8D_ccDz42u65hn5tAyiWo2rvV-A.roa (hash: gCz0hnm5CuNzouguXR5BztNrJ9eKVm7fQbCynx2RDCw=)
                          2: P6xpra8ADdd6SwAYd8JYoh0f9qA.crl (hash: twccVsfpqX/TmX8OlyqYO+JTFH26+PkqiSnsgLSBUAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:eb:90:67:7e:76:7c:35:88:fb:b1:2f:ec:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
        Validity
            Not Before: Mar  1 18:01:24 2026 GMT
            Not After : Mar  2 18:01:24 2026 GMT
        Subject: CN=d329f95443f6f2136d8204742ddb8fa829b0ed62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:b7:94:0d:30:1f:b5:c8:93:11:4c:2c:08:
                    2e:54:3b:8f:c3:4b:3d:ad:af:64:35:4d:cb:8b:f2:
                    c5:0b:a2:18:9a:c6:a4:ce:d2:59:34:45:78:ab:b4:
                    d2:2e:f2:7e:24:01:80:63:00:db:2e:f4:46:d7:0d:
                    bd:81:fd:a1:2d:db:a2:47:bd:73:37:c7:2e:77:f9:
                    33:c1:5b:6d:7d:2f:6f:69:b0:e1:1c:56:88:13:ce:
                    d0:e0:2d:65:f4:ee:cd:fc:6b:7b:93:7a:6f:96:cd:
                    cd:75:c4:eb:54:eb:2c:9f:3f:5b:39:e4:40:e9:9f:
                    0a:2a:1c:53:52:51:4a:43:88:a0:05:0b:63:f6:71:
                    2c:3a:10:21:43:a6:f0:52:27:2e:1e:4b:a6:7e:59:
                    91:c9:c2:68:13:3e:6b:f0:3c:49:15:b1:65:f3:92:
                    76:2b:42:f5:24:93:34:ea:13:87:bf:16:29:50:6f:
                    86:c8:ca:e2:f3:49:4f:f5:44:39:53:2a:ff:72:2c:
                    5f:77:a7:7b:68:ff:9c:b1:d0:7c:5d:01:6e:c7:71:
                    11:65:92:aa:71:bc:ab:68:e1:97:fd:15:47:ea:2d:
                    82:f8:16:09:66:0d:d7:bf:f9:8f:64:92:03:e6:96:
                    ff:20:06:4a:14:8d:ed:50:7a:81:dc:16:77:37:1d:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:29:F9:54:43:F6:F2:13:6D:82:04:74:2D:DB:8F:A8:29:B0:ED:62
            X509v3 Authority Key Identifier:
                keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:43:53:8a:18:9a:ab:62:f4:19:31:3b:51:69:bf:d7:76:
         2a:8a:75:4a:66:1a:d6:17:5e:2b:17:0d:17:ac:de:1c:05:39:
         4d:c7:ef:5f:7c:7a:29:19:22:66:35:d1:fe:0b:ef:59:db:ee:
         52:12:72:a0:12:f4:d9:78:4c:c5:a5:4f:fe:0b:11:f7:79:e3:
         92:87:f0:56:50:ad:ca:d1:4b:3e:fb:46:a9:2a:7c:8b:2e:01:
         b2:77:c7:3f:76:a7:17:58:48:e9:f2:95:b3:02:ec:bd:6e:b0:
         45:72:ec:22:95:31:5d:64:91:ae:d1:33:4f:c5:8d:4c:b1:1d:
         01:64:e7:b5:91:8e:e6:1f:d2:09:69:75:26:0d:4f:be:2b:49:
         8f:c0:c1:d4:84:18:f2:20:71:ff:ac:94:cf:96:a0:21:09:8e:
         21:5a:5b:ba:88:31:41:52:a7:52:89:1b:bd:5c:d4:e2:31:0a:
         bc:1a:69:61:66:a5:d0:c1:66:8c:18:36:5a:b6:ab:e8:ae:e6:
         25:6e:7f:27:e4:d4:1e:1a:ab:3e:7d:59:0f:fe:ac:ed:1a:48:
         88:74:46:c8:fa:8c:18:9f:1b:70:f3:99:ea:f1:60:fd:91:1f:
         b9:c6:2d:6c:7e:b1:3c:5b:71:4c:40:30:b5:1e:ef:c0:79:fa:
         d2:22:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:37 2026 by rpki-client