Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File:                     m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier:          IZKwaBdOd4od3msynjJF0b0Qh1ExOrlaRanMGtqdT9E=
Subject key identifier:   06:7F:46:A6:97:55:00:D1:2D:EF:60:A4:2E:FD:7F:2A:F2:46:B6:26
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer:       /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial:       019CAAC6780E1C847B40D8FFED9E57AA1D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number:          0BA6
Signing time:             Sun 01 Mar 2026 19:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:59 +0000
Files and hashes:         1: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: XNlodor72mSloDfGoDQx+EvebZjq88NWljdA1IcO/Ek=)
                          2: p9dEgpnuIv4GzvpyUtYj7YwfNkw.roa (hash: ntFwgx0BPmHacsG/x9Fir1C9rUhhUsKeoLiyXbUgSLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:78:0e:1c:84:7b:40:d8:ff:ed:9e:57:aa:1d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
        Validity
            Not Before: Mar  1 19:00:59 2026 GMT
            Not After : Mar  2 19:00:59 2026 GMT
        Subject: CN=067f46a6975500d12def60a42efd7f2af246b626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:65:91:a6:94:3b:be:59:a4:60:b5:ca:d4:
                    db:76:da:3d:e0:68:56:1a:f9:84:5d:f4:b3:c3:f5:
                    5f:62:ec:e4:b2:33:b4:84:55:c9:41:7a:73:ce:39:
                    32:c2:54:06:37:3f:91:39:27:58:80:1e:99:60:30:
                    68:ac:ba:06:a6:d2:0f:d7:6f:62:8f:86:ff:29:58:
                    32:5f:fa:7c:60:d1:ed:70:89:c3:8c:1a:b3:a3:05:
                    97:07:79:7f:cf:ce:f2:b8:19:97:83:d4:1e:cc:8b:
                    a2:7c:5f:42:0d:bb:78:f0:14:5c:2b:a7:7d:2e:1a:
                    f7:91:b8:10:8c:d5:08:95:c7:47:1c:c3:ab:ed:f9:
                    49:fc:30:3a:35:25:35:00:77:2f:5a:cc:f4:b5:56:
                    fd:e4:09:49:e2:22:70:42:8f:45:9b:af:ca:03:17:
                    08:24:43:dd:e6:f4:39:85:b1:03:ce:bd:3c:86:d0:
                    44:6d:f3:8c:0f:bf:cd:19:96:6c:12:3d:51:29:34:
                    e8:2b:dd:8f:db:34:73:87:65:2a:b6:c0:41:e6:97:
                    e1:c0:d6:ab:58:0f:11:21:dc:58:48:1c:2e:ed:1b:
                    e4:1f:fd:6e:40:14:9d:b4:9a:b4:6e:d5:85:a7:46:
                    17:93:df:c3:ef:a4:d4:98:7c:c8:f4:53:5a:16:d1:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:46:A6:97:55:00:D1:2D:EF:60:A4:2E:FD:7F:2A:F2:46:B6:26
            X509v3 Authority Key Identifier:
                keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:1d:2b:bc:52:c1:64:a6:58:b3:82:b0:67:6c:c8:e9:0e:
         2c:9e:88:b7:bc:2f:6a:7f:0e:fb:14:34:67:1c:2b:63:a1:e0:
         73:53:7a:a6:0c:39:8e:b2:38:51:42:fc:28:26:6b:5b:3a:18:
         5f:23:74:96:cd:cf:3c:dc:a6:44:0b:5e:39:9f:f2:c4:36:05:
         ad:41:ae:ad:84:7b:77:6b:1c:f4:ef:19:25:6a:16:af:95:09:
         89:85:1f:9b:6b:8f:c5:46:5f:d9:95:45:cd:b8:e9:de:2f:23:
         19:72:dd:7b:7a:15:40:fd:95:02:3b:9d:c0:1c:f0:50:7c:a0:
         fb:7f:05:bf:14:37:53:1d:88:28:cf:35:0f:e2:83:b3:b8:62:
         cb:45:60:ff:e4:0f:e8:44:22:22:67:b8:f0:19:23:eb:cd:09:
         26:c8:0b:4d:7f:63:9f:ae:cf:9b:ea:21:6e:a8:12:f3:8c:9a:
         e6:66:8b:54:67:fa:91:3c:6c:a3:09:db:14:af:06:6d:10:21:
         4e:30:3b:b2:45:d3:84:a1:9d:c5:47:67:d6:37:d9:6d:ae:09:
         c6:d7:4e:8a:66:8f:e7:d7:fd:d2:6b:ce:59:aa:d0:de:40:c8:
         56:32:4b:08:64:8a:9b:af:28:7e:68:05:94:8f:95:08:c4:aa:
         13:fa:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:13 2026 by rpki-client