Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File:                     6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier:          5j/+Jluf6lMbJlKfo8qiaiaOlP5y0QaMWpu7jhFQPhk=
Subject key identifier:   3E:04:3E:C5:16:E7:4D:FD:9D:7F:00:81:5F:58:39:3F:59:8D:0D:64
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer:       /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial:       019CAEA2F9312FE5F639731BF9701B3FEE4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number:          0791
Signing time:             Mon 02 Mar 2026 13:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:41 +0000
Files and hashes:         1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: dDEYt2SPJ6BTh+48pKiolSg2QeUBOHRgQ+R/2WwWwOg=)
                          2: evJpn_uhP0CfvPL00DkyDflggJI.roa (hash: bV9kL+d96gYalZ7ome+Dj8zLnrOvtqAnogknD9DHj3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a2:f9:31:2f:e5:f6:39:73:1b:f9:70:1b:3f:ee:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
        Validity
            Not Before: Mar  2 13:00:41 2026 GMT
            Not After : Mar  3 13:00:41 2026 GMT
        Subject: CN=3e043ec516e74dfd9d7f00815f58393f598d0d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:a4:50:4d:1b:d5:04:d0:13:e5:54:99:9b:
                    74:85:ba:d5:a7:54:d9:ff:d7:d5:6c:60:3a:61:1f:
                    86:8c:b3:d4:bc:f2:ad:47:75:b3:0a:4f:7e:cf:93:
                    a1:b2:dc:4a:3e:96:8a:d2:36:28:23:27:ad:2b:44:
                    4a:07:f2:87:76:df:41:90:39:54:c5:a8:7d:39:1b:
                    40:f8:e8:e1:ed:63:ba:8b:86:43:d6:7e:57:ad:ca:
                    30:f3:43:c3:b6:a5:bb:13:03:54:d7:0f:42:14:bb:
                    b0:82:d5:ec:35:e5:0c:0f:b2:4d:74:18:2f:41:95:
                    69:c1:d8:30:3d:0c:9b:7f:08:66:ae:fd:38:11:2a:
                    67:55:55:5b:22:c9:ef:00:44:7a:21:c7:bc:96:a0:
                    6f:0b:7a:ba:a2:a4:f4:6d:4d:c6:70:98:c7:db:6a:
                    bc:85:1d:58:a9:4d:4a:17:8d:22:f4:ad:5a:a6:03:
                    08:77:ff:a0:b8:78:a7:3e:58:0d:33:1d:b6:9e:9e:
                    58:e2:fb:65:b1:fb:d1:5c:b6:62:82:92:f7:79:d7:
                    99:13:50:17:fc:f6:93:8e:e2:af:b1:22:89:80:a5:
                    ff:df:a7:e3:57:8a:d6:06:d5:f5:92:7c:fc:be:18:
                    16:27:7c:e4:8f:11:89:9e:ab:62:2e:4d:4f:d4:3e:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:04:3E:C5:16:E7:4D:FD:9D:7F:00:81:5F:58:39:3F:59:8D:0D:64
            X509v3 Authority Key Identifier:
                keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:d9:8f:f6:86:99:53:03:34:05:06:d1:7d:62:65:bc:25:
         a2:5e:5b:4d:2c:0e:57:40:04:9e:e7:2e:93:61:17:8d:13:d8:
         9b:5b:7d:13:88:f3:9c:20:e2:47:fb:ce:d9:2b:ab:f9:67:ed:
         7b:26:c6:d4:43:b8:3a:85:f3:5a:88:83:50:c5:53:1b:df:72:
         21:0b:d1:6a:3d:c4:bd:95:6a:c4:69:f5:f9:e2:00:9c:e8:ba:
         b1:e0:d0:ee:1d:1c:c7:10:0d:ef:a6:99:10:8b:a2:70:2f:e4:
         87:89:a6:6e:e9:e1:b9:4c:93:e1:27:39:cf:2d:a1:61:7b:13:
         2c:b6:a6:03:17:b2:93:48:9f:97:44:1a:de:9c:66:be:0c:31:
         20:28:b0:88:2d:9d:7e:fe:84:a3:b5:4b:3e:e6:f8:87:b9:5e:
         a4:17:3e:95:6f:fb:c3:79:31:ed:1a:a1:38:c6:aa:38:4b:38:
         9d:36:92:63:b0:22:4d:1c:3f:4f:c4:c7:fc:7f:9e:92:99:5e:
         95:8d:47:d4:95:f3:83:50:d7:b4:ec:7e:c4:6a:a7:20:2c:56:
         df:91:ce:71:6b:91:7a:43:be:b6:3b:cc:32:7b:3e:40:73:75:
         05:61:7b:3f:70:1d:6f:8d:67:0a:6e:78:d8:c2:e3:cb:8d:61:
         87:aa:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:55 2026 by rpki-client