Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
File:                     6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json)
Hash identifier:          PEQ3pk7QwfdVnyFJj2+dbUn7ziwXRvX7NfQRARZM3G8=
Subject key identifier:   A5:05:41:4D:3A:AA:98:88:2F:F9:AD:7D:81:4B:16:0F:8E:B1:8F:9A
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Certificate issuer:       /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial:       019CABA25DCE282D8508DFFB7D1807D8F5D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
Manifest number:          101E
Signing time:             Sun 01 Mar 2026 23:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:10 +0000
Files and hashes:         1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: 6y3F6JYZpwIW0+J/JTXs3wMipP0nR58Gp7G2Hs0vHuc=)
                          2: j8NRcneTJ0erjUoC8sEq4kTQQnI.roa (hash: jexHV1h3hwT59/VOtHkOcyrNIXBETEJ/OwCKAiLIB9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:5d:ce:28:2d:85:08:df:fb:7d:18:07:d8:f5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
        Validity
            Not Before: Mar  1 23:01:10 2026 GMT
            Not After : Mar  2 23:01:10 2026 GMT
        Subject: CN=a505414d3aaa98882ff9ad7d814b160f8eb18f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:e8:a4:4e:d5:59:1a:07:2f:3e:10:2f:5e:
                    b4:0d:a1:b5:ec:38:a9:e9:fc:39:f5:f0:42:d7:6a:
                    21:29:1b:98:9c:57:8c:45:0d:b0:31:ed:6d:ba:dd:
                    76:a4:ad:af:89:6f:19:3a:86:bc:9b:69:80:3f:79:
                    45:67:71:d1:e9:d0:9d:3e:32:da:f5:10:7a:f9:2f:
                    a8:dd:02:94:ae:32:33:6f:12:fd:bf:a7:95:a1:8c:
                    01:f8:f0:62:43:61:14:73:7d:87:88:74:ca:8f:36:
                    31:3d:2e:2d:30:e1:60:6d:59:b1:84:54:c9:fa:d6:
                    44:c9:e4:f0:09:44:63:56:de:8e:9c:12:50:d6:35:
                    5d:2d:3d:3e:2d:2f:f9:eb:14:fd:f6:80:40:25:81:
                    1e:71:57:05:6c:59:c5:04:9b:67:52:78:c1:17:2b:
                    fb:40:4d:bf:f4:d8:d2:db:3b:09:60:96:b9:b2:94:
                    20:ac:9d:97:1b:97:81:d5:15:e5:67:00:4f:38:46:
                    1e:d2:e6:60:11:d9:14:fb:e2:9e:1f:be:22:c7:97:
                    1e:68:ee:b4:ea:f2:12:4a:0d:ac:5e:2a:95:21:a8:
                    ce:fd:89:21:53:ef:7f:ea:6e:71:d6:60:52:09:96:
                    6f:84:3e:d9:01:da:c6:d7:87:fd:0f:aa:a0:52:2e:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:41:4D:3A:AA:98:88:2F:F9:AD:7D:81:4B:16:0F:8E:B1:8F:9A
            X509v3 Authority Key Identifier:
                keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:96:df:84:b8:3f:ae:02:b1:84:7f:90:0f:1b:20:d0:5c:ed:
         fa:40:56:db:b1:40:04:01:d8:d2:f0:d3:0d:49:92:62:a7:d5:
         53:dd:c2:5b:d6:67:5f:a6:8f:77:f6:d7:00:b9:fc:29:6c:fa:
         e5:ba:60:13:73:4a:04:ad:11:2a:0e:13:27:ec:8b:27:b2:31:
         b5:2f:dc:bf:02:10:fe:9c:54:ef:7b:66:57:18:84:d3:98:58:
         2a:ce:c5:ca:e8:7a:6f:5a:3b:bc:b4:77:ee:88:d1:d8:59:9b:
         38:af:34:d9:50:77:8b:49:91:5b:b5:4f:8f:1a:30:b8:ab:f1:
         15:74:32:33:c4:26:28:00:56:cc:b2:80:0d:a8:1d:d8:76:61:
         3f:d7:62:97:8b:9c:fb:ac:ba:bf:60:4e:50:cb:30:ea:1e:e8:
         d6:df:d2:b4:b8:8f:34:79:e6:c4:d9:f3:ae:c9:af:8f:10:e5:
         80:d2:51:0c:38:80:33:ff:70:43:80:f5:d2:b7:66:c9:25:36:
         d6:9e:a1:d3:7a:84:3d:90:1f:1b:44:42:56:02:7d:9f:42:ff:
         bd:1d:ce:66:2d:f4:8d:28:b0:aa:ac:7a:75:df:cf:f3:d2:30:
         f8:fd:78:6d:4f:8c:cf:30:ca:03:7a:a0:70:ab:d5:cc:0e:8e:
         b5:71:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:24 2026 by rpki-client