Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          IVEx6f8J2onT0mjcHfPfCKxnBcAD8RHmK7dY7Lwl0ZU=
Subject key identifier:   E8:33:C2:3C:2D:3B:3C:26:86:75:3C:E6:98:E3:51:64:6B:AF:D4:22
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       019CAE35B89BBC9C1B9DD163A2011C5653A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0CB4
Signing time:             Mon 02 Mar 2026 11:01:21 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:21 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:21 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: 5qHmeS+r0R9iHn2uUFaDwUTTN7bwk5gQCbA0tHnv9Ac=)
                          2: CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa (hash: nNkOheFA1Bvc9D0wPsf9Fhra1hW/4NT0jdBtU1SIYdk=)
                          3: KaO-__UQ_4-yFi8MMxv305lzDlw.roa (hash: MPyADIXrlTVIshlYvvPri9A+eTXT/5p1O9Y/NNCFTew=)
                          4: myL47iydC8eKGLu8PQ2TD5S3cnE.roa (hash: l0U46siz8BLtzrVkMhNRaqElDbC1K1LmUtKA9hKwXgg=)
                          5: ojYHQmSAFTm29RLFj7gCPdYmCjg.roa (hash: 7+saW1Xd2Xb7UDM8OgcUC8MrbOvLnaAq3EyCVMvJhAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:b8:9b:bc:9c:1b:9d:d1:63:a2:01:1c:56:53:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Mar  2 11:01:21 2026 GMT
            Not After : Mar  3 11:01:21 2026 GMT
        Subject: CN=e833c23c2d3b3c2686753ce698e351646bafd422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:ec:e2:10:12:98:4f:d2:5b:bd:69:f6:7d:
                    82:c8:06:e5:eb:8a:7b:63:b7:a9:68:63:dc:fb:41:
                    1a:53:2a:34:66:a8:ae:11:29:d4:76:bd:04:f3:6e:
                    ed:1d:82:d8:22:fe:55:cb:c5:37:c5:26:ef:3e:e1:
                    25:26:1d:bf:2d:75:d8:0f:37:11:ef:6a:b9:23:e0:
                    52:93:d5:ed:32:28:54:9d:a4:14:30:7a:f6:c8:45:
                    92:d6:8a:d7:5d:c2:05:08:17:8d:1a:44:ea:97:2d:
                    1c:95:31:7b:e3:37:aa:12:93:d8:32:f0:8a:9c:1f:
                    fa:cd:7b:50:2e:8f:f6:1a:19:2e:4c:c2:ae:57:17:
                    ef:8d:a0:65:03:97:63:97:7a:bc:f8:f3:4d:f4:47:
                    b6:ca:5d:3d:7d:e9:35:0f:07:3f:b4:5d:83:46:4a:
                    dd:e1:bc:28:02:19:ba:5d:39:73:33:68:50:16:2e:
                    a4:8c:ee:19:c1:ac:59:cf:e3:19:58:a3:08:96:27:
                    c4:c5:53:ee:ee:20:89:4b:af:43:d6:fc:15:97:5d:
                    48:84:46:aa:71:91:d2:32:4d:ae:3f:4b:bd:6e:f0:
                    93:79:71:90:06:74:89:90:a0:4d:a9:fd:b3:c6:c8:
                    cc:63:5d:ce:ef:96:4c:38:ce:a6:df:ec:f5:03:24:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:33:C2:3C:2D:3B:3C:26:86:75:3C:E6:98:E3:51:64:6B:AF:D4:22
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:65:7d:ee:14:04:29:8e:fb:e8:59:ec:cc:53:de:f9:99:
         8c:33:5e:8f:d5:88:3f:87:5c:a1:29:a9:15:13:c9:80:34:f0:
         ba:6f:35:a8:68:6b:3a:91:cc:22:0c:57:16:d0:bb:69:ba:64:
         d2:f8:be:68:7e:ac:17:e7:ab:3f:cc:3e:60:22:0a:32:39:ce:
         c8:90:71:d8:fd:87:d4:80:17:ec:a5:d7:f9:8e:8c:02:72:73:
         47:77:ad:14:6c:40:48:27:f6:1c:b1:45:8a:b8:a6:f4:c0:6d:
         81:ea:37:67:a7:95:42:c7:74:de:39:ab:60:75:ad:1f:52:7f:
         61:29:b3:7d:b5:0d:f0:b8:55:41:b0:61:38:26:00:d4:a7:3e:
         3d:50:20:16:a5:c6:95:15:80:f3:91:40:77:2b:5c:20:a7:8c:
         eb:81:6a:eb:13:da:cc:99:b4:7a:06:2d:1d:68:de:59:d9:7b:
         52:cb:ca:f5:fb:4c:e7:f1:92:ac:16:8f:fe:ef:99:ba:e0:bb:
         6e:9b:9b:66:ef:2e:de:86:8d:d4:57:63:3a:92:30:b3:13:61:
         59:eb:dc:13:94:db:14:b9:6b:0c:e8:d3:38:1f:aa:07:62:6c:
         3a:95:05:24:ac:33:f6:02:ff:e0:04:08:cb:d5:63:5a:f2:2c:
         49:ac:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:03 2026 by rpki-client