Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier:          VUFmf+vfZefyBcufynDFvkKXx4glMjE1Pdp+PRcu3+A=
Subject key identifier:   2E:A0:88:5C:F7:A9:01:56:64:E9:32:E4:3B:47:7B:13:AB:03:02:51
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       019CA9461C6ED0EDDE06C4CD34D6D69C0A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number:          11F0
Signing time:             Sun 01 Mar 2026 12:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:09 +0000
Files and hashes:         1: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: /0Cwd8q5XtWZuzteDfNOR0/gR8hE3ZekNEFIX1Q6kF4=)
                          2: t0AVsfA9UiQqjW_t5dPb3nmC2rs.roa (hash: fCkC5bZnOUjJ4RgM4loxWys//SbXBNG4IrH2ok9kPJQ=)
                          3: uPlVBkUpo1ExrOH-ryhMZzzg4VE.roa (hash: i7u4A65jcZSKUSSb+jR2XNvvNO6njReiGIDIfrcj8i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:1c:6e:d0:ed:de:06:c4:cd:34:d6:d6:9c:0a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: Mar  1 12:01:09 2026 GMT
            Not After : Mar  2 12:01:09 2026 GMT
        Subject: CN=2ea0885cf7a9015664e932e43b477b13ab030251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:23:7f:3d:55:7f:97:74:aa:a8:8a:9f:e3:
                    e9:dc:e5:70:c0:43:11:64:17:5a:5e:2f:a1:12:00:
                    53:1a:41:dc:c1:1d:b0:c5:9a:1b:7d:ff:5c:35:a0:
                    1a:9e:50:9c:61:dd:b6:e6:cd:d0:55:e2:a1:65:96:
                    4d:56:3f:37:30:d2:b6:4c:a9:d6:01:75:54:89:dd:
                    af:15:f9:cb:92:20:b3:c1:eb:24:27:93:b5:4e:2c:
                    04:6f:a8:90:2f:b0:a1:25:1f:53:95:a8:99:27:3a:
                    64:02:7b:19:c9:a7:01:64:b7:13:8c:a2:20:4f:6e:
                    2a:3b:d5:dd:9e:52:26:bd:be:ca:b2:4f:c0:1e:1e:
                    9d:7b:80:9f:ee:51:9a:30:91:76:67:94:c2:76:a0:
                    93:cd:72:51:dc:ba:7c:43:10:b9:04:0c:26:64:a2:
                    2c:0f:38:d9:82:6a:25:f2:ec:27:e8:d3:98:45:3e:
                    11:42:04:b4:f1:e9:37:24:ea:f5:f5:49:54:3c:12:
                    cb:8f:08:8a:d7:9e:c0:62:51:f9:78:44:2a:2b:63:
                    57:87:4c:28:bb:55:2c:60:7f:c8:60:fa:d3:df:f6:
                    f8:9e:aa:04:b3:e5:4e:e6:b5:c9:01:94:17:0e:c9:
                    80:f7:8b:bd:b5:f4:97:bd:45:94:8a:40:e1:11:e9:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:88:5C:F7:A9:01:56:64:E9:32:E4:3B:47:7B:13:AB:03:02:51
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:88:2d:64:1c:8e:34:1c:53:81:d2:76:11:11:0f:73:5a:
         e8:7a:4d:2c:0b:0c:31:f2:58:b2:bf:79:6d:b4:1f:78:71:b8:
         b4:55:08:74:f4:5d:f7:6c:de:1f:20:cb:1e:c3:f3:33:75:fe:
         52:d1:76:0f:82:54:32:61:5d:ed:e1:16:70:61:cf:b4:ea:58:
         fd:8e:a3:29:01:c4:b2:f5:bc:66:45:29:31:cf:39:79:1a:68:
         e4:19:5f:26:06:18:a3:45:e0:d5:50:94:57:db:81:d8:54:e3:
         5c:33:f0:99:5d:eb:23:25:5f:65:62:7f:e5:43:42:2b:e5:2a:
         06:82:32:57:d5:f3:16:e1:c8:5d:3a:f9:2f:67:f1:c7:43:f2:
         10:1a:67:82:12:e5:be:7d:3b:87:bf:ac:e8:94:4e:ce:57:fe:
         4c:2b:c8:b6:70:5d:6d:75:8e:41:58:ba:02:ca:76:9b:22:2b:
         43:b8:52:3a:de:75:92:e5:28:60:bb:83:04:66:09:c8:69:5c:
         ac:bd:ad:b5:53:7c:5b:05:08:6e:f8:60:3e:42:35:f2:66:c4:
         32:67:8e:63:fc:78:16:ae:5b:bf:1f:91:87:e5:eb:82:94:4c:
         d5:ce:d5:07:3d:ac:51:ef:cb:70:db:85:07:6e:dc:d0:3f:7c:
         ef:76:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:06 2026 by rpki-client