Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
File:                     e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft (raw, json)
Hash identifier:          z9x7oBfl2FCQBnJHH2CeBbaVbRUDwDwW5WhCwaSuJC8=
Subject key identifier:   E2:95:16:8C:0E:6C:D7:8E:B5:6D:79:CF:B2:03:68:08:CA:BB:CE:1C
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Certificate issuer:       /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial:       019CAA8F90F138C3A8896C11590755B52469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
Manifest number:          15F7
Signing time:             Sun 01 Mar 2026 18:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:01 +0000
Files and hashes:         1: e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl (hash: AhAQoyOOx5QfroBzcJaEA7NRPNoCl7J0H+BcXgENkOA=)
                          2: mFHhU2NyVkEbNwlkB3bejxUOOlA.roa (hash: EjtP26UkYPevXuuKHwl2GTUGnR0K4UdWJdQY55pYt8Q=)
                          3: oHEmOWvbStvmXg2LD_oqbDWil3o.roa (hash: 0Raa8F6IlDnkK8IyOP/5NEY/cQcjmmbqoE7t0YULRgs=)
                          4: zVeMOGhhQeFzksT1wb6RxaGm3Bs.roa (hash: RiwqJteMkhWRGoMK/7/uuJWp83uAVoqzTnUHF40fP2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:90:f1:38:c3:a8:89:6c:11:59:07:55:b5:24:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
        Validity
            Not Before: Mar  1 18:01:01 2026 GMT
            Not After : Mar  2 18:01:01 2026 GMT
        Subject: CN=e295168c0e6cd78eb56d79cfb2036808cabbce1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:c2:86:f0:37:54:d4:35:92:73:10:b7:ed:
                    06:7a:8e:3f:67:c1:b6:e2:23:ab:bf:9b:e2:91:09:
                    5c:5f:4f:4e:2e:0d:8e:e9:46:b9:36:18:47:51:6f:
                    89:89:06:fa:37:51:da:74:a0:eb:31:8a:16:5d:0d:
                    76:45:a3:75:2a:07:86:1d:c4:1e:35:2a:03:44:b1:
                    a2:e8:6a:fe:a0:e2:47:1e:8f:2d:48:48:8b:76:8e:
                    0b:6c:33:00:42:b1:1a:44:c6:0f:51:3b:79:41:47:
                    9e:7e:83:cc:08:2e:39:2a:76:37:4f:7a:b1:d3:b8:
                    2a:fe:e6:f6:57:f6:4d:b0:37:44:9a:8e:05:52:53:
                    1e:de:d0:f2:95:e0:90:f2:02:1e:42:a5:82:5b:0e:
                    fc:78:d3:4e:01:8c:e5:a5:6c:aa:63:14:6a:2e:b4:
                    20:7d:d9:a7:da:2b:fc:1b:23:c4:fe:d0:b3:86:b5:
                    e5:58:c3:0c:15:01:18:e6:96:39:28:a3:5e:08:12:
                    46:65:6b:21:cc:4f:15:d5:5a:ce:71:95:4a:17:b8:
                    80:3e:f6:47:70:94:52:73:a3:1f:e4:19:e4:f3:38:
                    e2:64:fd:c5:e6:32:eb:d6:17:1e:31:29:f0:74:da:
                    e1:6d:38:8c:22:37:8c:4f:52:48:47:d2:c1:8e:04:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:95:16:8C:0E:6C:D7:8E:B5:6D:79:CF:B2:03:68:08:CA:BB:CE:1C
            X509v3 Authority Key Identifier:
                keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9e:e1:48:f5:e0:61:7d:be:91:82:53:00:a4:ae:dc:8f:0e:
         8a:cc:2b:33:33:04:6c:1c:1c:5c:81:ce:f2:e1:f5:4c:e8:40:
         ad:0a:1b:a9:2f:7e:f1:b2:ee:4c:eb:9d:89:4a:e6:5f:b6:9e:
         76:07:89:17:2c:83:f0:dc:4f:e9:91:0f:22:8b:16:47:94:bb:
         42:e7:17:4c:ae:f1:13:7c:56:e6:80:59:9f:12:e1:07:e2:20:
         50:51:a4:4e:94:28:55:6d:fd:bc:de:bf:34:8f:ee:6f:e7:06:
         43:0c:bb:60:a5:ba:20:22:b6:66:aa:b7:56:aa:fa:57:2a:5c:
         11:85:09:c2:e7:03:08:d1:fc:6a:ea:a6:e4:4f:13:cb:e1:e1:
         b1:2a:83:af:06:93:aa:9e:24:ea:7b:48:2f:b8:5e:24:da:29:
         04:71:3a:ef:9b:59:9c:36:6a:ee:d4:31:33:65:10:8d:2b:aa:
         55:0e:dc:d5:25:0f:fb:3a:3a:8e:9e:46:bb:8c:3e:20:e0:dc:
         46:d5:64:f3:d0:94:54:b2:21:2f:9d:5d:a3:55:92:6e:d6:c6:
         7e:b9:f8:57:e5:97:90:6f:74:8d:44:fd:2c:ef:15:93:01:18:
         8c:d0:6f:73:4b:d5:cc:0e:d3:99:94:5f:c0:90:fd:96:7d:39:
         bb:71:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:19 2026 by rpki-client