Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          cl3VHZc/GgqPrC1VmQBQNJjhMkf02UvyycP2O9pkN3Q=
Subject key identifier:   7C:43:AC:F8:F9:2F:21:EC:FB:1E:24:44:C5:4C:44:3A:2E:A1:A8:C7
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       019D2997A35180AAD6C17E5B9133F63BFD5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          18FB
Signing time:             Thu 26 Mar 2026 10:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:36 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:36 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: ldLJSwuXXFT2KVlJiysABazJkTu6Xs4QHn/qlshffMw=)
                          2: 9qw7otosSIxdL3aCqQeP90SREjU.roa (hash: 9xNU7kC0RTtahLdPXxnLWSDGxTvK4fW3RYlWbOy4Y7U=)
                          3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
                          4: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
                          5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
                          6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
                          7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
                          8: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
                          9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:a3:51:80:aa:d6:c1:7e:5b:91:33:f6:3b:fd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Mar 26 10:01:36 2026 GMT
            Not After : Mar 27 10:01:36 2026 GMT
        Subject: CN=7c43acf8f92f21ecfb1e2444c54c443a2ea1a8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:81:83:0d:6d:f6:0b:12:cd:99:e1:c4:44:
                    ab:5d:aa:68:2f:2e:3c:2b:b6:30:6d:17:2f:09:8b:
                    9d:0d:02:83:15:99:39:1f:d4:07:ee:29:73:37:2c:
                    b0:44:f0:9d:16:9b:92:35:ec:91:28:76:71:e6:81:
                    f9:16:6c:5a:73:92:d6:c3:7d:85:99:e8:a4:eb:ee:
                    18:98:cb:68:e9:aa:c5:cf:ae:9a:9d:ca:5c:bb:ec:
                    bc:b6:0e:00:78:e1:5a:dd:96:6f:ec:10:f8:bb:02:
                    de:26:b5:df:95:b1:dc:98:1c:58:d9:4b:70:c1:8f:
                    89:4a:3d:d8:1b:4d:66:2f:59:30:84:07:46:90:4e:
                    cf:94:3c:27:3b:6a:ce:45:26:d5:64:39:d8:b3:ac:
                    da:60:fd:93:f7:87:e9:f1:f8:c5:e0:2d:2c:2e:61:
                    db:24:96:f8:80:ae:e0:b0:eb:71:f1:5b:6f:ed:e9:
                    ee:d0:51:00:3e:77:4f:74:08:57:dd:d0:1f:58:29:
                    10:d3:ab:6b:89:d4:7c:d6:23:2a:14:fe:58:48:69:
                    15:9f:3f:e5:11:06:db:d1:a7:27:58:ce:ac:71:77:
                    72:25:e7:b4:25:12:28:95:eb:69:b9:e7:42:f6:8b:
                    53:66:21:d1:64:ee:a2:b7:d5:6d:aa:c7:f2:eb:ae:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:43:AC:F8:F9:2F:21:EC:FB:1E:24:44:C5:4C:44:3A:2E:A1:A8:C7
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:6f:3f:3c:8a:f6:25:cf:ec:5c:61:19:5b:ef:b9:61:e8:
         64:04:a2:5f:20:28:e9:e0:e3:8a:ce:89:c7:38:b7:3f:e2:cb:
         aa:6e:49:92:b7:6a:64:77:bb:3a:8a:0a:37:fc:67:9a:36:ec:
         59:ad:1f:b0:64:3e:a7:3a:09:fb:5c:51:ef:4f:83:ab:fc:c1:
         9b:49:90:d9:68:02:b3:01:e5:33:57:89:45:35:b9:ca:9a:02:
         85:eb:3e:2e:cf:ea:1d:6a:d9:57:9f:f7:aa:fa:cd:99:45:4c:
         92:c0:17:01:55:40:5a:4b:c2:53:78:f4:96:19:50:8c:2d:02:
         26:6a:d3:10:9d:ad:d9:d9:f4:f6:b7:8f:81:48:e5:5c:c4:a3:
         9a:50:ad:ec:b3:5c:9f:f7:76:79:e6:d2:e1:0b:65:4b:90:9b:
         18:50:fb:6a:ac:58:94:bf:56:4e:88:3e:e6:95:48:85:c1:e4:
         ee:61:06:ab:12:36:5c:1a:a4:58:6e:3e:80:61:4a:ee:6d:c4:
         fb:50:a0:b5:ca:08:43:84:14:d1:bd:39:bb:67:b4:26:ba:eb:
         f4:57:24:7a:80:f7:0d:d1:0b:0c:f5:42:e6:44:0c:55:7d:1b:
         4d:93:a2:52:d6:e7:fa:32:a6:c4:7f:3f:92:bd:f8:f7:a4:eb:
         71:82:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:55 2026 by rpki-client