Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File:                     a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier:          seAK1ecWH6PDpIYqUH0zD/+S88lszpZowSGOsaGFxdg=
Subject key identifier:   D8:C4:E8:71:4C:32:17:73:56:90:49:71:1D:3D:44:12:9F:6E:9F:AE
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer:       /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial:       019D2884B351F755CB4C4EBAD6508EB318F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number:          1547
Signing time:             Thu 26 Mar 2026 05:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:18 +0000
Files and hashes:         1: LRGE42EYYY0LsfuMjQcrmEr0c-8.roa (hash: TWDwITFz0WnAZFupqL07ce+IToF2+QZ+z5d9VBF9FsY=)
                          2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: YcS2aFb1Acx4RONJeoUpbGHbXqKr/vsyOn9Zl+XHqoE=)
                          3: cXWbnmeg6t-kJSlSj2rRhdBCVuM.roa (hash: bYbG/uapXVFMU/gkT+nefhH1EgS8R7G2uYxukKJjTSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:b3:51:f7:55:cb:4c:4e:ba:d6:50:8e:b3:18:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
        Validity
            Not Before: Mar 26 05:01:18 2026 GMT
            Not After : Mar 27 05:01:18 2026 GMT
        Subject: CN=d8c4e8714c321773569049711d3d44129f6e9fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cc:52:93:e1:ad:b1:95:07:82:0c:7c:73:b5:
                    49:ee:8f:e4:55:a3:5d:b2:e7:fd:bb:ca:6e:19:6c:
                    0f:86:7c:d7:68:4e:68:86:c5:7d:3e:03:67:b0:20:
                    bb:72:9b:40:7a:28:28:70:8d:32:72:ba:61:28:f1:
                    08:6f:c2:c2:88:69:be:fc:42:4d:44:67:fa:9d:59:
                    e3:33:3b:72:59:94:58:d6:b5:bf:8a:6f:41:aa:78:
                    c6:fa:74:c2:b5:43:e5:5e:ba:4a:9a:4d:75:5b:0d:
                    9d:0d:15:e5:53:62:46:47:3b:95:d5:66:a0:85:c7:
                    d5:1b:47:7b:03:6a:38:81:98:9d:1e:b5:13:c7:69:
                    44:98:03:4b:17:0b:6e:ad:19:15:5a:00:ec:4d:ff:
                    3b:5c:c4:97:78:32:7f:ca:36:92:92:d0:3d:de:ec:
                    82:7e:a0:7c:ec:2f:33:67:80:b1:15:a4:24:ad:00:
                    41:74:59:ec:45:fd:e4:2d:7a:c8:23:67:3b:5b:74:
                    fb:0a:ef:1a:02:9b:3a:69:58:38:9d:38:6a:5f:58:
                    28:0f:e9:42:56:78:05:fd:bc:52:c8:5a:bd:47:21:
                    a7:d3:6d:bf:e5:31:e6:0a:86:90:3d:2a:33:6a:2f:
                    36:4c:0e:b5:42:b4:ac:36:b2:fa:33:19:f3:74:f3:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C4:E8:71:4C:32:17:73:56:90:49:71:1D:3D:44:12:9F:6E:9F:AE
            X509v3 Authority Key Identifier:
                keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:a2:2a:35:94:98:48:77:e0:89:f4:52:cf:f7:88:39:8d:
         a0:b1:42:ae:ec:e3:b0:34:71:bf:0b:e0:46:e2:04:87:58:c4:
         21:e7:a4:6e:25:8b:76:14:11:de:c9:5b:22:a2:c3:ec:ec:60:
         e6:70:2f:44:0f:fa:3d:00:a2:46:b6:78:49:88:93:dc:2d:82:
         3c:18:b2:c1:d9:e9:43:78:ec:6d:14:3e:02:29:52:32:93:d2:
         74:a0:f0:0c:57:b6:38:d7:e6:95:b8:62:a5:95:b4:f4:27:76:
         6f:eb:4b:43:98:2b:e3:62:dc:76:67:ac:1b:72:82:ef:ca:a9:
         68:29:07:9a:53:ec:75:54:ea:02:a1:00:2b:2f:a5:d8:aa:29:
         c4:36:e6:cd:a5:55:05:49:47:a1:04:8e:9c:30:c9:63:be:3b:
         64:9d:36:0e:14:91:52:41:86:bf:d7:52:86:45:c5:0f:5e:49:
         3e:a3:7a:41:72:f0:19:01:10:09:7e:5a:31:37:87:bc:41:57:
         f0:a1:43:a1:e3:75:cd:41:49:b3:a1:4d:76:7d:e9:a1:f0:ec:
         92:33:32:81:23:dd:5a:db:3e:84:5f:37:74:be:71:ad:3a:cc:
         75:25:99:89:de:c1:85:0b:fa:3a:d2:08:e0:45:ef:c2:d0:4f:
         2f:f2:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:06 2026 by rpki-client