Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          yDYhfsJJ2AikkRSS8Uve0sNq5L99X479wuAmKbYN4g8=
Subject key identifier:   68:08:40:56:7A:3E:37:B3:2B:05:3B:75:20:81:66:84:B7:FE:DA:B7
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       019CAAFD1A60A8D16D2934A9FCCBCB8FB111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          18B8
Signing time:             Sun 01 Mar 2026 20:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:39 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: f4EQTs+BRI/SREGbnji3+X/wMhThSrGKw5npaCRT1Xw=)
                          2: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
                          3: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
                          4: KcPunzFhBZjGxiSntfHDdjlxspg.roa (hash: Vu6WnP3DTgWZlxUK1kicLkHb4wJxtlC6DqS6RD7zpbM=)
                          5: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
                          6: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
                          7: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
                          8: qWLYkYyPF3Q56bkxOqfcbBNYfdI.roa (hash: 87biHJSEFjMxu1mKJBdci0r1wjQAEsssYclG1CKrmJg=)
                          9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:1a:60:a8:d1:6d:29:34:a9:fc:cb:cb:8f:b1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Mar  1 20:00:39 2026 GMT
            Not After : Mar  2 20:00:39 2026 GMT
        Subject: CN=680840567a3e37b32b053b7520816684b7fedab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:a0:26:e9:ed:1e:44:29:72:88:69:02:66:
                    c7:74:d7:37:ec:cf:6d:47:9d:f0:e9:39:6e:b9:1e:
                    7f:88:e9:dc:11:25:0f:d7:92:5a:66:aa:1c:33:99:
                    3d:7d:1e:ee:17:29:d9:0d:1a:2a:2f:20:8b:c8:f1:
                    31:6d:75:7d:d7:08:cc:32:8e:91:15:f5:34:bc:51:
                    75:92:70:a2:0d:4a:d1:56:6d:80:c8:e1:cd:c6:cf:
                    5f:57:0e:1d:a0:6e:39:61:88:a1:44:9c:f5:92:40:
                    41:e6:ba:ad:31:9a:0a:9c:1b:8c:0e:52:0d:0c:8c:
                    86:03:9f:a8:a6:5a:4b:22:a3:a6:da:b6:4e:e6:e3:
                    72:9a:4b:47:33:14:4d:cd:4f:6a:5b:b6:cd:0d:63:
                    88:41:c1:43:c2:3e:ca:9e:cb:8d:cb:59:38:2f:54:
                    9c:b5:8a:01:6e:a0:3f:bf:c8:03:e9:33:c1:65:d2:
                    96:22:bc:8a:9b:9a:98:8e:e7:a8:c3:b3:49:3c:f8:
                    4a:27:18:30:70:bf:9c:80:d8:33:15:56:39:e7:06:
                    86:5b:ad:31:f0:b0:f1:ab:d4:a0:34:b7:5e:f1:a0:
                    9b:aa:30:d9:23:89:1b:cc:49:d7:bf:92:fe:71:32:
                    35:03:1b:e6:76:aa:1b:14:90:62:8b:b2:f3:0f:14:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:08:40:56:7A:3E:37:B3:2B:05:3B:75:20:81:66:84:B7:FE:DA:B7
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:e1:e2:40:6d:64:51:34:ee:7e:aa:72:fe:38:b5:d5:cb:
         4a:04:cf:2a:3b:13:44:9d:bd:d4:3f:8b:e5:fb:61:e7:2a:2d:
         4c:dd:70:51:a3:f5:16:32:d0:61:05:3c:d1:37:df:04:15:55:
         5d:cd:6d:19:05:73:d8:73:e7:1c:2b:a9:a7:98:1d:04:90:fe:
         34:ae:dc:98:e8:22:90:24:5e:d0:55:68:b1:fa:fa:b6:6c:73:
         31:e3:1a:7a:da:0f:c0:76:7b:6c:8f:24:35:64:d0:f0:dc:1f:
         0a:16:53:61:a9:59:1c:a9:66:86:24:94:34:41:6b:97:79:82:
         a2:4c:95:e4:8c:a2:bd:07:90:47:17:fe:0a:c5:b2:fa:70:5b:
         11:bf:8b:fa:75:51:4f:98:90:c4:68:8f:ae:58:20:6c:3c:71:
         46:32:01:4c:b9:80:3a:40:64:f0:cd:6a:85:69:dd:7d:95:52:
         2b:0c:ba:67:7a:fa:77:f5:dc:59:ad:49:47:bc:f9:68:b2:e8:
         04:ad:7b:ce:ab:a1:45:94:76:29:aa:20:3b:9d:61:32:61:df:
         a7:c1:c7:ef:81:7d:eb:44:28:70:e1:63:62:ad:31:c4:66:d6:
         ce:33:73:4f:ff:46:70:1f:a4:12:41:26:bc:d0:54:9e:cc:04:
         86:c9:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:24 2026 by rpki-client