Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
File:                     6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft (raw, json)
Hash identifier:          PQpvaQ1VqO3NtF5tWFpVFPJ5WnYCyTYGGMfiAdusVz8=
Subject key identifier:   16:29:25:AA:86:6D:51:73:80:65:59:3E:82:84:B8:03:97:C0:91:5A
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Certificate issuer:       /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial:       019CAE6BDE07E7A52530A46EC0F5ADC3E815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
Manifest number:          0A60
Signing time:             Mon 02 Mar 2026 12:00:30 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:30 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:30 +0000
Files and hashes:         1: 6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl (hash: CwYVhrmVmro6mAI1PfZ6twzLIqdKKqlPEXqcBfQvGt4=)
                          2: d9WFrnc4pmf5pLTzIhIdisR_d9k.roa (hash: /xfSchjnKFgR4NLG+ItdhW/yNfERRAOpD3QUNhJFcUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6b:de:07:e7:a5:25:30:a4:6e:c0:f5:ad:c3:e8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
        Validity
            Not Before: Mar  2 12:00:30 2026 GMT
            Not After : Mar  3 12:00:30 2026 GMT
        Subject: CN=162925aa866d51738065593e8284b80397c0915a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:2f:3f:13:69:c2:b8:bd:52:ca:ba:fe:d4:
                    24:f1:b2:27:0e:3f:85:b4:2d:94:f6:b2:55:4b:43:
                    2d:cb:70:e3:ef:a8:76:e3:eb:0f:26:49:a4:01:e2:
                    4f:35:88:b1:6a:3a:bf:ea:63:0b:08:10:a9:08:0d:
                    6f:4c:4f:9d:e6:18:16:6e:78:b1:06:43:b3:81:ea:
                    fe:99:06:1a:94:8b:70:b1:e6:d8:fc:2c:c9:ad:be:
                    7b:2d:11:08:72:e8:73:a6:83:74:8f:bf:12:44:f8:
                    3e:85:88:52:75:fd:bf:b3:2c:92:e9:80:eb:4b:51:
                    cf:9d:84:00:ca:0d:a3:53:c4:26:21:ce:1b:91:c2:
                    5c:a9:87:4e:9b:db:e1:6b:6d:69:57:2e:17:26:6d:
                    b3:b1:61:91:0b:27:5a:2f:82:57:d3:1a:f4:a5:a1:
                    07:d1:44:98:77:4a:49:b0:81:6e:51:c7:93:86:29:
                    f4:91:bd:47:77:51:33:1b:43:8c:cb:d2:23:47:45:
                    97:66:33:6f:f5:bb:fb:59:46:f9:87:66:e3:a2:39:
                    d2:12:84:3f:19:76:7d:e6:f9:c5:89:a8:fe:a0:0d:
                    e5:24:9d:8c:73:87:86:c4:4b:9b:4c:b5:fb:63:16:
                    dc:e6:5e:c0:5d:f7:cb:08:af:69:9d:4f:68:ac:81:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:25:AA:86:6D:51:73:80:65:59:3E:82:84:B8:03:97:C0:91:5A
            X509v3 Authority Key Identifier:
                keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:b9:b6:5d:de:ec:8e:fe:62:62:dd:65:ca:2e:6c:c9:c9:
         97:41:db:48:76:4f:9d:ba:8c:07:48:80:7c:9a:c2:4f:27:d5:
         82:a4:1b:96:18:c7:07:e1:9c:7f:99:b7:8e:56:af:51:c7:c4:
         00:c7:30:75:d4:15:1c:3a:23:67:01:ef:2c:6c:8d:ac:43:21:
         02:ee:be:c0:44:ea:1a:7b:58:33:76:c7:43:9e:f5:3c:c7:06:
         f5:c4:4e:9c:6a:74:a0:3b:f8:c0:f6:ac:28:0f:01:97:46:6f:
         35:79:8f:69:de:66:89:de:c1:06:13:8d:83:85:2c:27:17:f9:
         86:9d:6d:a2:bb:5e:b6:05:b9:d0:d3:5f:5d:03:f9:86:5b:53:
         40:c8:de:cf:41:ef:5b:52:d5:76:0a:ed:bb:84:91:d6:c4:35:
         4c:c1:13:e0:78:20:78:91:be:0b:ea:72:80:58:ea:ea:bd:98:
         ef:bb:60:8a:14:fc:ba:4a:cf:bf:db:5b:55:8c:97:d0:01:ae:
         93:8d:40:a9:b9:3e:0c:3d:ab:fc:16:f4:0e:db:e1:c1:4e:5c:
         3e:fd:00:37:6f:0d:08:3d:b2:f7:96:18:c8:b9:9e:82:9d:0a:
         18:12:b9:fa:ae:76:aa:df:ba:df:90:75:65:27:65:96:67:ea:
         cf:d9:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:26 2026 by rpki-client