Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
File:                     6JeVIBx9PZPNKghd42ku3XG3cm0.mft (raw, json)
Hash identifier:          gcKNg2hKSzjsK0fSUdvE6vJNWX68J0btgzvf2KX2BR4=
Subject key identifier:   B8:ED:AB:84:A7:9B:17:4B:9F:C2:3C:FA:0A:30:AB:0A:12:8E:99:D3
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Certificate issuer:       /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial:       019D25F1DD015F475204B70193E2F71B91EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
Manifest number:          0C06
Signing time:             Wed 25 Mar 2026 17:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:40 +0000
Files and hashes:         1: 6JeVIBx9PZPNKghd42ku3XG3cm0.crl (hash: heQgWudrXSActVBwW3uhMIRgQnB8faGCmhlQBAB/3dU=)
                          2: RB0CxxdcJs_oaTv7g9xCVclpFO0.roa (hash: LNOS99kYHkha/eTI7I8FUJK8eUwKkoPBduqaOWXJJGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:dd:01:5f:47:52:04:b7:01:93:e2:f7:1b:91:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
        Validity
            Not Before: Mar 25 17:01:40 2026 GMT
            Not After : Mar 26 17:01:40 2026 GMT
        Subject: CN=b8edab84a79b174b9fc23cfa0a30ab0a128e99d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:1a:a2:b0:6f:ca:b1:f0:bf:86:bc:1e:41:
                    68:95:32:67:3f:2a:65:ea:cb:7b:99:7b:06:f2:14:
                    84:2f:7f:7e:79:e7:96:a4:da:5f:cf:65:0f:9f:70:
                    fe:41:cd:01:ee:f6:e0:ed:a1:05:b5:84:cb:95:d1:
                    a3:88:b9:ae:b0:43:d8:87:f9:d2:5c:8a:da:74:f0:
                    e8:e6:e5:a1:78:fd:0b:9c:55:9b:30:ed:cb:be:e1:
                    d1:59:7b:4f:98:af:3f:30:2f:7d:e9:c1:c8:04:37:
                    7b:09:45:ab:2d:d2:bd:2d:05:71:54:2f:51:d0:1e:
                    aa:30:e4:df:d9:f0:16:22:47:59:a4:c3:f5:39:fa:
                    8e:0a:8b:89:10:ec:f2:66:38:ce:a1:cc:25:b5:a0:
                    1f:af:a6:7e:d5:f4:09:a3:71:3a:8b:38:7f:6f:ff:
                    07:9f:8d:62:fd:77:9c:1f:b3:c1:a4:0b:d2:ac:6d:
                    b4:80:23:bc:6c:5b:0a:d3:26:0f:4a:62:48:83:d9:
                    d1:57:12:25:40:c6:3d:e5:7b:09:ad:73:ee:71:d0:
                    72:70:97:42:12:94:ca:95:43:88:b4:5e:cc:92:55:
                    cd:43:f1:4c:0b:3b:3c:1f:af:95:b2:f4:71:6b:a0:
                    ec:2e:ee:e2:d8:77:c4:75:e4:f5:2a:c6:47:22:ec:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:ED:AB:84:A7:9B:17:4B:9F:C2:3C:FA:0A:30:AB:0A:12:8E:99:D3
            X509v3 Authority Key Identifier:
                keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ae:d7:8b:77:ca:a0:0a:e6:8e:29:0a:b6:ef:93:53:20:a7:
         d3:1c:ac:f4:27:0a:59:1c:ba:1a:c5:25:0c:ae:a5:78:cb:fd:
         32:23:c0:52:98:6d:36:7e:70:23:dc:ba:c3:ac:dc:ae:e4:92:
         bc:c5:11:64:e2:fe:b7:04:dc:27:b3:03:c7:b5:74:75:db:3b:
         bb:86:93:47:88:22:27:20:43:ec:dd:84:a0:f2:1e:d8:36:7b:
         39:df:cb:d9:05:51:f0:b9:00:1b:20:16:0d:c9:e4:50:13:0c:
         71:5e:c9:9e:4d:97:8c:60:d9:c8:8c:66:31:59:9f:dc:b5:27:
         46:80:76:ac:a1:ca:76:09:1a:f5:a0:14:f8:4c:fe:a0:a0:e3:
         64:0c:d6:1a:8a:10:73:64:66:de:48:06:b2:86:d5:25:b4:5b:
         ad:6d:2a:f8:f5:5a:93:67:38:d7:3d:c2:7b:a8:e7:de:a9:d4:
         a2:eb:96:46:38:5e:cb:7f:5c:03:5f:b8:dd:42:08:c2:8d:3e:
         f6:13:10:78:44:70:35:bf:f6:62:07:29:97:eb:eb:5e:34:94:
         40:87:a1:7f:e2:cf:a8:c3:aa:33:35:3b:38:c3:05:11:af:f2:
         ab:a3:e5:7c:65:24:b4:8f:6c:ae:2c:61:c3:84:07:2d:53:40:
         ea:e3:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:54 2026 by rpki-client