Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File:                     6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier:          cq6+CLNQjjJZB8iacUAODK8rAh0l6OeK17zu/xgctpE=
Subject key identifier:   37:1E:9B:B9:0E:40:B5:8F:3B:D0:29:3B:31:B6:F8:BA:90:B3:01:3A
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer:       /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial:       019CA97D1BEA7A695CB3C4FF8714DEB14F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number:          08CC
Signing time:             Sun 01 Mar 2026 13:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:14 +0000
Files and hashes:         1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: rgp7yCyKP7CPG9Wc5B1AdDQZ9soBYRhTqbCUvaeABRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:1b:ea:7a:69:5c:b3:c4:ff:87:14:de:b1:4f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
        Validity
            Not Before: Mar  1 13:01:14 2026 GMT
            Not After : Mar  2 13:01:14 2026 GMT
        Subject: CN=371e9bb90e40b58f3bd0293b31b6f8ba90b3013a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:6f:2d:ed:47:fc:ee:79:e5:45:62:8d:10:
                    10:d7:fd:15:d6:43:f0:b2:56:34:c5:2d:d0:f6:f9:
                    66:cc:7f:e0:df:29:06:98:8f:f4:b5:13:5e:b0:51:
                    6a:71:e1:ce:4c:96:bd:6e:b5:4d:a4:5c:65:56:11:
                    1f:7b:7d:ec:30:b8:88:5b:dd:97:9a:d8:c5:48:5f:
                    43:9c:bb:1c:b4:4f:81:65:08:05:95:6d:8c:30:49:
                    bd:1a:9c:19:d3:cb:4a:f2:8b:bc:b6:d6:c0:11:5e:
                    b6:01:98:1c:9f:ce:df:be:c2:d0:52:41:00:6c:2d:
                    50:fe:8a:ad:13:d3:01:eb:6f:d1:e7:de:ea:ea:91:
                    a7:18:f6:34:10:56:e3:94:0c:9e:f6:3b:29:5a:6e:
                    04:62:11:14:5e:93:a7:8d:d2:1e:6a:86:c0:a8:94:
                    3b:32:c7:ea:88:7b:47:b9:67:72:b1:30:47:00:19:
                    9d:e1:76:c6:c3:3f:36:48:f3:ff:c2:aa:af:96:21:
                    0e:51:83:e2:8d:f9:53:59:1d:93:e0:ea:6d:94:08:
                    24:e9:81:01:99:5b:72:49:46:3d:ae:6c:19:35:38:
                    12:a7:79:90:9e:9d:6a:33:cf:e4:b6:1d:c9:9f:52:
                    cf:03:c3:3d:3e:bf:a4:d9:28:33:68:a8:83:96:9a:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1E:9B:B9:0E:40:B5:8F:3B:D0:29:3B:31:B6:F8:BA:90:B3:01:3A
            X509v3 Authority Key Identifier:
                keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:89:3d:8d:a2:10:18:4d:80:e8:8c:6c:7b:7e:9f:81:47:be:
         66:45:a6:2e:a7:92:86:7f:5f:62:5d:4c:57:2b:8c:0a:41:dc:
         a7:24:7f:68:1d:1c:94:c7:37:9b:c9:4f:2d:80:38:6a:17:aa:
         45:e0:46:d4:c5:3a:63:18:fb:e6:2c:48:8f:f3:47:68:aa:a3:
         d0:c3:55:41:6f:be:0f:41:94:9c:ba:05:6f:64:e3:e7:ce:d4:
         3e:99:1a:33:87:54:55:2c:7d:d2:47:e4:71:b3:63:df:94:b8:
         12:c7:b9:98:4c:22:82:bd:b6:85:84:5c:88:58:96:e7:e2:0e:
         f6:41:fc:e6:f3:4f:68:fa:30:50:1c:b0:ce:8d:7c:5e:83:dd:
         76:2b:d8:b6:59:a4:bf:77:1d:41:e9:86:bd:15:4f:d8:53:1b:
         30:81:fa:8a:4b:27:77:05:79:4d:a7:c0:cf:e4:ab:7b:39:3d:
         c2:2a:8a:bc:3e:87:64:bf:ec:88:9d:7a:75:e7:0f:ec:40:aa:
         65:4d:32:f2:90:b3:1f:f9:03:f0:ee:df:ea:a9:ef:28:6f:3d:
         41:64:6f:44:cf:d6:1f:92:17:49:ca:3b:6a:89:ed:5c:ac:68:
         a6:49:80:1a:f3:cb:46:3b:66:97:4b:46:f4:21:98:9b:2d:cb:
         8a:f9:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:36 2026 by rpki-client