Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          tEvK408YVSPYYOgthS5epdXgRScv8CdYMnykO9xfDwo=
Subject key identifier:   95:CA:CB:E4:AF:ED:96:21:B2:76:6D:39:DC:60:1D:1C:E0:30:D8:82
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       019CAB33DA9D9B96AAE6BDC67AF899E78EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          0F16
Signing time:             Sun 01 Mar 2026 21:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:28 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: tx2K4aqn5FZhR8Q/Wx5wxoOIvQVkkglkVr7ky6bPFJA=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:da:9d:9b:96:aa:e6:bd:c6:7a:f8:99:e7:8e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Mar  1 21:00:28 2026 GMT
            Not After : Mar  2 21:00:28 2026 GMT
        Subject: CN=95cacbe4afed9621b2766d39dc601d1ce030d882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:2e:85:a4:3c:d9:c7:e2:40:90:d9:a5:fd:
                    94:f7:ec:92:ea:5b:6d:a3:75:57:57:fe:11:ef:87:
                    a7:e1:ea:c2:90:ac:3b:a6:f6:66:d2:64:f1:b9:12:
                    81:10:67:2d:76:67:2f:0e:65:a8:2d:f0:55:d3:95:
                    e6:c2:e7:af:bb:50:3c:af:8e:30:d0:26:9a:ae:35:
                    52:94:e5:22:0a:45:90:48:75:1c:19:fe:c1:7f:6a:
                    3f:fb:b5:ab:cb:6a:f9:84:8a:fe:63:bd:d1:bd:7b:
                    d2:38:17:0b:94:6b:47:b0:2e:07:30:7c:06:97:47:
                    6d:a2:82:04:a5:5c:b7:0b:b4:41:35:71:a9:3f:53:
                    89:c3:4f:f2:ab:c7:3b:56:85:8b:82:90:1c:a8:e1:
                    29:e1:bd:cc:2b:3d:2f:61:e8:a6:4a:ea:fe:84:f2:
                    c5:a0:05:77:62:f2:1c:f0:1b:33:9d:d3:23:9d:51:
                    b1:ac:5f:40:54:19:bf:56:3e:aa:88:7d:e9:f7:f6:
                    e2:21:3d:86:80:d9:23:3d:d8:50:a2:db:da:3e:06:
                    9a:86:78:a4:c1:f6:64:dc:8d:59:4e:31:88:62:a3:
                    d4:05:3c:ca:14:18:42:a5:e5:8d:5c:b7:0e:73:65:
                    2f:0a:1a:d7:55:db:5d:a2:5f:3e:97:30:f5:ca:24:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CA:CB:E4:AF:ED:96:21:B2:76:6D:39:DC:60:1D:1C:E0:30:D8:82
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:a4:82:cb:ec:e9:f6:94:34:1e:81:03:02:a2:06:29:c6:
         d9:70:db:26:6b:e7:63:83:99:fc:07:4e:ff:86:04:a9:76:b2:
         f6:67:e7:57:4d:97:37:3d:c0:4d:86:43:35:d8:31:1e:9c:07:
         32:af:5d:2f:24:bd:7b:ef:8d:62:91:be:a7:63:04:bb:9a:57:
         0c:03:9b:6f:0d:9c:ad:ce:d8:d2:e2:e1:35:2b:8b:c7:c8:68:
         fc:48:96:e0:71:79:99:32:0d:14:41:4f:67:29:56:84:36:e0:
         bd:a2:93:21:86:8b:ca:48:14:52:81:38:56:16:b1:2d:0a:4d:
         f0:d9:14:fe:01:b9:32:4d:be:bb:10:1b:08:0e:21:bc:ae:c5:
         a2:d0:3a:5a:98:ab:0b:a4:f1:23:57:f7:14:72:25:a9:6a:cb:
         fc:2a:c6:21:0b:96:60:75:d4:d2:6a:92:e8:04:9a:ee:b7:1d:
         f7:75:b6:66:44:a3:07:5e:e8:18:d2:63:7e:84:ad:ac:79:cd:
         3f:0a:be:84:99:c8:ba:1c:9f:90:55:64:a6:7a:40:f7:49:9e:
         87:ac:22:3f:a7:6e:91:3d:bc:a1:ff:b4:b7:2e:af:55:15:e9:
         53:66:b7:3b:52:80:53:29:ad:f9:92:60:76:ef:6e:24:d0:25:
         de:1e:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:31 2026 by rpki-client