Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File:                     6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier:          wEww5CwtvlJkS0ItHJB6Z3sXn1RJmeNIkYGPjh2jlgM=
Subject key identifier:   01:40:FD:6B:9F:FA:43:9B:73:2B:47:32:9E:B4:1B:DC:2C:4A:59:EA
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       019CAC7E25A8256D0D2D229047B77CA5B019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number:          17E7
Signing time:             Mon 02 Mar 2026 03:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:14 +0000
Files and hashes:         1: 3V-oI545qzWJJ_b9C5qCJ8LoZ70.roa (hash: dBqoxgKCcb3Bb3rl4SUwmiuxUnl7cOt7xFGOUiVmfSc=)
                          2: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: zS3Joy5ye50WEN4OFK0hiiTwDWAVfGtnKa17tIuxRUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:25:a8:25:6d:0d:2d:22:90:47:b7:7c:a5:b0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Mar  2 03:01:14 2026 GMT
            Not After : Mar  3 03:01:14 2026 GMT
        Subject: CN=0140fd6b9ffa439b732b47329eb41bdc2c4a59ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:41:c8:81:80:ea:7a:4f:cd:9f:d8:e3:57:e7:
                    f7:64:1d:23:4e:9f:39:02:fc:d5:74:19:e7:f7:12:
                    12:2d:15:78:ec:ca:49:5a:e2:10:26:08:8f:3d:b7:
                    ca:54:7f:9d:7f:b5:ff:dd:83:cc:b5:6c:80:4e:ae:
                    9c:cd:e9:07:d4:3f:87:70:7c:af:36:5f:e0:5e:45:
                    83:c0:3d:30:3c:19:03:66:f0:ec:2a:5e:88:f7:66:
                    53:39:51:93:b4:52:8e:50:76:20:32:b7:9c:64:2a:
                    7a:36:85:69:d4:51:35:df:59:89:09:a4:3a:40:d4:
                    f7:c1:f8:d9:d7:f0:6c:a7:db:ed:1d:89:df:7c:ac:
                    ca:4b:93:02:de:40:b7:2b:64:8b:a3:fc:ec:49:d5:
                    d4:83:53:8c:9a:e7:6d:56:3f:4a:23:f7:c7:c7:87:
                    81:1d:52:be:fe:30:0b:b2:70:e8:21:06:d8:29:ea:
                    be:0e:c8:6d:c5:e1:8a:44:cf:48:b5:d5:ff:27:bb:
                    95:58:f1:3d:e1:c5:93:da:82:b8:a9:68:37:61:47:
                    b3:00:3d:46:8b:bb:63:f3:42:ba:10:0a:04:84:56:
                    9d:ab:4b:fa:c3:83:2c:c3:63:de:09:c8:37:05:66:
                    65:9d:29:69:27:91:a8:04:36:47:b9:08:e0:7f:05:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:FD:6B:9F:FA:43:9B:73:2B:47:32:9E:B4:1B:DC:2C:4A:59:EA
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:63:91:3e:6a:82:04:48:6c:43:4b:25:89:5c:05:ec:ce:
         75:f1:da:3a:b8:a0:1b:59:1c:d3:b1:ad:89:3b:0d:aa:1a:ca:
         99:25:ef:cb:83:ec:17:89:d5:10:a2:13:b8:09:16:b2:63:6e:
         66:98:c2:bd:7b:1f:62:b6:6e:3d:05:71:71:0c:15:de:f0:58:
         0e:59:eb:ae:83:35:4b:82:35:23:bd:27:33:71:32:71:51:f8:
         e1:63:2d:5f:a6:54:e5:22:79:60:15:5b:40:c0:c4:ff:36:c3:
         27:9e:f9:60:7a:d4:5d:94:72:ed:ac:7c:c1:10:6f:f8:25:83:
         05:b3:c7:54:30:c6:ae:a5:77:f8:09:c1:10:b8:6f:cb:c0:ed:
         d7:ee:34:aa:3b:08:35:04:bd:03:41:be:80:30:59:de:df:7c:
         32:7a:3b:7b:79:eb:88:68:db:2f:48:70:db:47:ae:f0:72:40:
         dc:94:cd:e0:79:ca:d9:8b:81:2c:55:b0:30:2f:60:c0:67:ee:
         7e:e9:bc:50:86:67:61:73:80:eb:9e:74:53:b1:d1:65:3a:cd:
         5b:ea:20:82:1c:22:b3:18:64:42:f9:0e:e6:87:03:91:72:18:
         3d:c9:e6:cf:27:61:df:59:fc:e1:0e:6d:95:93:bc:db:fe:d6:
         a8:cd:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:43 2026 by rpki-client