Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File:                     6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier:          FCTHFLmrewR7nzPa3pde0ECkU9jFbB4BrlH/Jgi1+7M=
Subject key identifier:   B2:ED:B4:71:BA:AA:4C:86:F4:CA:3B:9A:E8:44:E3:41:A0:53:CE:4C
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer:       /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial:       019CAD90A732FE48F00B1C63E6E60293C916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number:          092D
Signing time:             Mon 02 Mar 2026 08:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:04 +0000
Files and hashes:         1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: 2DCztbdtye4RBcMbJxS7rOhc/QQc9d9GyZXfqFLwN2s=)
                          2: NhT4hC_Kop9-UElgOeKDWNxMT4w.roa (hash: Hh1bKiy5nqyZE4loxZYD93YfRpjyquMG28IeFVWqVbU=)
                          3: bfs8YI0YH3Io6ovI3fBPTv4Cxb0.roa (hash: rLPR7B5UIsCaVqkuX9IH0l6nJOJ5SAkKr0FgBYIBZvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:a7:32:fe:48:f0:0b:1c:63:e6:e6:02:93:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
        Validity
            Not Before: Mar  2 08:01:04 2026 GMT
            Not After : Mar  3 08:01:04 2026 GMT
        Subject: CN=b2edb471baaa4c86f4ca3b9ae844e341a053ce4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:1a:ef:02:9f:03:9d:ba:34:19:41:c7:eb:
                    63:da:67:e8:ad:cc:49:3a:23:c4:03:e9:27:a5:17:
                    1a:f5:0d:d0:96:6a:6d:24:ce:87:74:12:c5:87:c8:
                    61:7f:ce:b5:51:f0:03:13:a7:b4:ed:3b:be:5d:0b:
                    d6:60:c1:2b:7a:5f:ff:d2:9f:88:e6:f2:7e:7a:9c:
                    e1:64:58:94:e1:76:ab:4d:35:02:3e:88:f3:53:73:
                    7f:11:dd:7c:79:74:a2:60:49:08:77:9b:46:4c:70:
                    ee:62:a3:d2:70:77:1c:36:2d:52:ca:c8:f8:54:77:
                    4b:02:56:e8:db:30:4a:00:9f:81:bd:92:34:5d:84:
                    83:cf:d6:bb:db:24:5b:f5:76:52:b2:8f:cd:57:9c:
                    5c:a5:e0:bc:5b:4b:d8:96:9e:97:ac:86:6a:3f:eb:
                    27:5c:77:a5:7d:29:47:76:61:1d:a6:5f:09:e9:55:
                    b1:7d:4b:85:bd:b2:d4:91:93:7a:45:5c:ef:50:ac:
                    64:cf:0c:62:35:44:52:f3:b4:fb:de:9e:35:80:7f:
                    4a:76:73:df:45:7f:2d:c9:40:68:66:30:d6:ba:cc:
                    b4:ff:af:8b:9f:70:4e:cb:a1:aa:8f:f4:69:f1:e3:
                    d3:8f:b9:44:b7:b5:ea:df:90:33:d2:2f:ec:14:06:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:ED:B4:71:BA:AA:4C:86:F4:CA:3B:9A:E8:44:E3:41:A0:53:CE:4C
            X509v3 Authority Key Identifier:
                keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:18:86:dc:40:11:0a:89:ce:54:31:e2:9f:35:17:04:c4:04:
         06:cb:7b:f4:c1:f9:16:63:e0:2f:49:56:7a:71:cf:68:a7:aa:
         6d:c2:7e:f0:b3:f5:87:38:7f:a0:43:91:42:fa:51:a5:c6:bb:
         d6:43:b8:6a:77:8d:8b:64:e7:ab:3a:d2:7d:91:52:5a:74:5e:
         90:7a:de:91:b3:88:0a:29:8b:4a:9b:e0:92:47:25:84:b8:42:
         33:12:be:27:b4:ce:49:2a:f6:fb:d4:a9:50:bf:f8:63:ad:e8:
         61:78:a8:89:61:71:2d:81:41:fc:8d:dc:43:eb:3e:38:48:11:
         5f:90:41:1e:ce:ab:9e:80:eb:7f:5a:43:03:d3:60:c2:0f:f7:
         cd:b5:d8:a7:d8:b7:fc:bd:96:37:d8:18:00:da:50:a4:95:00:
         78:68:b8:47:2b:44:c5:3c:af:05:34:c6:d5:b4:0a:3e:35:e2:
         fd:26:d0:19:99:d9:39:e7:2e:3d:13:5d:a7:84:57:96:df:75:
         6c:19:85:6a:62:81:dd:26:00:ec:86:ad:67:a2:07:14:40:87:
         8c:68:fb:6d:7f:f7:da:a2:c4:fa:fa:cb:3c:32:f1:24:b1:90:
         79:ce:6d:81:69:a3:eb:21:70:6b:21:b9:7d:9a:24:6f:04:cb:
         e7:65:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:38 2026 by rpki-client