Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File:                     6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier:          RxnPTK/ywytWgXoh7IcvzWoco6XJafpoIk53OtSebKw=
Subject key identifier:   6C:99:2B:D5:7A:A7:6E:F6:07:35:9F:A7:D2:7F:77:AE:85:CF:5B:DF
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer:       /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial:       019CAA8FA5AAA7ADC690A7E84B6DBF504A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number:          0508
Signing time:             Sun 01 Mar 2026 18:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:06 +0000
Files and hashes:         1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: yowY2iII69H754FhoOlm6MvdYxDcHCZbQ4p/qqMGsho=)
                          2: IPh_6iVNx496xq8P78NbeC5ann4.roa (hash: p/kpws4dnlRTMpuyDTof3NBBpdQNG/GFmv/G6ZFNtHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:a5:aa:a7:ad:c6:90:a7:e8:4b:6d:bf:50:4a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
        Validity
            Not Before: Mar  1 18:01:06 2026 GMT
            Not After : Mar  2 18:01:06 2026 GMT
        Subject: CN=6c992bd57aa76ef607359fa7d27f77ae85cf5bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:72:ac:d6:6d:d9:d6:39:1b:ae:13:ff:b6:
                    15:36:87:a6:fd:58:cb:22:94:19:20:ed:55:42:4d:
                    b9:12:ac:60:be:54:3b:26:75:1c:2a:28:2c:43:a7:
                    2c:21:ab:42:26:ee:24:a6:3e:ab:1d:d6:8c:59:66:
                    59:1b:13:41:e0:51:7d:ea:3c:42:08:6c:09:04:47:
                    e7:a8:44:b6:7b:f7:82:60:19:12:ac:99:ed:49:47:
                    85:e1:1d:31:5c:09:06:92:c0:a8:3b:c1:a4:80:94:
                    ea:ba:ca:02:96:bd:67:3c:62:23:72:5a:98:9a:cc:
                    33:17:cf:4b:b3:55:3d:86:55:e9:81:6d:71:a1:cf:
                    c6:5f:81:30:fc:84:ba:48:9b:c4:29:0b:40:ce:53:
                    52:eb:f6:37:d6:ee:e9:a3:01:10:2b:97:4c:87:83:
                    08:09:a0:61:6e:2a:d9:89:bf:53:76:e0:ae:30:09:
                    0d:ea:d0:da:be:d1:b7:c2:9b:e8:5c:36:a7:b1:d7:
                    36:a8:e3:f2:77:1f:95:f5:0c:54:bb:f4:00:1a:b8:
                    02:36:c1:6e:fd:c2:28:15:e2:4b:05:a5:a9:42:e7:
                    32:7c:f9:c6:ca:3e:8a:d6:ec:33:eb:eb:bc:5e:21:
                    82:d7:d3:81:53:82:89:b0:e7:e8:d1:1b:4c:1c:45:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:99:2B:D5:7A:A7:6E:F6:07:35:9F:A7:D2:7F:77:AE:85:CF:5B:DF
            X509v3 Authority Key Identifier:
                keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:af:79:21:a1:05:ca:10:ab:43:b4:b8:c9:8a:f3:b1:ed:d5:
         cb:14:30:79:00:36:a8:cf:92:84:4a:37:a5:e4:96:4a:14:c1:
         a1:56:7d:4d:58:6f:29:cf:da:66:1f:2f:8c:54:34:30:0c:18:
         d2:98:5b:0d:ca:3f:b6:83:46:43:15:62:03:7b:34:51:fd:35:
         4d:12:24:0f:6a:e0:37:36:cf:e8:c4:00:a8:8d:c6:00:a0:9f:
         67:bf:cb:b1:6e:02:ad:61:e6:0d:5e:c7:50:04:df:2b:9f:04:
         1d:69:69:b7:ca:a9:3f:f6:be:8a:eb:75:f1:6c:be:15:09:91:
         75:63:c6:75:aa:62:d6:3b:34:73:b2:f3:d2:54:43:85:d0:9b:
         d5:74:96:d9:87:90:50:ef:12:5e:7b:19:a7:69:7b:57:56:e9:
         31:79:a2:fe:02:ec:05:1d:a0:ca:82:b0:dc:91:60:66:95:81:
         0f:09:4f:c2:d0:45:00:a7:a9:8a:1c:8d:ae:ee:20:66:4c:fa:
         2b:c8:06:b3:a9:80:65:41:5e:e5:17:a3:e2:78:26:cf:7f:93:
         4b:ad:76:3f:da:97:e1:82:ab:46:36:03:a5:db:d3:a8:2b:72:
         f7:ed:87:68:c8:67:10:33:2e:2b:b3:4e:03:30:30:38:6c:b0:
         d0:83:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:41 2026 by rpki-client