Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
File:                     6Ul4d56TDgH7_n4MX8tBYREp1Og.mft (raw, json)
Hash identifier:          LnxtwKDducEwJPI+baq2Z9FMhLMRTlWUjiGfB9p2eY8=
Subject key identifier:   27:E7:44:3F:A5:F3:39:A0:5A:87:45:6C:29:EE:76:9B:09:09:33:F3
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Certificate issuer:       /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial:       019CA86A4BAD6741B4E940B71D9AF287B088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
Manifest number:          1853
Signing time:             Sun 01 Mar 2026 08:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 08:01:04 +0000
Files and hashes:         1: 6Ul4d56TDgH7_n4MX8tBYREp1Og.crl (hash: vGNlpW+38B/nONfciMml/ozfdAnXqlcyHM2mGf68wY8=)
                          2: BGFPLk7ZldT6kSj2inC4qix-xtI.roa (hash: Noz95cmWs+k+wVGfQHBTa00dItJf0QaQtrsl4dLGxf4=)
                          3: Fa0kRYifVQx1ih9ljAG--S0xhdo.roa (hash: xDClJitXglcWv+daXM9auWd8dPPX+1tonc7rSHwTaTE=)
                          4: RzFwab2bz7rD1X-LudvVbNjO5mU.roa (hash: GwSOH4+cGYHAvcYmYqJUyTbBZaiHkn4iJ0qSxXFV6l4=)
                          5: ZNe0Xl8zEfZuTmVGimCb--629no.roa (hash: yJmE+qP+eDX9ILRziQ3wyT8miAz05JmtYTPQLAQ0NIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:4b:ad:67:41:b4:e9:40:b7:1d:9a:f2:87:b0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
        Validity
            Not Before: Mar  1 08:01:04 2026 GMT
            Not After : Mar  2 08:01:04 2026 GMT
        Subject: CN=27e7443fa5f339a05a87456c29ee769b090933f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:b8:42:6c:8b:08:68:3f:82:85:38:f9:a8:
                    b7:a9:db:bc:64:23:d4:5a:96:54:37:39:fa:0a:e2:
                    65:a2:d5:d6:22:0b:c5:c6:1b:9b:cd:1f:34:af:03:
                    d1:30:84:bc:06:f7:77:07:3e:3d:4a:5d:2f:a5:13:
                    ea:67:69:9d:19:0c:f1:2b:d1:d7:7a:e0:cd:b4:f6:
                    48:75:09:4b:14:db:f9:6c:70:bc:33:30:12:33:7a:
                    db:44:49:a7:52:58:14:fc:4b:35:0f:56:fe:f1:61:
                    3e:7a:90:26:e1:5a:77:eb:b3:ab:7a:0d:1b:1b:87:
                    5e:16:fe:dd:9a:d9:ce:f5:73:79:3d:60:fb:be:43:
                    39:fd:55:3d:9b:c5:46:9d:64:c6:a9:20:02:7e:a8:
                    68:ab:80:c6:05:c5:4e:07:e5:ce:6b:31:f8:be:95:
                    90:fd:d5:09:99:b4:72:ac:c7:da:e9:41:b1:b7:6f:
                    c6:c0:ce:d2:b3:64:0f:03:3f:9a:de:25:88:6e:f0:
                    60:86:47:3d:c9:ae:d0:2b:2d:47:cd:af:6c:ae:73:
                    b9:8e:b4:6f:26:6f:00:02:29:99:4f:f5:8c:7d:a5:
                    dc:2e:f4:2e:ad:26:4b:2a:ba:78:a6:88:57:90:c8:
                    62:e4:f3:0e:a5:09:12:1c:34:91:bc:4d:d6:eb:55:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:44:3F:A5:F3:39:A0:5A:87:45:6C:29:EE:76:9B:09:09:33:F3
            X509v3 Authority Key Identifier:
                keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:49:01:81:7a:78:87:f5:42:00:69:c6:cf:43:bb:b9:52:cb:
         3d:64:a5:69:3d:ee:f8:da:b1:a8:a6:ef:43:00:df:90:3a:64:
         a7:15:71:e4:1b:53:87:13:f3:eb:ea:db:8c:11:49:5e:57:60:
         94:d0:c4:16:0f:a2:32:ec:4f:c3:11:2a:ab:a4:de:8a:27:a4:
         ee:50:b6:72:78:b3:75:a6:98:bc:16:d0:33:3f:80:33:4f:61:
         bb:9e:fd:e6:4b:80:e9:66:1d:c9:a7:a6:0a:10:dd:b7:1a:ad:
         c8:db:44:0b:56:7c:a3:1d:9e:d8:5f:e5:66:7d:f1:96:05:10:
         5e:82:01:8d:17:c1:d8:a6:d0:98:10:dc:a0:bd:f3:ee:b8:8b:
         69:1a:8d:07:cc:e3:e4:2c:50:e1:01:47:56:e7:a1:0d:4f:97:
         f9:fd:5a:67:df:4a:70:d0:91:ad:4b:5e:95:49:3e:e7:25:ea:
         21:b6:02:9c:cc:c2:bb:11:fa:7e:4c:8a:45:0e:6f:4a:55:50:
         36:ab:77:d2:54:85:ac:0f:37:e7:3f:28:bd:80:a3:ca:00:fc:
         13:c3:68:c8:84:56:bb:e5:00:80:a7:0a:25:14:ec:e3:45:b8:
         98:e3:5e:41:4d:00:4f:c0:1f:2a:f6:f1:52:c6:83:c1:50:40:
         e3:e4:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:59 2026 by rpki-client