Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File:                     6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier:          bg4KVpa51X+Tv0640Sbrn/Binb2sJ2YI23ynFEq64SQ=
Subject key identifier:   6A:13:87:83:CA:A8:20:54:B4:89:C6:08:7D:02:72:91:6C:30:FD:36
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer:       /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial:       019D2816B9C85D1A616D000ACA0488DC91BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 03:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:11 +0000
Files and hashes:         1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: Oj44BOM7cEscNvX+OIQX5S7Ooeq6vDeTCIeg93nr/Uk=)
                          2: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:b9:c8:5d:1a:61:6d:00:0a:ca:04:88:dc:91:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
        Validity
            Not Before: Mar 26 03:01:11 2026 GMT
            Not After : Mar 27 03:01:11 2026 GMT
        Subject: CN=6a138783caa82054b489c6087d0272916c30fd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:1f:4a:2a:5b:2c:4e:0e:dd:3a:d3:cb:2f:
                    e2:04:35:f7:06:65:16:b3:6b:2d:ec:e9:9d:71:f9:
                    80:60:60:a0:f8:6d:4b:57:8a:b6:6d:fb:fb:f8:98:
                    f6:4f:ab:a9:1a:89:b4:10:db:ea:22:08:38:f2:4d:
                    98:8c:71:f8:42:ed:a1:82:19:33:de:94:59:61:91:
                    63:29:02:9a:ac:c1:f9:c5:49:2b:6f:20:c9:40:ce:
                    31:76:40:98:5a:8a:d4:32:6d:8c:b6:44:6b:0f:8d:
                    28:2f:57:84:97:0c:58:79:df:e0:08:04:82:38:b5:
                    c5:f8:3c:31:2f:ec:9e:a9:5e:15:fe:ae:67:5b:28:
                    df:02:8f:bf:62:51:64:42:d7:30:e6:3c:34:fa:5f:
                    07:aa:c7:77:e0:ea:ce:c2:fb:09:24:6a:84:7e:a1:
                    b3:6a:cd:30:f5:19:9d:1a:04:59:c5:d6:bb:48:8f:
                    f8:dc:e6:f5:aa:b3:4d:e2:b6:a3:6c:85:8f:24:0d:
                    9f:37:d8:1d:cc:f4:db:91:0a:a9:f7:fd:b6:3a:3c:
                    42:94:8f:7f:ac:85:7b:b8:ae:3d:94:e8:0c:47:38:
                    95:76:6e:4b:e4:ea:5d:5f:cb:99:c5:cf:9d:8f:a4:
                    64:93:e0:83:c1:56:09:9e:b0:a7:c3:f8:d4:52:fa:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:87:83:CA:A8:20:54:B4:89:C6:08:7D:02:72:91:6C:30:FD:36
            X509v3 Authority Key Identifier:
                keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:2f:0f:5f:0f:5d:2a:68:a3:fd:7c:59:81:70:fb:e2:25:
         a5:62:be:c2:aa:1e:84:0b:81:0e:f6:2a:95:31:16:aa:8e:dc:
         58:02:a5:aa:bc:ca:08:80:b1:b4:63:25:78:bf:ea:84:d0:fe:
         18:6e:8d:b3:f3:02:59:f2:a2:c7:af:78:66:d3:e7:76:33:6c:
         91:10:18:70:67:68:e4:c6:35:90:1f:c3:f9:ef:38:d6:c2:db:
         06:1c:f2:95:61:26:4b:2d:b3:90:19:a8:02:11:b2:f8:a7:85:
         82:5f:b5:93:79:37:09:68:fc:8b:9d:7a:d7:01:32:1d:e7:88:
         2f:55:cc:f6:55:20:2f:ca:2d:a5:19:54:25:16:4c:56:f1:d8:
         7a:2a:5e:7f:65:e1:6d:6b:b3:57:d4:ab:6f:a3:ba:b2:f2:fe:
         03:c6:80:9f:04:08:46:75:d6:f6:f7:0e:5b:8e:45:f0:7a:d7:
         9a:87:f3:0f:2f:f7:72:77:7f:07:72:6d:e4:2b:d9:2d:fb:da:
         50:0a:1d:be:02:70:a2:b2:c5:5e:29:14:04:13:36:36:9d:b7:
         9d:80:72:54:67:47:20:34:8a:f6:93:03:13:2d:88:61:5f:f3:
         85:0b:b9:13:07:a8:1f:3e:6d:c4:ce:5a:bf:61:9e:ad:53:a2:
         fa:14:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:11 2026 by rpki-client