Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          pESzc9ajhoDvHP3CwRamtkL157sTozZ+j4S8fZZq9S4=
Subject key identifier:   9E:24:B8:DD:28:FF:7B:D7:73:7D:96:42:50:49:2D:7C:17:E8:BD:29
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       019CACEB8644B2DAC440592B90EFB64C5DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          180A
Signing time:             Mon 02 Mar 2026 05:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:42 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: JUz25tq+sEU8kA6GgoiJPSs3q/8ALyUGCXqxPHJ8XXI=)
                          2: AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa (hash: 9TWTjByJcZOyWpXeC0+/dCxoa8gWYVHVu+bJhn9WUwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:86:44:b2:da:c4:40:59:2b:90:ef:b6:4c:5d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: Mar  2 05:00:42 2026 GMT
            Not After : Mar  3 05:00:42 2026 GMT
        Subject: CN=9e24b8dd28ff7bd7737d964250492d7c17e8bd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:11:db:7f:db:ba:61:46:d5:71:0c:af:5b:
                    38:63:91:a6:1a:24:ac:d0:25:10:0f:6d:8f:ca:da:
                    b5:7b:dd:3e:34:f2:1d:94:0e:a8:09:32:1f:9b:06:
                    a8:5e:5d:77:c3:10:98:78:79:8a:76:04:d0:22:bb:
                    93:9b:aa:e1:a4:44:62:dc:40:2b:71:eb:7b:11:e8:
                    33:87:fe:e0:e5:85:f3:58:b2:d6:f6:f5:22:63:ec:
                    ee:b5:6b:38:be:98:d1:4e:01:2f:5a:62:2f:da:5b:
                    4d:05:7d:c4:55:47:26:15:ca:8a:9b:00:ce:9a:62:
                    f8:78:e3:34:57:b4:6d:67:53:44:23:2e:c3:01:12:
                    24:25:09:f5:38:cc:f2:15:03:cc:2e:d2:e0:78:94:
                    96:d7:6b:90:6c:4f:c9:f0:53:a1:d7:f9:54:10:5d:
                    a6:49:d2:33:db:7c:6e:c1:98:fd:16:af:cb:9f:d0:
                    fd:5d:8e:a4:c3:3e:f0:9c:f2:4c:40:95:48:67:e3:
                    32:a0:2c:0e:17:b7:ce:0f:41:e1:b5:23:24:7f:5f:
                    48:67:9e:07:d1:78:03:7e:d9:8e:14:7d:30:d1:7a:
                    4d:28:bd:cb:a0:70:e1:bd:6c:2c:a8:4d:a7:2b:42:
                    05:e4:04:6e:ab:89:6d:9a:8f:b9:7d:2d:0f:81:da:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:24:B8:DD:28:FF:7B:D7:73:7D:96:42:50:49:2D:7C:17:E8:BD:29
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:59:d4:8d:84:91:46:e7:9b:c1:a8:63:94:ce:3c:06:57:
         45:b3:35:07:59:50:6c:89:62:cd:8e:1d:4f:14:21:b9:95:d7:
         82:18:76:c9:38:04:e1:05:77:64:00:bd:9c:7d:60:a7:e6:47:
         ef:9b:cb:b1:85:d7:b2:5e:c8:c6:5a:db:08:1c:b6:07:47:66:
         39:5e:e8:c0:fe:94:77:f2:5b:dd:c8:6e:fc:9f:3c:5e:b8:aa:
         fe:7e:dd:43:a8:28:9b:20:f1:b5:9b:76:a8:4e:a5:ac:ee:96:
         6d:c8:b8:b2:de:d7:72:eb:c2:f5:3f:f9:a4:b6:35:14:17:51:
         c9:4d:82:20:f8:8b:84:7e:8c:6a:b0:44:7e:3d:eb:95:57:b5:
         17:74:e3:ba:4b:dd:45:72:0b:41:4b:9d:ef:82:78:20:a5:bf:
         03:8e:b4:c5:11:5d:a8:e0:38:a2:51:9f:b2:76:f9:25:ca:e0:
         d5:e7:14:ed:2c:ff:4c:b2:cb:5c:17:e4:58:28:e2:2b:5c:e5:
         70:8a:44:2c:d0:8f:28:15:24:51:95:5a:7a:cd:84:09:67:75:
         8e:39:bf:aa:c6:7b:a9:0c:24:b8:ce:ab:fe:4a:61:09:40:fc:
         15:26:a3:d3:fb:34:13:26:47:cf:f4:46:6a:56:0e:38:e1:49:
         a0:d8:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:07 2026 by rpki-client