Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File:                     6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier:          FtbQgzPfWcwCJY09TUzCaU2cg+QFbllgzRi/UFgITXw=
Subject key identifier:   87:5F:20:40:95:F5:38:D3:41:7B:91:E6:16:80:00:F2:2B:46:82:7B
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer:       /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial:       019CACB4E1CB2D52DD00F7A4C57C861B71CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number:          17D9
Signing time:             Mon 02 Mar 2026 04:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:01 +0000
Files and hashes:         1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: 6PnmPaOliZvPA/p+jQ3BKQ5hTAt1vLWg2kSrFSi7tb8=)
                          2: m2Z0wBEzN8fscwTDloF7hDYFp-U.roa (hash: RR+TM2qfe7c3hOxq3hLFeEmbYbML3r9sN4F/EITsexg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:e1:cb:2d:52:dd:00:f7:a4:c5:7c:86:1b:71:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
        Validity
            Not Before: Mar  2 04:01:01 2026 GMT
            Not After : Mar  3 04:01:01 2026 GMT
        Subject: CN=875f204095f538d3417b91e6168000f22b46827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:0d:f2:04:0b:49:81:b2:61:34:ad:a7:16:
                    d4:c5:23:77:1d:37:38:b0:23:e5:77:a8:81:35:1b:
                    24:02:f4:70:ca:46:93:d8:f4:c1:7a:61:72:46:aa:
                    9a:03:15:a7:53:dc:19:29:e8:45:87:1e:8f:bc:95:
                    03:c5:d7:11:fb:17:8b:da:28:e9:3b:b8:72:27:c1:
                    70:01:6b:a7:ab:41:ee:3e:bf:3c:51:4d:b7:62:d2:
                    b7:8a:fd:c4:7a:72:87:8a:5d:2d:fc:09:5e:4c:7c:
                    85:05:3a:51:10:34:f1:a2:24:c8:af:c6:e9:1c:15:
                    bd:30:ad:47:93:6c:f5:cb:c1:32:63:88:43:d8:ba:
                    ee:ce:c5:e8:4c:0a:ad:b7:fc:8d:d5:77:d1:8b:cc:
                    3f:e1:f2:1a:ed:62:df:09:9f:42:ea:13:74:51:13:
                    e2:74:e9:25:4c:cd:8b:61:e1:5b:bd:ac:9d:19:44:
                    ec:70:95:7d:87:d3:4d:56:19:dd:f2:15:c6:62:f3:
                    6d:83:6a:d4:ba:c4:ed:e2:e9:24:ba:97:2e:0c:5b:
                    e2:75:de:4d:27:f6:03:87:19:77:66:58:4b:f5:11:
                    a4:81:d8:05:ab:d6:59:0c:81:d6:90:8c:26:3a:e5:
                    77:26:45:ec:45:37:c5:5b:00:c0:e3:12:0e:4c:a7:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5F:20:40:95:F5:38:D3:41:7B:91:E6:16:80:00:F2:2B:46:82:7B
            X509v3 Authority Key Identifier:
                keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c9:cf:60:b9:2f:a0:54:9f:ad:60:a6:8b:ff:c8:7f:27:34:
         89:3e:6b:b0:68:e7:fb:a1:ab:0f:b9:06:0d:6a:27:b0:b2:d0:
         e6:2d:7e:41:e3:90:3c:ed:3f:bb:9b:cb:f6:a5:e7:29:a4:f7:
         01:83:10:d3:e3:b6:d7:8c:56:68:fe:50:7d:65:3d:24:62:3e:
         73:1b:34:ad:ad:28:ef:7b:3b:29:1c:36:e7:c1:3a:d5:44:5e:
         4c:35:c0:aa:41:1a:f5:bd:bd:9c:a8:7e:a8:40:80:ce:63:f1:
         90:31:84:3b:76:45:c2:b4:6a:70:b2:e7:8a:7e:d4:64:c3:39:
         58:3e:29:d6:ae:3c:bf:13:63:c5:e7:3b:03:7f:c2:66:84:4b:
         b0:ed:db:0f:ef:8c:dd:4f:24:05:0c:b9:32:c4:c8:dd:82:b0:
         38:03:ab:f8:fe:d3:84:cd:7a:3b:b2:8e:f6:af:3a:e9:bc:09:
         7e:7e:f2:5b:72:02:48:b9:17:92:40:42:21:7b:1b:d3:3e:76:
         dc:7e:9d:9f:7e:12:c5:62:7c:9e:49:04:c9:58:17:c5:28:ad:
         d8:70:5f:40:2a:7b:60:de:07:78:72:85:d4:60:b8:3b:9a:1d:
         a9:69:d2:c8:d1:d0:75:f1:d6:91:c0:c1:f9:73:d5:a8:16:5f:
         96:0b:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:40 2026 by rpki-client