Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File:                     a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier:          G9vdUUO3F242PRYUhYD4V/I81/NPRje/9l2mcUtA6Mc=
Subject key identifier:   90:21:E3:66:33:D6:DD:15:D0:64:42:5A:F6:C4:87:14:4E:55:A1:FC
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer:       /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial:       019CAEA352ACB933F76A7D9CBB98EE5FD0B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number:          C6
Signing time:             Mon 02 Mar 2026 13:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:04 +0000
Files and hashes:         1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
                          2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: HKl7kyqUs2sPg/mkXdduq3ERsi7ygALRskyBvIojltg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:52:ac:b9:33:f7:6a:7d:9c:bb:98:ee:5f:d0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
        Validity
            Not Before: Mar  2 13:01:04 2026 GMT
            Not After : Mar  3 13:01:04 2026 GMT
        Subject: CN=9021e36633d6dd15d064425af6c487144e55a1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9a:bd:3f:34:30:9b:c3:e1:fb:58:9e:d8:b7:
                    1f:29:d1:ef:5d:16:d8:2c:85:82:14:c7:2e:00:b4:
                    9f:b9:65:70:2b:b8:cc:90:d7:46:46:8e:d1:a2:12:
                    dd:11:1a:b4:94:d7:29:64:cd:1a:8d:51:b6:af:c8:
                    99:3e:b0:d4:e9:e4:bb:75:4d:64:04:f9:87:33:41:
                    24:8c:39:eb:a3:38:ce:ce:c6:04:54:4b:06:0f:ef:
                    bf:71:a9:58:13:a5:7f:9b:01:e7:20:8b:e6:e3:c8:
                    57:d1:03:40:c7:af:ea:02:6d:42:43:eb:77:e0:7c:
                    df:cd:35:78:41:6c:74:2f:60:a0:83:42:f3:7a:32:
                    1c:66:21:23:47:71:59:6c:df:45:e8:29:73:7c:c2:
                    7a:09:4e:f3:9e:fa:0c:bd:ad:b6:05:12:cd:fd:51:
                    d9:61:96:b8:5b:44:4d:b3:f1:f1:0e:c3:8d:6c:d5:
                    c0:2a:da:da:db:7b:ec:a6:bc:3e:12:1e:49:12:c7:
                    77:63:7b:52:3b:75:1a:04:66:c4:ea:be:e1:8c:9a:
                    43:bc:fe:95:db:ec:ff:75:e6:f7:6c:2b:57:2d:0c:
                    78:de:f7:1b:ab:d4:99:c8:01:8d:74:69:99:1c:3b:
                    48:71:28:7c:bc:8a:15:ac:de:62:c5:98:a9:23:0e:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:21:E3:66:33:D6:DD:15:D0:64:42:5A:F6:C4:87:14:4E:55:A1:FC
            X509v3 Authority Key Identifier:
                keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:62:c0:46:7d:5e:27:fc:ba:f3:17:6d:b3:b3:34:46:20:85:
         f1:75:43:8f:6e:cd:37:25:ca:06:93:4a:1e:28:0d:b6:9b:c7:
         bc:97:36:46:ee:6c:7e:94:52:68:e4:8a:d4:54:61:3a:24:a9:
         64:60:09:cc:8a:ac:54:53:2c:d3:c8:cb:00:52:06:33:9d:9a:
         45:a7:02:53:d2:29:81:2e:24:47:ab:83:32:09:a3:f0:0d:c0:
         3f:12:33:70:47:7f:33:75:ad:d4:1f:43:39:34:4a:93:e5:33:
         90:cf:49:5e:b5:91:b7:2a:3d:c4:87:e0:f9:33:9b:84:d7:c3:
         b9:54:1d:b0:9c:94:5a:a1:2e:4b:12:fe:02:a5:ce:32:ac:2f:
         95:f9:69:bd:e8:35:64:f0:e2:6c:5e:61:aa:9c:fa:93:05:08:
         1e:94:ea:bf:ed:6d:b3:2e:9e:0f:98:a5:97:be:ab:1e:db:1b:
         19:5d:0d:ac:54:41:c5:71:80:dd:8c:dd:ff:8d:03:fc:11:7d:
         97:31:90:55:ca:d1:7a:55:eb:a0:de:04:9b:1d:51:9e:de:de:
         4c:c7:84:6e:9d:ad:3b:79:4d:81:48:ae:5a:02:86:85:4e:ae:
         34:94:1f:01:80:8d:a2:01:c9:58:98:9c:5e:3f:e6:0a:c1:8d:
         45:34:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:16 2026 by rpki-client