Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File:                     6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier:          a7HApjGrDO5cPdafv6RG2iF38APPsdv9VR7l49Exh+s=
Subject key identifier:   FF:84:E4:85:90:95:98:0D:F6:DB:16:6A:0E:6F:99:15:AC:8F:B0:02
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer:       /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial:       019D269612273B0996A7970F428310919EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number:          0EF8
Signing time:             Wed 25 Mar 2026 20:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:02 +0000
Files and hashes:         1: 2mB-NqQhQaEIu7D3l1xNbmz8ydQ.roa (hash: 6eVwGi3CeHQX5H/cbCCHg94we//hX46hLSe/Q7qSglM=)
                          2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: BtJlG/Dt7WEU008CB3Eamd0Vaoqt85IvSdKr7Kr4ct8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:12:27:3b:09:96:a7:97:0f:42:83:10:91:9e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
        Validity
            Not Before: Mar 25 20:01:02 2026 GMT
            Not After : Mar 26 20:01:02 2026 GMT
        Subject: CN=ff84e4859095980df6db166a0e6f9915ac8fb002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:97:2e:a0:b2:4f:13:ce:5a:3d:ae:7f:de:
                    3b:46:2a:8f:7b:f5:5e:34:0c:ee:ab:09:d4:2b:d5:
                    c4:68:98:cf:7e:32:d4:bb:94:ba:6d:b9:90:84:4d:
                    07:25:4b:4e:19:26:81:aa:24:c6:6c:3d:c2:39:4e:
                    33:02:3d:36:0e:01:76:97:48:ef:9e:b5:e3:70:e8:
                    18:74:82:64:16:c8:cf:a7:f8:07:99:6d:5d:ef:9c:
                    79:97:c7:89:67:dd:9f:a2:30:5e:28:3f:40:48:ae:
                    6b:8e:fc:e9:3c:88:c2:50:7c:5f:9c:0b:86:3e:13:
                    49:7e:8f:ec:39:6e:0d:e6:fb:83:3b:b2:76:8d:cf:
                    39:65:73:41:c1:9e:01:43:7e:8e:a0:28:d9:35:57:
                    bd:ef:6a:67:b0:0e:c2:65:0e:f6:d4:56:c9:b7:1d:
                    c8:0a:56:13:1a:cc:fb:97:9b:71:db:af:39:28:7c:
                    aa:f9:c8:a7:ee:3f:01:6d:8d:d5:b8:50:be:7a:9e:
                    f3:07:3a:a5:f4:af:40:27:8a:93:ee:3d:94:62:78:
                    12:c1:af:18:36:8f:c8:37:e5:3f:88:2e:a4:9e:36:
                    c6:79:6c:0a:42:ab:16:3d:76:98:08:76:40:22:a6:
                    cb:24:b7:56:1a:de:c0:2e:e2:17:94:05:72:4e:7d:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:E4:85:90:95:98:0D:F6:DB:16:6A:0E:6F:99:15:AC:8F:B0:02
            X509v3 Authority Key Identifier:
                keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:b6:8c:c0:8e:38:27:9e:fe:0d:02:66:03:46:1a:df:a7:
         5c:09:7a:0b:d0:01:9b:e3:02:8e:6f:e3:61:c9:b7:2e:d7:08:
         96:d3:13:d8:24:8b:1d:b7:c9:27:80:ef:2b:29:e8:5c:65:32:
         fb:57:f2:ed:9b:6d:53:ea:49:0e:63:67:c5:cb:48:f5:30:23:
         8b:7d:49:6b:a6:d2:1e:24:4a:eb:30:e1:79:68:3a:cc:8b:79:
         de:f0:53:c3:f2:3f:9a:c4:72:a5:b3:b4:06:cb:41:f6:4a:fd:
         50:3f:3c:fd:b1:6f:cc:c5:cf:cb:9c:ce:17:2e:cc:b3:b1:0b:
         d0:73:ac:85:f9:7d:a1:e6:fd:57:ea:8d:87:fc:23:07:92:5a:
         8c:b1:2f:b5:d2:f3:fe:7c:41:ef:29:8b:00:ec:ac:5a:23:ac:
         4c:f4:16:61:79:a8:ab:f7:b5:7d:1e:a7:5f:38:7a:e9:93:eb:
         da:f4:d2:1b:00:2f:e5:67:63:87:77:ce:a2:57:81:fb:3c:cd:
         23:72:6b:68:fd:14:6b:41:0d:7a:1d:c3:53:aa:14:4f:52:33:
         d7:d2:0d:70:a8:87:ad:16:9c:3b:c8:57:dd:45:15:a9:2c:94:
         cc:66:b4:bb:bf:19:98:c5:c2:0d:6f:5e:3b:da:9c:53:bd:7d:
         a7:0e:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:00 2026 by rpki-client