Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
File:                     P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft (raw, json)
Hash identifier:          TSoU4GQ9ZVv3N/kPDBKG+btacYmuqQSjPtv8CYZqhmQ=
Subject key identifier:   18:8F:C2:01:D0:F7:27:1E:29:6A:3B:48:21:7D:0B:20:80:8C:65:1E
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Certificate issuer:       /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial:       019D265FC7055040BCD77C90E1B272AF6C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
Manifest number:          159B
Signing time:             Wed 25 Mar 2026 19:01:44 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:44 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:44 +0000
Files and hashes:         1: P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl (hash: ZA2lpl8L78jTQyJn5DeKcY8nWz3Ky0nsrrHuhvzT154=)
                          2: VkA42phGlJyZrV1jv1DKyhX6v0k.roa (hash: kJXaDBGXOFcG4EkK5sw7F5PzTM60vQj0BJ4YnDEVl34=)
                          3: jsHCAHi_rkbcLptlH_ZcV4fwk28.roa (hash: zyH/plaJ2XfnSn4akwAuw1IF7XZNkyTy9jtwAKcGKuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:c7:05:50:40:bc:d7:7c:90:e1:b2:72:af:6c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
        Validity
            Not Before: Mar 25 19:01:44 2026 GMT
            Not After : Mar 26 19:01:44 2026 GMT
        Subject: CN=188fc201d0f7271e296a3b48217d0b20808c651e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:ed:c3:05:ca:01:22:eb:3f:56:ca:3e:68:
                    7e:dc:3c:4b:da:99:95:51:74:3c:5c:9a:5e:01:4e:
                    6b:9e:45:4f:e0:be:c5:50:7d:b1:74:05:5d:c5:c7:
                    05:9b:b5:f2:ee:4e:e1:31:4c:1b:71:c0:0e:59:7f:
                    76:5e:bd:73:9f:f9:94:45:31:36:d2:74:7c:62:15:
                    b7:2a:42:a9:d1:40:62:9d:9f:0d:60:72:d7:03:7c:
                    6a:79:d9:0b:07:3e:9c:73:b9:f6:bd:62:fd:2d:1f:
                    98:73:f3:f4:82:73:74:08:e7:5f:1f:86:38:3f:84:
                    06:8c:35:fd:05:53:71:e3:4b:bf:8f:e8:04:40:a6:
                    3b:76:8b:d7:e2:dc:44:15:c4:3c:bc:a4:1c:30:5b:
                    78:5a:58:47:a1:4f:d8:d0:0f:87:06:d4:2e:7c:47:
                    fc:15:c8:a7:e0:c2:18:ff:c0:8d:dc:cd:ae:e9:02:
                    74:c1:8d:38:0f:ad:b3:fc:22:3f:83:39:46:ee:a1:
                    c9:0c:a3:eb:ea:4f:68:ae:c9:68:73:36:30:18:65:
                    06:47:6b:8f:a6:d4:e3:93:9f:d0:77:84:c6:67:d4:
                    ca:45:27:22:1e:eb:a6:28:5b:9a:b7:f6:f9:db:34:
                    be:5b:19:5f:40:f4:6b:3e:77:da:d9:7e:51:46:7d:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8F:C2:01:D0:F7:27:1E:29:6A:3B:48:21:7D:0B:20:80:8C:65:1E
            X509v3 Authority Key Identifier:
                keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:52:7f:2e:f7:05:f5:d1:40:d9:80:ab:01:51:37:96:05:73:
         31:bb:9d:a5:e8:04:22:1e:3e:6d:fb:8e:9d:10:30:32:17:a9:
         57:be:33:5b:0c:e0:71:ba:ab:c9:19:99:93:6f:93:81:66:0d:
         71:fe:17:5f:26:1e:93:40:4a:5a:97:a6:95:b2:a1:23:83:b3:
         ea:5d:b7:4a:58:57:97:da:2f:53:e3:9e:94:21:54:42:79:44:
         fd:c2:3e:0d:6f:67:9a:16:9b:62:01:f9:af:70:23:6d:39:32:
         72:48:47:d9:dc:94:d2:8e:fa:6f:be:7b:2c:3b:b7:39:6a:db:
         84:88:ad:13:95:42:10:4f:92:9f:1c:55:c8:34:4c:1f:23:d7:
         3e:29:31:63:86:29:ab:e0:e8:10:cb:bc:f9:e7:54:d8:0a:1a:
         50:41:09:e6:84:73:f7:46:e9:7f:6f:ab:84:c0:5a:ee:58:20:
         1b:23:42:3b:b8:8b:b6:e5:3a:5b:d2:72:97:16:a2:5d:81:e7:
         e9:f0:f1:57:7b:5f:b7:b7:0b:09:ef:53:70:f4:c5:8e:c7:93:
         1b:40:d2:44:50:34:02:79:79:4e:ae:a7:26:23:4e:e8:24:3f:
         6b:ec:24:1d:e6:f5:91:c1:c6:d8:9b:53:7b:be:15:64:20:68:
         58:5f:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:20 2026 by rpki-client