Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          SfHOoSAvUJdbOtjRK6VBY6gjGE0PSWmpNuYTu82ANQc=
Subject key identifier:   48:0C:6F:17:6B:9C:3F:E1:A6:42:DE:31:BC:66:78:17:72:95:23:83
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019CAAD58B4D078C08FA5305D215FF48B4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0C51
Signing time:             Sun 01 Mar 2026 19:17:27 +0000
Manifest this update:     Sun 01 Mar 2026 19:17:27 +0000
Manifest next update:     Mon 02 Mar 2026 19:17:27 +0000
Files and hashes:         1: 3DD7IN1RUhoFtGejl5QLGTUPcbE.roa (hash: 9QU9RS48p4Gk8eFQ8qLmQJqFrlkSGfDL9zyv/+59Y7I=)
                          2: CCDVDQ2Oruym1KjDDrngcHA3Mew.roa (hash: chiL5mGQkOXPpO7ivyw1/1nTMgncbyhd+zfPcNA0gXQ=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: 3d0Z4g01G23pxxvDUsires9Un8gphfV8aTH+Lh7CYK0=)
                          4: QI46eicieX49OrM0OPKuHdePV44.roa (hash: WEPMgLFqdCTHxuIP+JQV+EA0WeN2b1pXmwAA9gvatUY=)
                          5: TMIETZCkfwkv20GhYgXVDmLAdSE.roa (hash: rj6hnXGmK4tKBpRVA2yKPqqLtv9PZV5O4KXBEttP6pM=)
                          6: mjsGoAp4e_kLXrUHiayaH4M0-CA.roa (hash: 6IO5CYtAunsKToiFXX8O2RjnhdZWB3faGoUCU5YD+Ow=)
                          7: n2nCI-ptzMTQlle8XBsEF_kBMlc.roa (hash: R677cLGAhKw+n+X1YDl+AhJzznYJjl/tMQGRlN03THg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:d5:8b:4d:07:8c:08:fa:53:05:d2:15:ff:48:b4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Mar  1 19:17:27 2026 GMT
            Not After : Mar  2 19:17:27 2026 GMT
        Subject: CN=480c6f176b9c3fe1a642de31bc66781772952383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:41:7f:d7:77:48:94:73:00:0d:0b:d3:b4:
                    88:05:07:71:ee:b7:bd:52:67:79:89:65:47:c5:e3:
                    bc:b9:2f:e1:f8:98:3f:bf:05:17:73:db:bb:e6:85:
                    e3:f0:43:2c:48:6f:59:08:fa:a3:12:24:4c:76:f2:
                    d6:8e:d9:7b:40:0e:93:de:6a:ce:17:e7:30:2c:ce:
                    c5:38:fb:e8:01:36:f7:f1:29:57:4c:88:2e:9f:73:
                    32:63:60:76:89:fa:72:50:a3:ac:ea:1c:0a:a6:90:
                    6e:84:89:62:ce:88:eb:86:c5:c4:91:d4:25:16:e3:
                    6c:e4:bc:b3:28:c4:c8:1f:2b:34:9c:4f:21:cc:a4:
                    be:52:4c:b6:fb:bb:d4:f8:79:00:6a:eb:a1:5d:e3:
                    83:09:b6:dc:6d:83:54:a4:ad:23:ed:c5:91:f2:d5:
                    0d:c7:e9:00:ca:9c:49:45:0c:d2:9e:f2:65:19:54:
                    4f:3a:9d:75:34:a1:dd:23:09:db:78:cc:62:26:b2:
                    bf:d6:30:8a:00:29:75:72:f0:67:b5:78:63:ae:7f:
                    f1:0f:1a:25:ae:42:81:ad:d6:94:0d:c5:27:f1:2d:
                    04:1c:a0:87:dc:8d:94:16:2c:f8:ae:37:a7:97:4f:
                    26:1b:9e:15:7d:5f:a0:48:76:ab:0d:e0:3e:4f:d9:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0C:6F:17:6B:9C:3F:E1:A6:42:DE:31:BC:66:78:17:72:95:23:83
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:7f:1a:97:47:6c:47:9d:29:bd:c4:5b:45:31:bc:c1:5a:
         c4:f3:e1:6c:9f:a8:3f:66:3d:6b:af:e6:6a:18:23:69:72:7b:
         d1:76:7c:ea:c2:e0:70:3f:68:c8:fd:37:6c:1c:f7:db:94:a4:
         b9:49:29:8e:bc:6e:bb:0b:69:b4:3e:45:bb:33:2e:cb:c4:d0:
         8c:0d:34:5c:3d:8d:ac:78:6a:91:70:51:99:57:5f:db:24:36:
         0c:2e:b4:b3:5a:7f:90:79:78:e5:28:4f:d3:2b:c4:77:5a:be:
         6a:4c:57:43:f4:c4:c0:0f:4a:4b:e6:5d:39:cd:3d:fa:f8:19:
         0c:d6:d1:ec:50:8c:54:9c:16:22:21:ff:ad:40:4e:bd:8f:b2:
         97:80:2a:ad:14:bf:36:b5:c8:58:b0:41:84:22:5c:80:86:e6:
         00:60:0e:f8:50:33:47:4c:1a:85:aa:d7:be:bf:e1:66:0a:5a:
         3b:54:23:c1:ed:45:61:f9:4a:bb:82:25:c9:56:b2:6a:dc:24:
         7a:ac:7d:d3:ba:a7:0d:64:96:74:ca:61:ed:9f:e3:cb:e5:f5:
         cc:30:7d:12:54:3b:7e:db:44:69:a7:01:6b:22:c4:db:a4:e6:
         47:9c:a7:d1:9c:0d:ef:ed:98:f7:dd:7a:2f:f8:1e:da:5e:b2:
         23:88:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:44 2026 by rpki-client