Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
File:                     6u6iC7vbml0c3HEU4q9RjnaxQm4.mft (raw, json)
Hash identifier:          IbwuBHq4yY1OLpnjkNkENY8N+L+PRw4SmjBqF6uoUfk=
Subject key identifier:   84:0D:BA:C4:00:E4:49:4E:FC:21:C8:C2:A6:D2:A3:1B:72:D8:6F:00
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Certificate issuer:       /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial:       019CB024522032C55D488ABEF6163D537D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 20:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 20:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 20:01:36 +0000
Files and hashes:         1: 6u6iC7vbml0c3HEU4q9RjnaxQm4.crl (hash: LEcZYubzwfMTIAzvx5iWAgaaYsyVKW1WqsltOHimIpE=)
                          2: LZEBPluhCoborF_O0Fk61GdYTw8.roa (hash: zfbx+QvXX+SeMAX2wWC1OWFd4i1WRuUBcXy9UiFHCF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:24:52:20:32:c5:5d:48:8a:be:f6:16:3d:53:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
        Validity
            Not Before: Mar  2 20:01:36 2026 GMT
            Not After : Mar  3 20:01:36 2026 GMT
        Subject: CN=840dbac400e4494efc21c8c2a6d2a31b72d86f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:1c:b1:1b:f0:6d:b4:2a:06:87:9a:af:06:
                    34:7a:a4:65:9d:6f:82:63:f5:ce:52:b7:99:0f:3a:
                    08:d2:83:3d:e1:07:c2:55:dd:38:d1:e2:4e:5e:43:
                    0f:12:84:35:48:46:ba:b3:0d:29:3a:f4:f2:b1:94:
                    40:e7:3e:4a:2a:f7:a1:6a:6e:8d:8b:36:65:18:00:
                    de:9d:fb:ae:d8:ce:fa:41:e2:cc:e7:32:bd:55:47:
                    0e:7d:af:d9:cf:f9:1c:bd:b7:37:c8:fb:d7:bf:7e:
                    a6:4e:69:02:dd:4c:92:6a:5e:9d:7d:66:cf:f0:40:
                    b4:98:3f:ee:7a:ca:20:e7:d1:7e:8c:a4:9e:f8:b6:
                    d7:4a:a5:1b:0d:a7:0a:c5:88:4e:78:d8:94:af:91:
                    ca:20:c4:f1:cc:47:a3:a0:14:54:ac:18:5b:33:38:
                    74:fb:b8:bb:f1:d4:36:a9:a2:c7:1b:f4:c6:8f:34:
                    e1:38:d0:a3:7c:ac:54:f9:b4:c5:99:66:4a:79:5b:
                    43:c0:f4:58:57:7b:9f:b9:a8:79:a5:c4:5e:be:e1:
                    3b:06:c7:50:e8:04:df:75:3d:c8:11:0f:fc:b6:86:
                    2b:37:7a:9d:de:31:e5:0d:5e:d1:da:a2:5d:a3:9c:
                    aa:05:b1:9d:67:eb:3b:a5:f5:44:09:14:f5:b9:c0:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0D:BA:C4:00:E4:49:4E:FC:21:C8:C2:A6:D2:A3:1B:72:D8:6F:00
            X509v3 Authority Key Identifier:
                keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:7a:a1:0e:be:9e:38:c4:12:a8:ab:f8:e1:38:f5:a7:bd:
         3a:a2:72:b4:3f:97:f6:37:dc:79:a1:be:06:3b:ec:7e:de:03:
         0c:6f:3b:65:2e:db:2a:3e:f9:04:36:29:0b:33:7b:5b:5f:f2:
         72:49:11:08:6a:b6:5c:23:35:cb:ad:c1:5f:bf:8b:58:92:48:
         42:75:ba:37:e2:06:35:02:8a:87:92:57:fe:c6:45:df:36:84:
         46:83:51:1f:84:54:79:3c:36:f6:0f:20:77:57:ac:b8:4d:4e:
         a7:ff:b0:b1:7e:b0:fb:17:69:21:55:10:24:90:3d:5c:25:9f:
         fa:2c:10:18:fe:d1:a3:a3:da:72:3d:68:d3:81:b0:e3:73:ab:
         23:98:85:08:f5:72:88:37:99:f8:4a:78:d8:f5:dc:ca:79:ba:
         f5:75:02:89:bf:c1:97:0c:c6:b8:7f:c9:44:0f:a5:8b:43:10:
         3b:a9:dc:81:00:00:77:61:28:61:f0:9c:75:4a:be:ee:53:ab:
         8d:9e:bb:0e:85:2a:5c:c4:68:b4:29:0b:b3:b7:05:8a:ed:a0:
         11:0d:38:bd:57:72:71:98:a4:64:2e:bf:12:a3:b6:1c:93:6c:
         c5:2d:9c:18:a7:47:0e:5d:ae:f2:e6:ba:e2:33:fd:e5:28:b7:
         18:d1:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:06 2026 by rpki-client