Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          fBFLLuVHOp77dF9ZJMkH52+2i06MHkQm6IuSFXucv8A=
Subject key identifier:   3B:25:CC:5A:A9:8D:75:70:4C:A2:57:34:C5:BB:24:89:03:F3:0E:36
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       019D27A89269593F37481CD2AC93DF5859EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          18FA
Signing time:             Thu 26 Mar 2026 01:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:52 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: maUaMAH4hR9v1xIDtLcKKCFKrvJwn2z1XC94gfqpG80=)
                          2: 9qw7otosSIxdL3aCqQeP90SREjU.roa (hash: 9xNU7kC0RTtahLdPXxnLWSDGxTvK4fW3RYlWbOy4Y7U=)
                          3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
                          4: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
                          5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
                          6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
                          7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
                          8: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
                          9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:92:69:59:3f:37:48:1c:d2:ac:93:df:58:59:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Mar 26 01:00:52 2026 GMT
            Not After : Mar 27 01:00:52 2026 GMT
        Subject: CN=3b25cc5aa98d75704ca25734c5bb248903f30e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:d5:76:0c:66:0f:f0:94:81:a3:d6:59:e4:
                    c2:7b:29:06:81:3a:cf:c0:28:e0:b5:c2:5a:da:a1:
                    e6:7e:ae:db:2d:21:b4:fc:d6:1d:54:c9:c8:fd:84:
                    37:4c:5e:bf:3c:e4:74:5a:fa:e7:12:90:b5:44:a6:
                    9e:d3:a4:85:92:dc:b8:47:db:97:2e:7d:06:8d:58:
                    a9:57:50:af:16:0b:ac:e4:cf:5e:ed:f4:55:bb:cc:
                    16:53:c7:d3:69:60:e8:42:d7:eb:01:1d:85:93:c3:
                    af:7d:56:64:4a:e2:f3:4d:51:36:93:98:26:ac:12:
                    18:a0:c3:d5:e7:d5:f3:31:f5:b8:07:20:12:8f:0b:
                    25:e8:09:70:2c:cb:86:f6:b5:35:ca:3b:cc:05:8f:
                    71:f0:08:53:dd:7c:c0:c3:45:5c:df:ff:71:ec:5c:
                    88:82:c6:9c:df:30:fa:6d:f3:97:0e:dd:83:eb:ae:
                    03:e8:78:55:27:e0:03:91:6f:74:c9:d1:55:0f:58:
                    b9:07:47:c0:20:c7:2b:aa:4d:fc:3c:d1:00:71:8d:
                    38:98:6a:77:15:95:3e:46:12:2c:b9:b5:3a:3d:b7:
                    5c:7d:af:5a:ca:ec:7d:d1:a0:3e:ec:c9:5a:8c:89:
                    09:18:25:8e:4a:7c:e7:62:f9:a3:aa:e4:d2:cd:13:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:25:CC:5A:A9:8D:75:70:4C:A2:57:34:C5:BB:24:89:03:F3:0E:36
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7d:b2:5f:c1:c1:45:03:ba:7d:52:89:77:10:9e:bc:95:1d:
         f0:34:0b:6d:b4:9d:a5:80:c6:df:fd:3f:f9:14:57:7c:1d:35:
         6f:70:38:cf:ae:05:74:e3:f0:83:f3:28:e0:bb:ca:69:ae:a8:
         f3:eb:f2:68:83:2d:36:ce:08:4d:b3:26:b8:f8:65:04:b2:30:
         bc:bc:dc:e6:17:9c:6f:f2:4e:1a:3e:e0:ee:53:39:c0:50:6b:
         3c:c2:94:9c:56:24:ba:3d:e0:cd:b8:f7:52:8c:15:bc:b0:93:
         f2:85:4d:59:e8:b3:bb:7a:30:3e:00:4b:75:0f:ff:7e:e5:b7:
         e7:dd:2e:ce:6e:6b:7b:5e:be:24:00:ef:1f:28:a6:aa:71:68:
         eb:df:85:0f:f1:75:94:bb:8f:49:e7:06:8d:90:40:95:27:fe:
         66:54:06:41:7c:2d:4d:a0:61:7f:16:02:94:ac:40:f1:91:80:
         50:2c:94:8a:ff:de:0b:05:5e:ec:dd:80:b3:be:65:80:5f:27:
         c8:7d:08:a5:be:15:c4:f3:11:99:3e:cb:13:53:fd:26:32:36:
         5c:c7:d4:04:dc:0b:39:5b:76:28:c3:51:c1:a0:71:25:6c:20:
         8e:c9:27:fe:a2:ea:72:96:24:49:74:dc:76:27:cb:4c:9d:bb:
         8f:26:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:55 2026 by rpki-client