Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File:                     6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier:          Ah5JsoHukfI4zgLVBZA7xn6rNeSD7XS98sU7VN9cY4w=
Subject key identifier:   0D:37:94:06:A5:F7:EC:F3:01:02:FE:BA:F9:CB:10:DF:38:FB:08:6B
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer:       /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial:       019CAD903DAA18F6F436D39A20B6322D9B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 08:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:37 +0000
Files and hashes:         1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: JFZAv9r/rVG6JBAklOtVfTXXIoCIPAiQqoiacb+syfE=)
                          2: Ol2LcIckb0JEorAeZ9ZW8Jfsn4Q.roa (hash: wPlF6pF4PXwOQzyCGkjuNlYnp29Vxy6PXU2oWbLVg5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:3d:aa:18:f6:f4:36:d3:9a:20:b6:32:2d:9b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
        Validity
            Not Before: Mar  2 08:00:37 2026 GMT
            Not After : Mar  3 08:00:37 2026 GMT
        Subject: CN=0d379406a5f7ecf30102febaf9cb10df38fb086b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:ab:40:2e:d8:22:8c:43:34:49:97:8d:d0:
                    70:2d:bc:19:ea:10:16:46:3a:c1:0e:a0:32:c6:a2:
                    2c:42:94:7b:d9:6e:53:84:eb:27:3b:74:17:b1:5f:
                    15:92:6e:23:3c:6b:60:43:86:a1:3b:4f:86:bb:ff:
                    c1:96:ae:b3:72:e4:c5:ba:07:ce:1c:5e:03:6c:8c:
                    69:fa:3c:5d:aa:c2:fb:11:28:ba:4c:39:5f:96:8a:
                    9e:db:2a:a2:f8:73:3e:28:77:46:6b:7b:64:f1:a1:
                    f9:b0:63:a6:e3:25:d4:44:40:ca:a7:e2:9c:63:b8:
                    5c:2c:59:07:da:ab:cd:40:22:a4:e4:0f:25:2e:b3:
                    69:00:df:21:d8:45:e5:31:57:59:d8:a6:ea:47:5d:
                    5e:1d:a2:0a:a5:90:5f:79:87:cb:30:67:e8:19:16:
                    c4:09:15:f8:89:0e:47:2f:71:bd:b3:26:0a:6f:76:
                    da:50:54:2c:87:08:a0:8b:bb:7d:70:f0:ec:5f:d8:
                    29:15:19:87:8b:f9:76:50:fb:53:a5:72:0d:c2:b8:
                    01:54:84:e6:bd:b6:a5:40:22:b6:49:4d:f0:36:28:
                    17:9e:71:81:e6:c9:fc:7d:0b:79:80:8e:3a:cd:e8:
                    79:92:c3:32:ad:51:e6:ef:54:01:74:bd:75:5c:1f:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:37:94:06:A5:F7:EC:F3:01:02:FE:BA:F9:CB:10:DF:38:FB:08:6B
            X509v3 Authority Key Identifier:
                keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:34:ca:e9:26:9a:3b:6d:97:04:a0:d7:70:33:89:38:d1:24:
         4e:a7:30:75:2f:a3:7c:ff:10:da:0f:e5:80:5e:20:ba:93:e0:
         65:3f:93:34:8a:44:58:ef:05:52:64:d7:2d:8f:d3:c4:d9:39:
         c1:29:86:05:ab:f2:44:02:d6:60:5f:0e:3e:a4:2e:78:64:98:
         47:41:d9:08:9a:5c:18:16:9a:a4:bc:37:6a:02:1e:57:f7:32:
         53:35:af:9e:fd:9c:f8:e6:5f:2f:9b:c9:74:35:af:64:bb:17:
         74:36:4e:c5:c4:6a:e7:25:e3:af:99:2d:72:3c:01:6f:96:5e:
         c4:25:99:d2:ae:36:ce:43:92:99:1f:21:19:23:82:f1:ef:d2:
         b5:9d:62:e5:8a:60:c4:5e:3d:f9:b6:1b:07:f7:5c:25:7a:aa:
         c9:5f:9a:22:19:d5:0d:f8:da:20:8f:02:17:d4:4d:c9:06:8b:
         e7:4d:fd:8a:d5:e5:ab:a8:94:e7:bd:33:d2:13:88:8d:71:0f:
         bb:4e:11:f3:61:4e:94:00:17:6c:f7:b1:c0:ae:47:51:d7:1b:
         f0:dc:01:bf:25:b2:7f:58:c8:6a:59:48:f5:81:cd:de:fd:8b:
         f6:a9:8e:ea:51:f9:0c:c1:36:4e:8f:6c:5b:a8:41:e6:c9:a6:
         63:3d:f6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:22 2026 by rpki-client