Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          Qv6GRZVCu8cpcRiIcSe8rUY9swnFKnjVrc1StVgDrCw=
Subject key identifier:   DB:57:B7:B1:83:A3:35:EE:EB:07:7C:9C:87:67:D5:E6:08:2C:39:6E
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       019CAB34129553CF7AF2115CD9A0F24F3F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          1147
Signing time:             Sun 01 Mar 2026 21:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:42 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: T9UUhsHUWTO/7N7fg1AAXrZqq+M+vUsp4OSLKM2dy+Y=)
                          2: JHZzuCbY7H0te7-M11FOsaEJkB4.roa (hash: KwT//EDVtL7MXcat5zcL7S0XiNpCz55laXIuKNdqZ68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:12:95:53:cf:7a:f2:11:5c:d9:a0:f2:4f:3f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: Mar  1 21:00:42 2026 GMT
            Not After : Mar  2 21:00:42 2026 GMT
        Subject: CN=db57b7b183a335eeeb077c9c8767d5e6082c396e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:95:96:74:7f:34:e1:a3:c1:72:bb:d8:c0:
                    31:96:c7:e0:b6:4c:c0:5a:7d:34:d8:ef:7f:46:92:
                    ee:83:d1:2a:1c:35:7f:72:33:43:8e:1b:ef:6d:f0:
                    1d:e4:cc:59:6a:18:8b:96:8e:d8:03:7d:e1:99:f4:
                    ce:4c:b6:24:da:d3:1e:ce:ed:c7:90:50:da:ce:9c:
                    ec:5c:8d:fd:8c:f6:4d:6c:0c:fd:2d:82:5c:5b:43:
                    ba:1e:c0:d0:1c:ea:45:ac:e8:98:44:53:36:25:08:
                    3d:26:74:7b:3c:ed:5f:1a:cd:cc:09:27:0e:45:4c:
                    ac:b5:f8:3f:55:83:74:24:36:4a:36:11:c1:91:1f:
                    20:2e:61:93:b6:b2:04:86:66:36:a4:da:b2:df:f0:
                    0e:87:bb:f1:31:c0:25:91:95:ae:66:b9:b9:86:1c:
                    5b:64:8a:32:d6:93:56:7b:bb:55:95:6c:b5:5a:76:
                    6b:81:8a:d3:22:32:2c:4e:f5:5d:b4:9b:72:91:1c:
                    da:2a:03:fc:a0:3f:87:92:99:d0:9b:12:ea:ed:1b:
                    30:cb:35:23:29:88:a9:f4:df:28:54:35:a4:67:bc:
                    8c:31:c5:f6:39:fa:75:0a:6d:8d:ea:b3:31:d9:fb:
                    c6:8b:0f:9f:fa:0f:3c:50:0c:4e:cc:17:a0:ae:a3:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:B7:B1:83:A3:35:EE:EB:07:7C:9C:87:67:D5:E6:08:2C:39:6E
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e0:d4:9e:3f:dc:09:6d:a1:61:69:41:f5:70:9f:c5:e5:34:
         13:8d:a7:ed:58:89:72:92:bc:02:11:c9:33:f3:03:da:83:d0:
         d3:e7:7e:9c:41:73:1d:85:b9:cf:ea:46:b5:2a:4d:cc:85:21:
         39:62:b5:37:17:c4:b3:b2:d3:6c:a6:fb:e2:ef:78:77:06:e4:
         38:7f:78:a1:3a:e2:47:5f:79:52:fa:48:64:b0:95:61:13:28:
         45:17:df:da:5b:c3:8f:06:4b:77:7b:c4:5c:d5:db:93:12:df:
         78:f3:52:53:48:9d:5b:9d:86:ff:8f:e0:66:df:9e:eb:13:90:
         ad:96:98:9f:a9:e7:e5:00:20:a4:e7:6b:8c:8b:60:0d:c5:9c:
         a7:96:bd:10:31:3a:52:65:3b:a6:39:cd:e1:58:49:b9:dd:c0:
         c8:98:85:b3:85:06:42:05:59:99:71:73:5d:00:30:02:39:79:
         df:85:58:b7:61:15:1f:ce:af:6d:00:93:33:77:e7:61:5b:2f:
         07:8b:8c:75:11:b0:60:d6:37:97:1d:f6:fb:14:32:c9:fc:53:
         3c:e8:c3:9b:c1:d8:b6:e2:e1:3c:e8:c2:70:62:39:32:ca:4a:
         3a:c0:18:6d:d5:01:d8:c7:4c:b9:93:44:eb:f3:d9:b6:e3:0d:
         60:d1:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:02 2026 by rpki-client