Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File:                     6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier:          5zDmcIGR2/7FmHy5e4uPEbSU23GTov/V6m6NX5eJ0Ek=
Subject key identifier:   11:BB:70:71:24:28:69:59:6A:C6:B1:47:B4:37:9E:16:4C:F8:29:E3
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer:       /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial:       019CAD598D819922B43D9A55587739D3F1D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 07:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:53 +0000
Files and hashes:         1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: yKiWOImu1F/aYXN9iYic+zZldh9oEe1iPti98AuZp4A=)
                          2: zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa (hash: AJBQtpRLkRSZKhdaLX+ia9/jPSSmkNLT+zLAkaVXhn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:8d:81:99:22:b4:3d:9a:55:58:77:39:d3:f1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
        Validity
            Not Before: Mar  2 07:00:53 2026 GMT
            Not After : Mar  3 07:00:53 2026 GMT
        Subject: CN=11bb7071242869596ac6b147b4379e164cf829e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:64:a2:b0:41:6c:f7:fe:34:2c:56:4f:21:1c:
                    08:ce:fd:92:99:a6:c4:6a:99:f4:59:e5:d2:3e:0d:
                    eb:6d:06:cc:8f:1f:58:80:eb:cd:44:dd:d7:d4:b9:
                    a6:92:b9:4e:80:97:6c:b2:fb:31:ba:34:a5:6a:e7:
                    68:d5:e5:50:03:cb:57:e1:19:25:99:2d:d6:55:87:
                    81:91:0d:08:29:8d:80:94:e3:59:23:7c:2b:b5:16:
                    cd:c4:2b:de:01:b4:b8:a4:42:41:63:f9:30:5a:e0:
                    53:7f:e1:5a:f3:8a:02:cd:af:75:bc:63:f7:08:21:
                    2d:7c:4f:86:b7:3f:0d:a8:cc:1e:dc:2a:02:bb:f0:
                    79:88:35:3d:68:07:d7:fb:75:99:32:8c:a7:2b:bb:
                    6a:47:47:d0:c3:4d:e3:8c:58:3b:ec:3e:68:c0:a5:
                    47:a0:80:14:b9:46:32:10:9b:09:ed:0c:ac:ce:d8:
                    e4:af:b8:f1:36:38:8d:ea:40:22:0b:b2:77:39:cc:
                    09:4b:12:91:6f:8b:c1:8f:d7:8a:3d:c9:c7:de:a0:
                    f7:7c:a0:45:76:39:e3:7c:ef:b2:0c:38:90:fc:9d:
                    48:37:0f:c4:2b:b6:6a:b1:4e:27:92:75:2b:01:f3:
                    10:64:34:31:8d:ea:5c:05:1c:97:21:5c:2f:4e:ef:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BB:70:71:24:28:69:59:6A:C6:B1:47:B4:37:9E:16:4C:F8:29:E3
            X509v3 Authority Key Identifier:
                keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:da:53:38:3e:60:fa:cf:c1:c5:c3:38:be:7e:21:0f:bd:
         4d:f3:4d:39:b4:27:5e:65:f2:30:37:2c:54:fe:0d:6c:51:31:
         ff:22:34:f5:8c:da:bf:a1:f3:61:bf:33:59:6d:00:00:12:c8:
         f5:8c:c7:92:69:94:2e:b5:29:82:77:6a:d7:4b:54:4a:0c:b8:
         9c:99:33:8c:56:b8:46:32:47:d3:7e:06:70:0d:c1:73:e8:90:
         0b:f7:b3:d1:bf:08:8b:d5:1f:dc:74:ad:f6:49:47:97:e1:3b:
         45:77:b7:7f:a4:32:22:85:47:c0:52:3b:01:a0:ec:6e:6d:06:
         ee:ed:f0:8e:b9:12:82:39:7c:cf:2b:e6:6d:c2:b7:67:05:d8:
         e9:22:ed:0c:05:fd:c8:66:d6:de:cc:57:ef:3a:ab:9d:6e:0f:
         47:43:9e:09:ae:17:0b:42:c5:a8:82:d0:e7:95:98:93:87:17:
         60:d1:8e:15:a5:da:fd:87:71:b6:08:8f:4f:0b:3c:a5:b4:ae:
         f3:75:23:a0:da:65:1f:54:b4:c0:94:4f:d3:42:89:53:60:76:
         a7:ee:a7:c2:c4:d2:a3:77:a1:ee:d6:55:4c:73:ff:8f:64:02:
         e6:95:96:64:e6:0c:c1:06:a1:75:a5:bd:bc:f0:71:fe:64:f8:
         9d:79:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:26 2026 by rpki-client