Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File:                     6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier:          hYxW9RzLGf20UR5PVnIkip4XFjZu7wRCFtFk9XGY+QM=
Subject key identifier:   7A:BB:F2:BB:45:7B:B9:98:FD:80:64:30:B9:60:94:E4:60:41:34:56
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer:       /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial:       019CAC4759ACAAC950BBF2BB552827218B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 02:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:22 +0000
Files and hashes:         1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: 1Z5ewXES+2h5l9bGf5K/2iwQbG6txAarT+a4xrAdDC8=)
                          2: 6LijVWJ9huOp4_NEt8OMuQAhPhQ.roa (hash: dVZr4TJEBF6mTwqRW8xt5DyX1OCYoQva4+f32i+KSaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:59:ac:aa:c9:50:bb:f2:bb:55:28:27:21:8b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
        Validity
            Not Before: Mar  2 02:01:22 2026 GMT
            Not After : Mar  3 02:01:22 2026 GMT
        Subject: CN=7abbf2bb457bb998fd806430b96094e460413456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:64:71:8d:dd:28:11:27:9e:14:17:3e:fd:
                    dc:ae:b4:70:b3:14:aa:8f:c8:ee:41:e3:e4:ff:16:
                    fe:28:59:0e:e9:ed:9b:e5:dd:3d:70:1a:00:09:a0:
                    6b:b4:ff:87:e3:fc:22:b0:4f:5b:06:70:4e:35:f5:
                    2b:bb:dc:14:88:6c:d6:77:ff:90:0d:39:f1:83:14:
                    84:c3:f8:a0:97:f6:a1:57:35:63:0c:55:7e:eb:91:
                    7a:01:c0:f9:74:c6:26:a1:8a:45:d6:a0:47:2d:1d:
                    6c:a2:5d:34:cf:23:12:99:a0:68:22:d6:fa:26:d9:
                    cc:5a:92:a5:6c:ad:71:59:eb:d1:c4:4d:72:f7:4a:
                    db:fe:66:df:09:32:94:43:f7:e8:99:d9:bb:73:5c:
                    85:1c:a3:a2:cf:7b:b7:91:be:a8:44:b6:c3:4a:ae:
                    14:22:e0:6f:2c:f2:82:42:75:60:4d:2c:7d:29:bd:
                    e0:a8:7d:19:0e:c4:83:9f:4a:f6:95:e2:b9:c4:d5:
                    25:b7:bb:11:c0:07:4e:a7:9d:c0:51:71:e3:d5:8b:
                    21:e7:bf:a7:45:6a:9f:aa:ab:ac:b5:da:27:6d:be:
                    8a:f9:40:a4:3e:32:af:84:97:ca:bb:75:32:15:24:
                    87:52:21:aa:ed:cd:0f:da:83:35:2a:64:6a:32:da:
                    d1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BB:F2:BB:45:7B:B9:98:FD:80:64:30:B9:60:94:E4:60:41:34:56
            X509v3 Authority Key Identifier:
                keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:15:7f:2d:a9:75:d6:3c:6a:eb:d2:bb:a4:a1:90:46:01:d6:
         85:4a:60:55:be:ed:17:71:ae:fd:d9:5b:b9:39:9e:e9:d7:48:
         ca:a5:a2:01:a5:0a:ea:7e:28:85:83:69:ee:d5:05:38:5d:70:
         52:1e:96:89:e1:5a:cf:0a:3a:11:ae:e4:17:01:bf:62:52:ff:
         ae:66:c7:38:48:12:d5:39:8b:45:b2:7f:5f:8c:7e:e6:74:37:
         f6:db:a9:00:b7:bc:c5:c7:24:3d:3b:bc:dd:4c:85:89:78:a4:
         8e:4d:0f:c6:35:ec:3d:4c:64:14:b9:1c:fd:3b:5a:fd:e5:d1:
         e2:3a:55:26:19:dc:f0:eb:74:0a:36:0f:f8:da:6b:13:83:2c:
         34:98:ec:21:aa:58:86:7b:cd:24:ec:56:e9:50:9b:d5:fc:31:
         b7:d0:76:cd:91:c3:46:c1:89:dd:e1:d3:4b:c5:d1:5f:4b:51:
         59:29:35:0c:3c:f6:21:11:3b:a9:9e:7e:bd:54:eb:f4:7c:5e:
         67:6c:ab:37:31:b5:14:00:a1:10:c5:a2:23:ca:ce:d8:7c:e8:
         86:da:ea:81:30:b6:41:d8:c6:ad:fb:bb:e0:2a:f6:b4:46:b5:
         9e:44:a9:dd:85:b6:cd:48:ff:e2:58:75:09:65:50:a7:61:7f:
         5f:9c:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:49 2026 by rpki-client