Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File:                     6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier:          amAg6V23oy7qSPRDwR6xxyl6FVp84DA5gtg2tOqDVMM=
Subject key identifier:   3D:B7:FF:89:2F:82:9E:5D:AE:3D:08:D2:6F:E8:22:9C:26:D1:11:BA
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer:       /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial:       019CA90EC7F6BC4AE4C3DDAB5409B2F83950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number:          D6
Signing time:             Sun 01 Mar 2026 11:00:44 +0000
Manifest this update:     Sun 01 Mar 2026 11:00:44 +0000
Manifest next update:     Mon 02 Mar 2026 11:00:44 +0000
Files and hashes:         1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: u2w8iTRf+/kn9aRR71qRWCcE17VzhZ2mBCkk4tDZ0fg=)
                          2: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (hash: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:0e:c7:f6:bc:4a:e4:c3:dd:ab:54:09:b2:f8:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
        Validity
            Not Before: Mar  1 11:00:44 2026 GMT
            Not After : Mar  2 11:00:44 2026 GMT
        Subject: CN=3db7ff892f829e5dae3d08d26fe8229c26d111ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:12:5a:59:c3:17:1d:f2:f0:84:1c:77:fb:
                    83:3e:8f:bb:ea:7b:53:90:2d:b7:8c:08:39:40:0f:
                    9d:f0:48:0d:b9:ec:ec:29:75:c6:18:ff:1d:c1:08:
                    89:3a:86:ae:ce:1c:66:1e:d7:4f:57:4f:06:70:ab:
                    e8:dc:c8:61:a6:2a:48:38:0d:98:61:48:77:15:a1:
                    63:f9:9f:44:39:b7:f0:6b:d9:fb:e4:14:f6:31:72:
                    8f:48:66:94:d3:e4:49:dd:d3:ef:0c:61:be:5b:85:
                    59:79:6c:a0:69:a9:f7:d5:8e:41:5b:f6:da:23:c8:
                    db:8d:8e:f2:2a:75:33:92:6a:16:85:f1:a6:e5:3c:
                    3d:46:b6:2f:19:b7:97:17:21:9f:db:f2:b8:11:78:
                    8d:13:c6:87:1c:46:58:1e:91:1e:35:f8:aa:23:8a:
                    5f:10:55:42:b8:12:01:74:31:15:8c:be:0d:43:dd:
                    90:22:6e:52:61:3c:f2:78:25:60:e2:32:74:2e:cb:
                    12:a6:16:ed:c3:d4:da:2d:a7:dd:43:59:0d:5a:3a:
                    9b:a9:2a:19:e4:3f:7f:ea:15:29:ee:40:1e:01:75:
                    78:b9:1f:1a:a3:f1:60:f0:a5:6b:a6:a0:0b:79:33:
                    c8:02:6c:f6:e6:8f:cc:90:73:81:39:c3:ae:d8:df:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:FF:89:2F:82:9E:5D:AE:3D:08:D2:6F:E8:22:9C:26:D1:11:BA
            X509v3 Authority Key Identifier:
                keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:79:cb:40:af:ec:29:35:98:4f:a8:a9:0d:6f:4b:ae:f7:44:
         ad:56:35:90:f8:35:90:b2:f7:bc:b6:0e:d5:9f:78:49:cb:96:
         13:56:c1:0f:5d:ba:f1:06:a9:b0:70:fc:a0:a0:24:6e:61:83:
         eb:60:49:99:b8:60:6f:43:69:c3:28:e2:82:f0:c8:33:c9:0d:
         4f:09:5c:c1:9a:cb:d1:63:7b:60:d0:21:b9:ef:ec:b1:a5:e2:
         fe:4e:0b:38:88:45:5c:6d:f5:ed:8c:e9:af:de:c1:86:e0:77:
         07:13:71:34:65:d5:a6:3e:76:c3:a5:16:c7:bb:d7:79:81:ea:
         26:29:db:07:d1:db:5f:1b:3b:39:22:ea:7e:4b:0f:db:28:ca:
         b0:1e:ce:7a:24:be:03:38:0b:c5:36:52:28:dc:16:ad:c3:09:
         45:8b:38:34:1b:87:c0:f5:68:81:b8:f2:b4:1d:ae:d9:ce:13:
         c7:7d:91:fb:70:4f:64:17:6a:f9:48:96:32:28:39:c0:63:95:
         f6:f5:05:16:74:06:f6:09:56:22:46:fe:8e:f5:1e:46:69:98:
         ed:a7:48:0c:8d:49:cd:93:29:80:36:f1:00:1b:1b:83:82:35:
         88:96:5b:c4:c9:6d:38:61:6c:6c:d8:7f:11:ec:d9:68:90:aa:
         34:0e:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:02 2026 by rpki-client