Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          fD98gfOnfotiBaEPUiOb2MrBBy3RLHBI4j2hl09Iwbo=
Subject key identifier:   11:10:9E:19:4C:C0:9A:36:71:25:C8:D6:1C:E5:2A:2D:47:4D:F2:EB
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       019CABA1E48E01BF47BA97BCD021C5A28EAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          16D6
Signing time:             Sun 01 Mar 2026 23:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:39 +0000
Files and hashes:         1: 1llWNK65NedtiWi8qyia848ELaA.roa (hash: 0oTSLbXlh3Ln2/Z2bu7ijN1NRwtM3qIsyO0kzqAkxPw=)
                          2: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (hash: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0=)
                          3: HP5vxDtKtwCDfs6BQB76Wev5z1g.roa (hash: JBqv9H1vhnDV1/7jpMHZRDfH8t8fODjKdebQA7UXUqA=)
                          4: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: sykYnmPhOr4G2U/FTU2TpRMhalyeFuPL/PJNMfpo/Ss=)
                          5: wYQQFIQIglltXxfXQVpxwZ1D82s.roa (hash: aB+z2l6ojQ6PXmjLcXa145T+AmEidbRVU2bYYZOMwPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:e4:8e:01:bf:47:ba:97:bc:d0:21:c5:a2:8e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: Mar  1 23:00:39 2026 GMT
            Not After : Mar  2 23:00:39 2026 GMT
        Subject: CN=11109e194cc09a367125c8d61ce52a2d474df2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:a7:62:69:9a:2c:1f:a8:b8:a6:9b:45:a4:
                    f5:59:40:db:58:61:c7:19:58:c2:ba:5e:21:37:15:
                    41:38:a6:f2:4f:d6:96:c8:8f:af:41:32:77:42:13:
                    27:87:89:46:a9:3e:11:27:9b:5f:9f:3f:66:85:f3:
                    7a:59:90:1a:14:8c:04:fc:ab:25:5e:42:72:31:46:
                    7c:71:2b:4a:56:5f:28:c5:63:49:48:2e:6c:e1:d9:
                    1f:3a:ca:fe:ab:ad:3e:f0:a8:c6:c6:00:f4:bf:1b:
                    8a:bc:71:19:63:eb:16:6d:76:28:02:b7:49:3d:e2:
                    28:18:74:f0:79:0c:56:f1:4a:54:74:bf:a4:7b:4f:
                    b7:8b:77:ff:54:62:0c:5f:50:3e:70:1f:a3:aa:3c:
                    dc:45:83:7d:be:6f:7d:ec:7e:2e:c0:a3:e2:f8:a9:
                    7c:dd:44:ab:73:80:0d:cd:33:93:0c:4c:c2:27:0e:
                    56:f4:64:e5:80:af:5a:ea:67:01:4d:da:51:71:e5:
                    5c:9b:ba:72:9b:fd:f5:be:d1:a0:fb:d4:dd:8b:41:
                    86:07:46:ad:9e:4d:f4:27:95:ef:10:6d:d4:0d:56:
                    61:e9:03:98:6b:9a:ce:88:0a:4f:b4:55:03:c0:76:
                    b9:3d:1b:24:d3:5f:a4:6e:f8:45:6f:1d:c8:20:b2:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:10:9E:19:4C:C0:9A:36:71:25:C8:D6:1C:E5:2A:2D:47:4D:F2:EB
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3a:86:86:5a:63:66:33:ca:92:89:9b:d9:08:99:8e:92:03:
         3a:b0:02:1f:be:f5:60:d9:09:7d:3e:5e:c9:1d:01:e5:b4:dd:
         2d:56:7a:02:ae:e0:57:b2:55:1a:52:d3:63:e9:ab:d0:14:3f:
         4a:32:cb:29:80:4e:62:58:14:63:42:a2:28:9f:b9:18:dd:63:
         58:55:a2:48:be:e3:f1:6a:14:07:fa:c6:e2:ff:72:13:90:03:
         1f:3e:dc:d2:eb:42:0c:48:c2:e4:1d:22:e7:61:0b:a0:e7:8f:
         28:3f:44:0d:28:b6:54:6d:ba:86:e8:8b:2e:a0:74:a8:c4:06:
         e0:bd:8d:0e:76:53:b6:eb:58:0e:8b:cd:06:58:f9:c9:32:4c:
         27:e3:ec:04:09:8e:7d:31:20:db:2a:a9:62:97:b8:bb:14:34:
         f2:6c:36:2f:34:ab:61:75:47:ec:8d:bb:de:ae:58:f9:ef:74:
         ed:bc:80:15:6b:2b:16:5a:5d:68:35:6e:b5:33:b0:5d:24:fb:
         1c:b3:e3:80:cb:80:c1:ae:6d:72:ad:f9:b6:30:a1:bf:8a:1b:
         ef:27:42:c0:d4:fa:25:7a:e8:18:0a:37:d6:1d:37:29:1a:ca:
         ae:90:e4:c4:de:5f:1a:e3:d4:08:4e:df:7d:41:41:52:7f:77:
         33:3e:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:09 2026 by rpki-client