Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          pTGHnTcXcq8xGXz46eQ8JAtO7o58LySgLQtGApC/YH0=
Subject key identifier:   EE:F9:B7:BA:A5:9F:BB:F2:62:4F:96:D6:45:6F:A8:60:A3:DA:2E:F7
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       019CABA2377DAAD91947D2560C163870EFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 23:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:00 +0000
Files and hashes:         1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: NoOpY6+gPC1d5iSp7wAMWlfDs0IAfUksDCVBwSmerDE=)
                          2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:37:7d:aa:d9:19:47:d2:56:0c:16:38:70:ef:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Mar  1 23:01:00 2026 GMT
            Not After : Mar  2 23:01:00 2026 GMT
        Subject: CN=eef9b7baa59fbbf2624f96d6456fa860a3da2ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:53:44:9a:d9:2d:1c:d2:55:54:87:89:6d:
                    f5:b3:88:0e:f7:f9:8e:1e:7c:07:b7:9f:ca:32:22:
                    3f:f4:25:dd:d9:41:34:ca:7c:cc:70:68:47:f0:75:
                    77:c6:3b:3b:10:2c:74:b5:54:96:f2:32:61:1e:23:
                    ef:b1:3a:a4:21:8a:93:03:0b:d2:38:fb:5d:6e:44:
                    3c:4d:4b:4c:41:2d:01:7b:f9:cd:a8:66:12:13:d6:
                    a7:f3:59:bd:90:0c:8b:b8:be:dc:b4:02:5b:ca:6f:
                    b5:b3:69:e7:65:b6:22:b5:13:a7:32:30:da:3b:e1:
                    4b:b9:e3:ba:63:27:40:af:64:5b:21:5b:51:c3:1a:
                    35:2d:e7:b2:e7:6e:33:c5:d0:01:89:fd:9c:2f:bb:
                    aa:9e:12:6a:1b:1e:f7:80:7f:39:3c:f5:e5:42:e1:
                    c1:76:7b:50:7a:88:75:e6:db:62:be:f1:3c:45:0e:
                    d0:5a:54:1b:73:2d:61:34:a7:e6:b8:21:e2:77:a3:
                    7b:53:9b:d5:2f:6b:6b:17:8b:98:a6:8e:2a:b6:73:
                    b8:ed:95:89:82:f9:d2:19:03:92:47:b2:ac:91:3c:
                    43:af:57:ce:d8:5f:46:ee:df:20:f4:b1:a4:48:3a:
                    f0:ff:cb:66:44:33:34:20:80:d8:0c:2f:9e:0c:42:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:B7:BA:A5:9F:BB:F2:62:4F:96:D6:45:6F:A8:60:A3:DA:2E:F7
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:9b:4c:6d:78:9b:a7:4d:67:ca:a8:a6:e5:ff:1e:47:0b:cb:
         28:e5:a1:9c:16:f1:2f:82:12:10:ed:77:68:c9:6c:8b:0b:7f:
         0b:8a:80:c3:20:63:12:5d:8b:56:ed:35:af:69:d8:94:b7:7a:
         96:40:3f:30:f4:ab:0e:7d:41:3e:22:b6:2c:9d:30:fe:77:8a:
         24:da:81:6b:eb:cd:29:3f:00:7b:cf:96:68:ac:f6:6f:81:3e:
         4b:18:b0:97:50:35:df:5d:c0:9c:e1:84:ce:20:ee:1f:32:71:
         ab:b1:e2:5b:ae:f3:5c:ac:52:d7:71:ff:df:3c:b6:b3:35:7b:
         58:90:1d:f4:2a:4d:af:9f:69:cb:16:ac:ee:86:3f:b2:2f:22:
         b4:49:78:47:ac:2e:79:2f:55:b9:ee:94:99:5b:d8:2d:78:f9:
         6b:8e:07:ef:bd:a3:b5:39:07:10:cb:ef:3d:fb:03:44:c9:83:
         e6:0d:d4:92:db:62:82:de:c5:65:bb:f3:0d:16:6e:b9:fa:96:
         0b:bb:81:2a:bb:92:3f:73:98:39:0d:29:c6:ba:ab:fd:f5:e6:
         ad:fc:97:08:04:9e:47:ad:59:ed:d1:e9:dc:b8:1e:42:f8:40:
         17:36:b6:c3:34:95:80:34:9c:c6:f4:91:ce:2c:58:7f:5d:b7:
         ac:fb:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:50 2026 by rpki-client