Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File:                     G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier:          78Hpo4AKRVU0YIDyq6GagSrOFSbqFmdpLDxqMq7GmPg=
Subject key identifier:   E5:6C:45:4F:4C:26:EE:BE:7E:0A:96:55:0F:67:9B:DF:CD:64:87:6C
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer:       /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial:       019CAAC64EFBD00F8D91E44D3B2430504443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number:          062A
Signing time:             Sun 01 Mar 2026 19:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:48 +0000
Files and hashes:         1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: 8mFEQbzBOu3Y8dFbBRWJdQ/v9P0QYYK8+VdLmSfABr4=)
                          2: qchTwrqi0nAVLi_bl4CZl5ndb58.roa (hash: ldZEDUqRJgpdyT5wjo7UFqGO3TLrWDAMg94GFQn1Yls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:4e:fb:d0:0f:8d:91:e4:4d:3b:24:30:50:44:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
        Validity
            Not Before: Mar  1 19:00:48 2026 GMT
            Not After : Mar  2 19:00:48 2026 GMT
        Subject: CN=e56c454f4c26eebe7e0a96550f679bdfcd64876c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:9c:28:54:8d:40:c0:11:26:36:eb:53:0f:
                    be:d4:55:3f:64:81:d2:a7:ce:00:59:34:e7:83:44:
                    71:3e:cd:97:1f:a0:5b:3e:9e:ed:af:48:d5:dc:a1:
                    7b:c8:04:66:7a:6e:f5:23:77:93:1f:9a:1b:21:51:
                    cf:bf:83:52:ba:86:2c:9a:d7:1a:1f:4f:27:49:9d:
                    b6:ec:19:4c:63:59:08:65:48:19:79:c6:bd:70:92:
                    7c:ea:df:6c:6b:65:8e:26:55:b8:75:81:ec:0d:7f:
                    03:c0:09:b2:e1:0a:93:af:96:f6:56:89:c0:87:e2:
                    37:88:06:3e:01:91:50:e3:ec:86:d2:d6:a1:1e:b2:
                    3f:e8:e8:c6:6d:01:4b:ea:34:ef:12:91:6c:3e:4f:
                    79:38:a2:fb:e9:9a:ac:15:0b:47:be:6b:6b:79:6e:
                    e8:06:11:e8:18:9b:97:02:90:d8:c0:a3:cc:5a:7f:
                    1c:5b:95:00:14:99:a0:28:e7:2b:34:63:72:ef:c8:
                    a0:4b:1c:ea:f8:18:16:ee:f9:b7:83:bc:78:57:89:
                    3d:56:f7:5a:69:01:eb:91:4b:77:49:4c:2b:90:e4:
                    8c:5b:3a:04:cb:55:36:63:28:71:be:e9:ef:ef:77:
                    9d:dc:f3:80:fa:da:a7:dd:6d:1d:09:63:d4:19:e3:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:45:4F:4C:26:EE:BE:7E:0A:96:55:0F:67:9B:DF:CD:64:87:6C
            X509v3 Authority Key Identifier:
                keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:e6:e9:8c:0d:ba:19:49:81:28:c0:3e:32:83:e6:6f:b2:
         20:24:37:ee:fc:5b:a8:24:66:fa:5e:76:00:c1:5d:2b:7c:c3:
         3b:77:3e:a9:45:09:e0:5c:65:f1:40:94:fe:db:35:2d:a5:b2:
         cc:83:79:81:70:be:eb:16:2f:38:cd:0e:c4:c5:26:f7:cf:78:
         d1:e8:85:55:1a:68:47:47:4c:ad:1e:e4:b1:1e:41:d1:63:d9:
         7c:0c:f9:52:91:c0:de:ce:c0:4d:d6:9e:51:73:65:0f:bf:25:
         f7:39:96:1b:32:cc:6a:0a:f8:3c:58:73:71:ba:07:82:08:67:
         07:f8:83:67:91:c9:68:38:a1:49:cd:61:1f:4a:7e:07:a0:59:
         b9:9c:5a:6b:64:27:71:19:d1:73:6b:56:d9:8e:82:2f:5f:85:
         da:a6:a0:dd:12:ca:db:8e:34:e2:25:0c:8b:03:af:31:98:69:
         f5:87:2d:e9:d8:1e:b8:e4:0c:e8:95:be:ba:9f:52:05:fe:d0:
         8d:e7:14:71:35:45:f6:67:29:1a:22:ad:a0:c8:ef:84:85:cf:
         f8:e2:1d:54:16:6e:11:4b:80:07:8c:55:13:d3:67:64:66:e5:
         10:8d:e6:0f:8c:ba:52:51:41:7e:40:a6:f3:5c:5d:8a:47:b1:
         bf:b0:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:01 2026 by rpki-client