Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
File:                     _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json)
Hash identifier:          sF5CFj1hIzmt2/yx2fDH2tG/Q9+aLo0C4sV0CGypUxA=
Subject key identifier:   F0:74:B7:3D:6A:1F:4E:ED:31:53:FF:51:37:FA:D0:A8:D8:94:EF:FB
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Certificate issuer:       /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial:       019CABD91B4BF03CDAB252B258C244926136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 00:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:58 +0000
Files and hashes:         1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: A8mjudisZLc4dNC1BHYlZNeABqWHpMHpGuYDQ++94T4=)
                          2: t2c4lmTqC9uGYzleHqLG4klFeZ8.roa (hash: fRL26pE0Lx95YEnYyPGswoxFOLVpoZdxz9ASbz1R9mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:1b:4b:f0:3c:da:b2:52:b2:58:c2:44:92:61:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
        Validity
            Not Before: Mar  2 00:00:58 2026 GMT
            Not After : Mar  3 00:00:58 2026 GMT
        Subject: CN=f074b73d6a1f4eed3153ff5137fad0a8d894effb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:8a:3f:11:67:be:cc:d1:d1:64:36:cf:84:
                    ba:c0:7f:d1:27:b6:95:e5:9a:ce:31:9f:33:26:45:
                    bf:aa:80:e3:a2:2e:df:04:30:1a:71:d8:c5:a7:4a:
                    93:71:14:0c:24:0f:54:0e:c6:c7:5e:85:96:ac:19:
                    40:04:6c:c1:19:6c:2b:c5:d3:ca:8c:d9:0f:08:52:
                    5d:3c:f8:a6:24:d8:0d:43:0a:ff:20:4d:76:0b:50:
                    d2:0e:82:fb:e6:86:71:75:86:66:89:e3:b1:e4:86:
                    33:e9:70:6e:75:09:c8:3e:b1:36:6e:7c:74:d1:23:
                    db:98:f1:06:0e:28:19:25:4e:01:49:6d:86:ad:e1:
                    d1:05:1e:64:3c:ce:22:bf:fd:8c:64:32:1a:2e:e5:
                    0f:e8:86:61:43:50:ba:56:47:54:1d:fd:90:f0:8c:
                    18:46:10:76:dd:bc:62:70:06:32:38:db:6e:f6:95:
                    83:62:bf:60:45:af:ef:89:40:e2:5e:f1:3c:93:d0:
                    66:79:42:41:e3:73:1e:0b:66:17:62:c7:6b:46:b7:
                    67:69:d2:f5:73:ec:d1:eb:24:58:f1:27:5e:58:5d:
                    0e:b3:41:5a:0c:e4:73:73:14:d1:8f:3d:eb:69:e5:
                    34:1f:77:5a:b9:aa:9b:39:49:3c:c9:d0:9c:3a:8e:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:74:B7:3D:6A:1F:4E:ED:31:53:FF:51:37:FA:D0:A8:D8:94:EF:FB
            X509v3 Authority Key Identifier:
                keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:65:4e:12:5a:bb:7d:94:e0:9e:ed:da:5d:bc:aa:83:05:51:
         86:28:69:df:45:bc:24:c3:d4:04:45:0b:81:f4:0d:65:42:02:
         a5:89:3f:d3:12:3a:44:ea:ba:61:78:af:ee:5b:42:bf:c7:ff:
         55:40:27:31:97:76:01:74:05:90:ff:1c:99:d4:09:dc:0b:fc:
         bf:6a:b3:e3:d3:93:b0:2a:86:6a:e8:f0:07:66:15:7a:bc:d3:
         90:d2:f0:c5:15:17:a6:0e:ea:86:01:f5:83:eb:5d:a5:28:71:
         f7:0f:a9:bc:f2:a5:4e:00:3a:bb:82:cb:4e:af:9c:1a:71:e9:
         9a:b8:65:6a:5c:fb:63:8b:40:26:fe:b3:e2:be:ad:15:8b:a7:
         a0:34:37:82:6e:06:e8:e8:8c:4c:35:34:23:e9:d4:bd:f4:a6:
         e6:38:cf:ee:4d:a2:a8:ba:a1:b9:90:ce:5f:77:ed:ee:83:2e:
         7f:72:d8:ca:a2:15:53:0b:82:d0:03:70:e8:e9:da:af:51:bd:
         64:0a:77:d1:b3:c5:57:6c:22:5e:cf:cf:bd:05:6b:46:c7:16:
         8c:dd:fe:37:8a:1e:3b:9a:b4:d7:64:69:9c:4f:f8:01:40:90:
         0c:59:e6:4d:61:1e:47:73:e5:20:df:00:f7:b8:1e:97:ed:f6:
         c1:ed:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:45 2026 by rpki-client