Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
File:                     q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json)
Hash identifier:          UMGtLbMDQuSRoD1r78PbZwp1e4EOde/x3QkEh1uYtFk=
Subject key identifier:   CB:CE:95:EF:8A:8B:E7:5B:D3:02:58:8F:7E:EB:42:BD:D6:B1:21:C3
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Certificate issuer:       /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial:       019CAA58274288B1B24B582BADE4F2476712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 17:00:29 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:29 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:29 +0000
Files and hashes:         1: 6J5TSLLBcZQZ1t0m9tHYx1zQO8E.roa (hash: KO2aOSJGd+WUr2sCNzhk71scD2DSjrZzDD3qQEnCxGw=)
                          2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: YTG7GP+9J2xR4s0Z6vQpLtQQH+Hp/+zAQm0tlziAA9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:27:42:88:b1:b2:4b:58:2b:ad:e4:f2:47:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
        Validity
            Not Before: Mar  1 17:00:29 2026 GMT
            Not After : Mar  2 17:00:29 2026 GMT
        Subject: CN=cbce95ef8a8be75bd302588f7eeb42bdd6b121c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3c:98:b2:ca:cf:c7:3d:61:bf:8b:f4:3c:30:
                    63:16:f0:4d:b7:91:ac:21:01:06:71:ca:bc:6b:c8:
                    52:9f:8b:a6:47:c0:8c:35:55:93:15:bc:25:7a:e7:
                    84:28:e4:8a:e9:21:f8:f3:ac:9f:16:d0:70:66:4c:
                    67:a9:31:40:07:10:b8:14:7e:8a:f0:2e:89:c7:40:
                    f5:24:8b:91:8f:fb:3f:5d:f2:1d:33:bf:73:c7:95:
                    37:9d:87:8a:c6:35:b3:d0:90:f3:a4:dd:1b:f9:d4:
                    e5:ba:5f:50:3b:5d:6c:22:f2:3d:0b:46:6a:22:a6:
                    db:43:10:10:64:ea:2d:d5:8b:45:43:aa:27:4e:91:
                    20:88:df:42:6f:f8:04:de:1b:c9:0a:88:99:87:1d:
                    84:3c:b0:11:8e:3d:e6:fd:64:3b:5e:12:c4:3e:85:
                    27:a5:07:a9:0d:17:9e:98:3a:bb:86:46:f0:c2:8e:
                    33:7d:56:78:94:0f:ef:e4:79:1b:8d:b8:97:e7:a8:
                    da:6c:05:50:4d:e7:79:30:84:26:39:fb:8b:1e:46:
                    52:ce:16:b5:ad:d7:39:4e:11:2f:11:a3:16:b0:6c:
                    08:0c:44:ff:39:06:d6:65:36:cf:f5:82:36:20:5d:
                    6f:1d:ba:44:8f:46:c3:09:a3:bc:79:04:0e:60:f8:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:95:EF:8A:8B:E7:5B:D3:02:58:8F:7E:EB:42:BD:D6:B1:21:C3
            X509v3 Authority Key Identifier:
                keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:0e:4d:99:8f:06:2f:3b:0d:d0:3e:4e:cd:d5:c4:4a:a7:
         2c:68:f8:e1:08:6f:f6:76:fa:9f:40:1e:53:85:0d:e5:00:d9:
         1e:15:75:87:f4:53:04:ff:5e:49:e6:7c:67:4e:8e:dd:43:f7:
         d9:56:cd:4f:09:a8:46:93:68:86:50:cc:bc:5c:32:c2:59:2c:
         a3:ca:14:da:b5:ad:9d:8b:8e:6c:09:e6:df:49:e7:bf:ba:78:
         ce:96:09:06:5e:c8:2f:59:f3:fe:0e:5a:05:cc:2a:ca:74:c3:
         21:75:cc:e4:d9:90:39:53:d2:11:a3:d1:43:63:23:36:0f:d3:
         2c:ed:74:0b:17:ac:a4:42:fc:2a:7c:e8:e5:87:fb:16:ab:44:
         32:db:a6:ac:55:44:bb:88:91:b5:3a:53:da:b8:a1:f5:b7:a6:
         40:7d:9a:b8:2e:af:09:ba:cf:a0:c6:50:e1:d9:c4:80:1a:6a:
         f8:7c:e4:96:13:73:4b:eb:ba:5b:bd:b0:88:4a:9e:6e:c4:f1:
         ed:bb:cb:88:8a:1c:b5:46:78:e2:94:92:79:73:f8:fd:0b:ab:
         17:73:42:f6:f0:ed:0c:f0:d2:02:2a:e2:0b:e2:da:75:c0:0a:
         94:0a:40:17:34:9b:21:e6:3c:1c:e7:36:a1:9b:7b:85:c4:e8:
         70:11:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:56 2026 by rpki-client