Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          daAP7GCpA3Rp08qR9Vv3HtzzpsQxY+F1BbmAZfjJe/0=
Subject key identifier:   05:B1:E5:D1:A3:97:57:85:6C:36:65:0A:4A:87:0F:B0:CE:54:D9:13
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       019CAB6BC91840D261D528623E39E3B1B781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          0F2B
Signing time:             Sun 01 Mar 2026 22:01:33 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:33 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:33 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: /OrtzPtYEe+z+qFGOgqWaCgb7tUNBpm3FWzF3W/mZt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c9:18:40:d2:61:d5:28:62:3e:39:e3:b1:b7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Mar  1 22:01:33 2026 GMT
            Not After : Mar  2 22:01:33 2026 GMT
        Subject: CN=05b1e5d1a39757856c36650a4a870fb0ce54d913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:3c:26:38:ef:af:66:87:d7:5c:c1:c2:74:
                    89:f3:51:f3:cb:bf:72:ad:d5:1f:a4:1a:15:55:2c:
                    5c:46:80:86:03:7c:99:5e:2f:cd:9b:fd:c5:f4:0d:
                    e3:dd:7b:84:0a:df:83:00:d2:a1:20:c9:da:9a:68:
                    d9:5b:25:d1:00:a7:a6:26:9f:ff:d8:90:04:38:76:
                    fa:4c:c3:31:ef:3d:51:fc:bb:e3:e8:ef:9f:5a:1f:
                    d9:86:38:50:e0:ee:79:93:06:db:0c:95:2c:a5:dd:
                    52:b7:11:9a:08:14:b7:ea:6f:77:5d:5c:b3:1e:e3:
                    a3:63:9f:b9:2f:9a:e5:fe:4a:08:5d:5e:26:4e:1e:
                    50:d6:cc:6c:f1:be:91:c7:03:1d:36:46:38:fa:0d:
                    d1:34:3d:88:52:bf:0e:a8:7e:0e:27:91:2c:e7:6f:
                    64:ac:b3:41:39:12:34:30:89:18:59:24:79:6a:fd:
                    fd:31:87:b6:3d:24:d0:42:60:92:3d:24:31:63:42:
                    6e:1b:fc:e9:4c:fa:fb:a3:ab:c8:8f:5e:75:7c:6e:
                    37:08:1f:d4:2f:88:ad:18:e9:93:00:48:9b:34:da:
                    5f:7c:8a:b3:e0:20:39:e7:9d:48:5a:6a:e6:57:52:
                    75:04:5e:02:bb:b7:92:ce:6d:65:61:01:11:cb:31:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:E5:D1:A3:97:57:85:6C:36:65:0A:4A:87:0F:B0:CE:54:D9:13
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:36:b1:ee:6b:90:0b:d4:4b:44:36:a0:25:61:c0:2c:ea:45:
         1c:f8:af:38:8b:69:9a:28:ee:4c:80:bd:9b:1b:59:0a:1d:35:
         66:30:89:4d:3b:53:28:66:e4:e4:36:19:e5:04:b5:42:28:ef:
         33:99:10:7c:b0:a9:a8:6b:18:30:93:26:c4:a1:7d:07:28:24:
         e4:75:c0:37:b7:86:b5:28:5a:00:56:64:f9:e1:6c:43:96:12:
         e0:03:e0:a2:62:82:53:19:4a:c8:b4:1d:6c:38:f3:f9:34:01:
         d5:02:6e:6c:91:ec:9a:9b:e6:8a:cf:85:85:68:d3:8f:b9:56:
         e1:d7:89:36:4e:dd:2b:17:32:0b:7c:77:ea:b1:79:45:cc:9e:
         30:31:3f:c8:9b:0c:41:f7:d7:dd:68:e2:bb:8d:a5:50:0c:13:
         2f:77:d9:09:14:0c:e8:50:ad:11:51:b3:f7:c7:87:e1:28:c3:
         af:80:19:9f:e7:21:8a:ac:14:50:aa:5a:22:dd:ab:e4:48:fc:
         5e:8d:1f:f4:6e:9c:52:72:d2:a1:2c:09:17:26:58:ac:fd:15:
         61:22:b9:c4:2f:46:95:49:69:03:b7:d7:cb:be:2b:42:6c:a9:
         6f:4d:36:02:71:ea:44:11:0a:ee:aa:00:12:e4:62:01:bd:a0:
         17:3c:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:23 2026 by rpki-client