Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          /eWPD0eU0u1KesxBQ4q/3mQYRECgsNWlKXwBW4y3a7E=
Subject key identifier:   78:5C:6D:1F:E2:84:DD:E9:FD:1D:6C:81:DF:4D:DF:A6:17:C9:95:F0
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       019CE447A270614CA732DDE699992AC5C523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0F45
Signing time:             Thu 12 Mar 2026 23:00:25 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:25 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:25 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: dnxV6n0pFY8KPUOfWas77kcNY0BX168ZFUanSDp+2LE=)
                          2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:47:a2:70:61:4c:a7:32:dd:e6:99:99:2a:c5:c5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Mar 12 23:00:25 2026 GMT
            Not After : Mar 13 23:00:25 2026 GMT
        Subject: CN=785c6d1fe284dde9fd1d6c81df4ddfa617c995f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:10:96:1d:97:50:a9:1a:3f:02:f2:9b:94:
                    ec:f5:26:c1:7c:10:9d:bf:8c:24:08:4a:16:1a:bb:
                    6b:94:b4:08:ea:7c:78:94:b0:a5:f6:f7:23:93:cf:
                    cd:d9:90:b8:67:03:5c:ef:e8:b6:af:05:14:9e:77:
                    66:4e:c7:2a:55:c3:99:12:4d:8b:76:0a:1a:40:55:
                    57:01:74:83:65:b5:24:29:0e:fa:28:86:78:90:d8:
                    59:52:d5:12:b1:89:94:3d:b3:81:4c:28:8e:ca:af:
                    48:af:d8:a9:a3:78:f4:1c:cb:d8:b8:5d:64:40:82:
                    ba:94:af:fd:09:2d:18:1d:15:f3:68:c5:30:be:e9:
                    c3:8a:2a:8e:96:55:94:a7:d2:a5:bf:72:64:74:97:
                    e2:9a:da:4d:1a:bd:0a:31:64:e7:a4:0c:86:4e:74:
                    49:87:28:f0:91:dc:c5:4d:a0:2f:ff:d4:e1:70:0e:
                    a3:90:43:03:c7:96:1a:e5:6f:8b:98:0f:eb:2e:84:
                    64:7e:3b:f6:fd:ab:e0:9f:1c:eb:16:56:ca:24:b4:
                    c9:36:e5:95:2f:7b:a8:09:8b:31:7e:00:d0:4e:6c:
                    10:67:cd:a9:c4:ef:0f:72:9e:1d:bc:28:e1:c7:d4:
                    55:cf:54:77:ce:38:b7:c9:ec:5f:2d:fa:a9:ee:44:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:6D:1F:E2:84:DD:E9:FD:1D:6C:81:DF:4D:DF:A6:17:C9:95:F0
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:90:da:3a:a6:e1:45:66:3c:5f:d5:a5:61:53:54:b9:bb:87:
         87:54:e2:81:49:0b:66:5e:f0:a9:0a:14:d7:f2:e7:10:34:9d:
         77:97:30:07:31:6d:eb:51:2a:97:34:be:81:3a:59:f7:cf:2c:
         1b:7e:2d:01:e6:c7:17:4b:bb:d3:2b:5d:b3:a5:12:7c:b7:89:
         ac:d9:b4:bd:a8:e0:53:48:e0:67:6c:05:0e:85:a6:90:29:be:
         94:61:6f:bb:d5:64:fb:3d:48:87:8f:d7:52:bb:4b:e8:96:6b:
         58:f3:f6:4c:2d:b6:27:fe:5c:34:05:4b:7b:e0:c3:0d:bc:36:
         59:7e:dc:c1:25:6f:45:ae:8c:90:44:25:d3:2a:48:cf:85:50:
         4d:54:1e:7c:0c:3b:c7:9c:3f:63:09:14:43:4b:9e:6a:1e:d3:
         02:f7:77:e4:52:a5:c3:ab:cb:1f:b5:aa:a3:6a:0e:7f:b2:05:
         90:6d:c0:f2:e8:93:ed:ce:07:68:5b:40:b3:87:af:99:b6:b1:
         0b:01:c7:8f:ff:28:15:54:6c:23:f4:9d:77:18:78:ff:8b:cb:
         41:38:13:f2:1f:01:c7:4e:ea:b3:8b:e1:ff:c4:08:7c:c6:15:
         97:cd:2e:a1:46:b9:4c:81:b7:2f:6f:37:49:31:b9:76:ce:1d:
         05:cc:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:27 2026 by rpki-client