Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
File:                     6WTScFqbJv1IKpwQ6Sbq572kHps.mft (raw, json)
Hash identifier:          gaOyWAoJD/dzrGlETnEriEkMxxXCqO4HxII+JO3mfe8=
Subject key identifier:   C8:4D:ED:7C:D3:BD:AD:B6:3E:AC:18:D4:ED:E2:7D:7E:ED:C1:2F:AE
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Certificate issuer:       /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial:       019D25BA3B7616434197405D35A7F0502A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
Manifest number:          0F8F
Signing time:             Wed 25 Mar 2026 16:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:55 +0000
Files and hashes:         1: 6WTScFqbJv1IKpwQ6Sbq572kHps.crl (hash: I7yGxTKqW+bxb7DwYsgFZKlKAFrm34VnKIR69//LKtU=)
                          2: Hbp3xZjUeZ9MzhUGZdMqZdnKptY.roa (hash: MVxhrFEdxzKNdhuGLJMQ/HdUK+Lb2pJyE950JplmMWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:3b:76:16:43:41:97:40:5d:35:a7:f0:50:2a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
        Validity
            Not Before: Mar 25 16:00:55 2026 GMT
            Not After : Mar 26 16:00:55 2026 GMT
        Subject: CN=c84ded7cd3bdadb63eac18d4ede27d7eedc12fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:33:cc:15:63:02:d8:49:f1:eb:71:4b:18:
                    64:91:77:7b:47:28:5a:74:af:e2:9a:5e:66:5d:11:
                    a2:69:af:10:2c:08:8d:b4:07:d4:0c:0f:e1:ac:79:
                    84:9c:55:13:16:0d:3f:85:a8:61:79:42:a1:80:eb:
                    df:95:e3:c6:ca:af:9f:9d:f8:11:fc:aa:1a:a4:4c:
                    47:67:63:c5:0a:54:ac:3e:f4:70:7b:75:94:db:d8:
                    59:e1:b7:e9:d5:5c:5f:a6:59:46:b3:7a:b1:cc:b5:
                    d3:d6:63:0e:b9:a3:7f:15:e0:53:a1:c5:fb:47:cd:
                    c9:e6:3b:26:9d:a1:5e:58:32:de:d4:8d:a4:9b:c5:
                    d3:24:e2:30:51:23:c5:18:3d:9c:2e:65:25:8e:b8:
                    7d:af:fd:d9:c5:ce:47:19:a5:2b:1a:02:7a:4a:6a:
                    f8:64:14:70:f6:c9:59:42:9f:1e:ce:2d:3e:59:2a:
                    02:f1:53:f6:aa:82:af:c0:eb:b8:f3:5b:ae:d0:10:
                    a5:28:cb:69:ff:8b:04:2f:ae:65:5f:c8:4a:e3:dd:
                    94:70:ae:90:23:ec:b8:95:2b:e7:90:2b:58:26:50:
                    31:83:68:6e:8f:3d:bc:a3:1e:f3:91:b9:1f:ca:28:
                    2f:7d:a1:8a:62:d6:b9:3f:28:19:88:7f:e5:d6:5c:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:ED:7C:D3:BD:AD:B6:3E:AC:18:D4:ED:E2:7D:7E:ED:C1:2F:AE
            X509v3 Authority Key Identifier:
                keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:77:35:88:89:11:6a:40:24:51:51:1c:8b:11:73:b5:6e:43:
         23:24:71:a7:53:79:64:ab:e0:96:43:65:16:2b:6b:3e:da:de:
         3c:b0:8a:06:9f:81:10:b3:e7:ab:0e:54:93:96:60:55:94:9a:
         96:6b:ac:39:fd:08:3e:4d:5d:3e:b2:b7:74:36:7d:6d:cb:d9:
         1d:7a:f5:12:4b:55:d2:c7:83:2d:ad:e1:b4:71:83:ba:26:ba:
         ca:68:21:4f:f6:10:0c:26:6a:9d:f0:5f:05:3c:2c:3f:72:23:
         67:5f:f2:ec:48:58:c2:8b:00:7f:06:d8:d8:66:96:4c:e4:4c:
         46:29:5e:41:6c:9d:86:6b:d0:31:22:04:b7:35:22:4f:47:63:
         91:69:c2:4e:c1:41:52:81:24:41:16:ec:a9:2b:a6:6d:83:6c:
         cc:e9:43:b0:4e:84:0f:1b:53:c7:fc:d7:7f:45:72:4c:87:5c:
         6a:49:1e:5c:b3:ef:b6:25:b3:0d:d7:8e:c9:ef:b0:32:25:88:
         6b:7f:ff:c5:27:92:11:66:0b:2b:b1:af:2f:c1:43:9e:9f:e7:
         fe:a8:42:66:44:49:33:80:25:11:4c:69:3a:e3:c4:4e:be:60:
         c6:d1:6d:b6:e2:23:4a:79:e5:48:3f:75:4d:5e:10:00:42:32:
         07:75:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:54 2026 by rpki-client