Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File:                     6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier:          /43Zd+ncpYeQ5638dL3D2FHnhrTF+FGUa4Rsq/ZaoGw=
Subject key identifier:   66:C2:EA:A0:F1:96:E6:7C:D9:F0:2D:9A:18:0D:85:F0:40:B9:D2:6F
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer:       /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial:       019D2EBD40EEFB257FA1FA9698D8360F453F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number:          1230
Signing time:             Fri 27 Mar 2026 10:00:47 +0000
Manifest this update:     Fri 27 Mar 2026 10:00:47 +0000
Manifest next update:     Sat 28 Mar 2026 10:00:47 +0000
Files and hashes:         1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: XmxeS2zJcnHJ6Vl6hQZ6F0jq1GHlxk7n+HaTEa4Xk6E=)
                          2: FCkS32niDqTieJEg273lZaADBO4.asa (hash: X7OKZkohiCA52OimXwo3Rcigub3BUOIbW9Q5dXYSznI=)
                          3: q0LlzmM8E8pM2I1fVThdkBbhcsc.asa (hash: KUK6/Ec9nAX5NcTnuxJ3vbPAN4QtO/b7t3p4IVGMuRU=)
                          4: upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa (hash: 2Rk/P9oSpdtf8edjp9QJY+dBNX8kPTP7ILwi67bXY+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2e:bd:40:ee:fb:25:7f:a1:fa:96:98:d8:36:0f:45:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
        Validity
            Not Before: Mar 27 10:00:47 2026 GMT
            Not After : Mar 28 10:00:47 2026 GMT
        Subject: CN=66c2eaa0f196e67cd9f02d9a180d85f040b9d26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:6e:ba:5f:fc:a6:aa:92:f5:4d:78:ee:66:
                    82:77:ed:bf:69:e1:25:69:b7:61:5d:22:af:77:4f:
                    a0:89:dc:0d:81:53:aa:03:00:7b:45:3d:20:ab:7f:
                    33:a7:6b:6a:eb:b4:25:d4:b2:07:86:23:73:66:e5:
                    4f:f0:b0:bb:59:0b:50:35:a2:e4:08:b3:bb:2a:21:
                    1a:cc:87:44:20:80:bf:53:b9:ed:ff:34:f8:e8:fa:
                    af:29:55:93:79:9b:e2:73:16:6d:e3:3a:5e:89:55:
                    bb:82:8a:03:10:9d:7f:94:a8:fc:11:6d:8a:49:b0:
                    71:63:25:c0:df:fb:8e:e4:5f:06:1a:85:92:a4:1a:
                    b8:f7:d3:45:ab:39:54:59:11:5e:fa:22:2c:8d:20:
                    92:93:00:97:b7:49:e8:c8:0d:41:7c:21:ee:57:4b:
                    5f:5e:3e:fc:58:01:7b:51:43:de:fa:19:1e:43:3f:
                    f1:14:4a:36:08:9d:38:dd:3e:44:cf:6e:80:0b:f0:
                    0a:a4:18:e7:13:4e:8e:de:96:a3:b8:c7:89:f8:c7:
                    de:ab:1b:c1:92:e1:4c:80:02:e1:46:9d:e7:bc:38:
                    1f:92:7b:94:fa:2d:49:e7:a9:c1:24:c8:00:e3:31:
                    ec:0c:19:5f:7b:28:cf:4f:bf:1a:e4:ea:d0:09:c8:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C2:EA:A0:F1:96:E6:7C:D9:F0:2D:9A:18:0D:85:F0:40:B9:D2:6F
            X509v3 Authority Key Identifier:
                keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:19:13:85:47:8f:1e:21:2b:1e:9e:8c:4c:bf:cd:06:16:
         90:bc:1f:b1:ac:d1:a7:e0:b5:91:e7:b4:04:06:87:6e:27:c0:
         64:6f:06:cd:f7:ee:64:2e:56:d8:7e:d7:ff:f2:cf:2e:f2:3d:
         ae:91:97:ca:d2:79:b1:cc:ec:87:7b:b7:fb:6a:72:72:6d:04:
         71:bb:53:92:c2:98:ae:79:15:e2:be:e1:a4:74:4b:58:55:74:
         19:ab:ee:11:a2:62:fe:2c:ad:37:70:fd:c8:80:af:75:23:af:
         02:a5:b4:08:bf:12:2f:b4:c2:fe:c7:dd:00:84:40:3a:20:2c:
         3d:4a:42:0b:70:6e:5e:d5:a6:19:66:d2:2b:34:f5:92:2c:7f:
         37:da:cc:62:ee:35:b9:8f:41:14:f5:37:84:eb:7a:0b:9e:36:
         97:35:22:cd:6d:c3:3b:d4:ee:5e:de:37:ae:7f:81:f8:59:12:
         c2:d3:ae:09:c1:80:97:4f:9f:ef:67:07:54:29:e1:07:2f:e0:
         58:11:74:93:f2:e5:d8:14:7a:d0:ed:84:a3:a2:2d:5f:24:03:
         23:38:3a:9c:8e:6e:f4:9e:6c:30:db:5b:89:67:92:e8:63:45:
         a3:d4:cb:d3:ce:fc:ac:59:40:0e:18:2c:d6:e4:82:e6:7c:67:
         cc:6e:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 16:07:09 2026 by rpki-client