Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File:                     6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier:          AITZ+ZJ2oxk2uZ2K+MTAlCf7lMVwkXLmUVSl7i6D5iA=
Subject key identifier:   BA:71:9C:20:18:83:68:0B:4C:35:39:80:26:FC:B3:F1:E2:EF:0D:C4
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer:       /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial:       019D29CDE39B8B8C5480330AD1BA95CC7645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 11:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:52 +0000
Files and hashes:         1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: 5p+40EhFTrpzJ7UrT1nFpVC5HLSE3FUgWe2XIwxouhU=)
                          2: 6LijVWJ9huOp4_NEt8OMuQAhPhQ.roa (hash: dVZr4TJEBF6mTwqRW8xt5DyX1OCYoQva4+f32i+KSaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:e3:9b:8b:8c:54:80:33:0a:d1:ba:95:cc:76:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
        Validity
            Not Before: Mar 26 11:00:52 2026 GMT
            Not After : Mar 27 11:00:52 2026 GMT
        Subject: CN=ba719c201883680b4c35398026fcb3f1e2ef0dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:ee:d0:30:c8:af:11:6c:1b:0e:03:16:80:
                    01:c3:19:a7:b0:d8:fc:8b:49:d2:7e:cf:75:0b:4f:
                    b5:f7:4b:f2:79:5c:04:33:d2:51:d5:9f:37:73:97:
                    73:ed:a0:76:19:5e:be:d0:c4:cc:a3:cc:09:ea:0c:
                    b8:72:c5:66:43:fe:62:5c:d2:c6:df:f2:36:04:0e:
                    37:dd:a9:f2:70:57:19:b0:c4:e2:8b:51:7f:71:4e:
                    f1:9f:3d:17:67:3a:6c:9f:c4:49:bb:4a:36:17:dd:
                    b7:7a:f0:14:63:77:74:45:71:64:f0:92:42:e2:7c:
                    c9:7a:40:ac:04:e7:16:4f:43:25:8e:09:d1:58:41:
                    28:68:7e:b6:15:c7:e7:c0:eb:39:4e:31:9e:49:e8:
                    a4:68:f1:9b:62:1e:12:c7:2b:5f:a4:a6:dd:f1:99:
                    a8:87:b7:1d:d2:8e:21:fd:ff:ec:16:5c:0d:6b:e0:
                    9b:0a:d6:43:f5:2c:fe:7f:c6:d5:68:e4:c5:9e:77:
                    62:ef:72:21:41:67:ca:b8:04:52:6d:47:13:8c:f8:
                    7d:de:23:76:9f:c3:60:a4:a7:26:f7:ab:fc:22:85:
                    e3:c1:48:09:59:27:3a:88:59:75:f6:c0:dd:9c:34:
                    de:2a:5f:78:77:ab:f2:20:c2:e3:b8:04:bb:99:88:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:71:9C:20:18:83:68:0B:4C:35:39:80:26:FC:B3:F1:E2:EF:0D:C4
            X509v3 Authority Key Identifier:
                keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:71:0d:f1:02:8a:0b:ab:e3:20:fd:20:e8:ed:72:48:fd:5d:
         2c:1b:66:0a:f1:3d:8b:b1:fe:60:6c:9f:66:86:4a:e3:de:e5:
         a1:a5:76:40:54:a4:19:67:6a:93:1b:23:2b:ea:6d:aa:26:aa:
         a0:92:fa:90:eb:41:3c:2d:93:47:6f:1d:dc:67:77:0d:e0:1e:
         20:c5:32:ae:bb:1f:1e:8f:28:e3:23:3b:80:c9:85:61:45:97:
         bf:2d:e2:5a:60:6a:28:04:ad:92:c6:91:24:6b:05:12:1d:1b:
         95:be:80:56:f6:b6:98:14:42:89:3d:8e:f3:ed:f3:6c:2a:70:
         29:00:10:b2:94:5f:e0:21:92:74:8f:90:0c:9a:40:33:2b:38:
         9d:74:55:0a:0a:9f:d8:13:7b:1c:44:a1:a5:ba:d5:65:ae:ec:
         c1:70:8e:74:8f:e1:23:3f:2f:25:38:5e:85:d1:4a:64:29:de:
         8c:40:e5:d9:10:50:59:52:3e:1f:72:19:cf:c3:f1:8e:91:5b:
         e7:96:36:a3:1d:11:8d:76:2b:05:14:53:d3:a9:43:c2:a3:35:
         d7:0a:6b:f7:6e:5c:ff:7a:fb:f0:22:bb:d7:bc:a6:84:9c:a0:
         33:f8:9b:fc:00:56:59:fa:ca:23:e8:76:ef:9e:ec:49:9c:a1:
         7d:de:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:30:06 2026 by rpki-client