Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          goU+yRx3wNQeR/4MC4wnl73/XqXU3gdulljJQ50AfOY=
Subject key identifier:   85:7D:F6:6F:3D:6B:1D:37:31:4C:75:A5:98:69:FA:6E:7A:2C:4D:9B
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       019CAB342002B45C934F26438D0F9C3E6DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0C53
Signing time:             Sun 01 Mar 2026 21:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:45 +0000
Files and hashes:         1: 3T7apsoCLIRRuPziIRlUEsN-PHk.roa (hash: l4cLFttiGyOfAyk+8L0CJMAKg8dhT7SWDGcyXhUyR1Y=)
                          2: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: IWYxdwTZjlbOm7hZMs1BDeNyvt6wi7nLiZ9wcovTfRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:20:02:b4:5c:93:4f:26:43:8d:0f:9c:3e:6d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Mar  1 21:00:45 2026 GMT
            Not After : Mar  2 21:00:45 2026 GMT
        Subject: CN=857df66f3d6b1d37314c75a59869fa6e7a2c4d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:f2:b4:79:00:ba:76:eb:15:ae:eb:9b:8e:
                    56:dc:3c:c6:8f:b6:78:93:67:8d:2d:94:5d:fb:0c:
                    34:3d:2f:9f:7a:aa:da:8b:9e:dc:45:83:3b:d8:ee:
                    29:3c:b2:e2:72:02:43:bc:f2:91:30:41:62:9a:66:
                    5c:3d:c1:26:20:b1:98:e6:98:6f:eb:8f:a0:28:e2:
                    d2:a7:35:c5:0f:ea:5c:d4:ba:43:33:09:08:06:f0:
                    a3:e8:68:9e:a3:fb:55:c2:99:e0:e4:12:f5:06:f5:
                    11:2c:a8:0d:99:e5:46:73:0d:00:4c:d8:9c:56:ca:
                    35:c0:85:ed:0c:87:e2:b3:f5:9c:77:5f:df:b4:a8:
                    f9:0b:1d:38:52:fb:ea:b8:da:13:1e:4c:16:91:4f:
                    94:b3:ca:78:79:ec:59:13:77:d6:59:d3:b8:89:2d:
                    93:2c:7e:ec:3d:2a:98:54:95:46:25:a3:43:65:58:
                    55:33:0e:bf:37:86:66:99:02:00:93:90:c9:61:b1:
                    2b:16:4b:83:6d:e1:23:a4:85:7e:73:73:d8:00:f6:
                    5f:2e:d0:cc:28:ff:12:e8:8d:a0:3e:3b:87:19:45:
                    42:75:80:cc:1c:a0:ac:c5:c0:55:d9:30:da:a2:c5:
                    0f:4b:b7:49:ba:23:61:b4:c1:ee:20:13:80:85:11:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7D:F6:6F:3D:6B:1D:37:31:4C:75:A5:98:69:FA:6E:7A:2C:4D:9B
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:be:44:f6:cf:b3:71:c3:eb:94:06:e6:e7:a4:2a:10:91:01:
         67:a4:b4:3e:c3:a3:8e:57:aa:7b:c8:47:cf:2e:d3:db:ec:44:
         57:1a:b8:42:9c:e5:ca:3a:25:e3:33:91:ce:d1:84:7d:c7:c4:
         97:74:67:79:e8:ba:80:e4:fe:ba:1d:3a:ce:b5:35:fe:b4:75:
         52:91:00:e5:a0:9f:36:a5:b8:a6:d2:ee:88:e9:c6:ec:af:5b:
         15:36:eb:0d:ba:84:e6:71:b8:b0:9c:cb:80:3d:78:43:d2:cb:
         ce:5b:84:3d:0e:1a:ec:39:05:70:7d:5d:ce:de:be:5f:52:5a:
         de:51:08:11:1b:0e:fc:3f:c0:02:dc:ac:ef:98:f3:64:2c:76:
         00:9e:97:c7:12:02:02:8b:0c:85:1b:99:88:54:0c:08:c8:c1:
         1b:fc:81:b4:b9:ef:e2:ed:54:67:a1:74:31:09:b9:1e:62:fd:
         9e:24:6e:60:84:f0:ab:7a:61:c8:8c:46:a2:1f:16:d3:85:bc:
         49:be:40:2a:08:5e:27:f5:09:5f:37:e9:a8:20:4e:02:3f:9c:
         41:39:e3:dd:53:04:f3:6c:a7:e1:3d:31:fa:1a:f8:4f:87:51:
         bf:d1:5f:2f:84:ad:2d:bc:ba:3d:f3:b1:b3:e3:75:22:02:a9:
         e0:fd:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:01 2026 by rpki-client