Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
File:                     6mQereGVXdS5B5FrmeAhA57MM-g.mft (raw, json)
Hash identifier:          JQqaD10kopfh0XraGPne/I+6Y9wjiLrdfGw4gNViVuM=
Subject key identifier:   A6:D9:A4:B9:4B:14:D1:84:76:B4:65:CB:F2:92:34:54:BB:32:AD:AB
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Certificate issuer:       /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial:       019D2816D58A4EF32759343E631C2E242667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 03:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:18 +0000
Files and hashes:         1: 6mQereGVXdS5B5FrmeAhA57MM-g.crl (hash: JZ+yDHzO3ZlKr7lSbiWENXTxzeYqSJICCLFrRXsd5tE=)
                          2: Ihg_BMGPVetdQVsrymMu8pfaMqs.roa (hash: jt/hr9jYSA+SIbvZunRTcYQ0CrkwuU912jOGZR3bIsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:d5:8a:4e:f3:27:59:34:3e:63:1c:2e:24:26:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
        Validity
            Not Before: Mar 26 03:01:18 2026 GMT
            Not After : Mar 27 03:01:18 2026 GMT
        Subject: CN=a6d9a4b94b14d18476b465cbf2923454bb32adab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:3e:c5:fd:9e:a0:0e:3e:c6:5e:2c:39:64:
                    e4:f7:7a:74:29:ab:3e:8f:a6:05:58:d7:4d:90:ba:
                    b7:5c:07:81:e7:fe:6d:53:7c:6a:4d:65:64:15:d7:
                    3c:45:91:69:6d:55:05:92:d4:3e:84:f1:dc:3e:8f:
                    f1:38:13:14:04:94:ee:a0:83:de:ac:93:04:0f:ba:
                    dc:a4:fd:e3:5a:21:b9:c7:54:c1:3b:26:19:8c:ad:
                    1d:0f:60:01:ef:be:9a:07:eb:a7:6f:42:89:3f:e8:
                    e6:67:4f:b5:e0:b6:57:90:78:f3:06:e6:01:3c:0f:
                    6d:01:e1:53:e3:a5:5f:64:94:57:8f:2f:a2:0d:69:
                    60:68:e0:e4:57:24:1b:b2:b9:e7:5e:9b:03:0b:06:
                    50:04:c4:81:cc:39:d2:23:2a:a1:d8:9e:70:f2:34:
                    45:13:5d:71:f1:dd:07:c6:ef:f5:82:53:18:81:07:
                    4b:0e:f6:7c:fd:5c:7a:83:90:74:d6:84:9f:95:98:
                    82:17:cf:17:6a:ef:3b:bf:91:72:95:b9:27:7f:a3:
                    73:8c:e8:13:74:9c:f9:b8:1d:c2:13:e1:02:e2:45:
                    d2:2d:5e:56:c1:e2:fb:a9:5b:a9:47:95:72:ce:be:
                    03:00:51:b5:f0:97:7a:e2:ca:71:34:82:63:1f:b0:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D9:A4:B9:4B:14:D1:84:76:B4:65:CB:F2:92:34:54:BB:32:AD:AB
            X509v3 Authority Key Identifier:
                keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:9a:99:47:90:9d:01:5a:65:f4:bb:36:fb:a6:e2:84:ed:
         1c:47:2d:29:c0:ba:e1:6d:9d:a4:45:f8:54:5f:13:c2:22:21:
         02:6e:00:f3:47:1a:38:1a:ae:f3:89:b2:7d:90:50:84:a1:47:
         1e:7e:bf:4a:f1:66:8a:57:15:a8:9e:5c:05:58:b0:32:c4:19:
         2d:3b:00:aa:ff:4f:ba:66:60:0b:03:f2:c2:59:c1:63:17:57:
         b7:bc:22:87:cd:f8:14:4a:a9:28:a3:20:51:6c:da:86:ff:1d:
         68:2b:ad:62:a2:80:2c:1b:24:e6:e3:4a:46:bf:8e:d2:52:be:
         d6:a3:55:cf:02:a9:00:49:a2:c6:af:38:a4:82:3c:67:da:27:
         c1:ba:41:23:b7:ab:59:dd:f7:9d:45:fa:4a:04:72:30:6e:9d:
         92:e0:d5:33:01:4e:cf:b7:fe:55:7b:0f:49:e0:94:f4:af:e7:
         28:44:40:2e:57:1f:57:49:e8:75:2a:38:c7:96:38:b5:a5:0f:
         79:66:93:3a:08:ad:68:2c:0c:e0:cd:65:e9:10:19:61:7e:7d:
         2a:40:66:d9:f2:b5:85:4a:2b:23:62:39:e5:da:e1:a1:4e:16:
         3a:78:03:9e:35:d7:28:11:e4:7b:78:9b:6e:30:0a:be:dc:36:
         37:ed:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:13 2026 by rpki-client