Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
File:                     6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft (raw, json)
Hash identifier:          Y8ZoL6dqVRrh4ablBmKbsV1XtDWcRGD36GpP+sOzgSs=
Subject key identifier:   71:17:83:C2:A9:84:A8:2B:E6:ED:89:DB:C6:F2:D8:F7:8C:45:71:72
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Certificate issuer:       /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial:       019D2139A6ADA284F9C09E66B43FC3B1D716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
Manifest number:          1889
Signing time:             Tue 24 Mar 2026 19:01:59 +0000
Manifest this update:     Tue 24 Mar 2026 19:01:59 +0000
Manifest next update:     Wed 25 Mar 2026 19:01:59 +0000
Files and hashes:         1: 51xn4STL4iZZj62JSvhJ4zl6d6g.roa (hash: +puelUbKWuzaIoLcZeNYJ6k1vQgt2kHRx9TFlxyzoEI=)
                          2: 6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl (hash: d4+IG2mRhKZIDRBcjP9hLNmD5trbDpnoLrs0mjD9lHU=)
                          3: EXFU73rH1Gc1eVRDfvuScYJlzGs.roa (hash: OuCZzos3D1mTnexc0/u8FlcZVoi8DzCDiFFLd+iZReo=)
                          4: KddG9VzqqdX_8k-PUqQzM9NcRkY.roa (hash: pzuVMWDh2Vne7UfbY+caG5MJ7AmHoX1/3ZwULzGUsug=)
                          5: pWmm-znJ9h3QY4KDibvQqttBHk8.roa (hash: +zU8e4lmjNY/s6v0j6Eqt+nFntwM2ddZGrZrcJphjHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 15:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:21:39:a6:ad:a2:84:f9:c0:9e:66:b4:3f:c3:b1:d7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
        Validity
            Not Before: Mar 24 19:01:59 2026 GMT
            Not After : Mar 25 19:01:59 2026 GMT
        Subject: CN=711783c2a984a82be6ed89dbc6f2d8f78c457172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:41:aa:6a:01:e9:19:4a:dd:5e:0e:cc:96:
                    a2:29:58:96:57:42:96:a2:0c:93:b1:63:06:34:ac:
                    65:91:a9:54:bf:14:d1:94:8b:df:15:3b:02:ea:91:
                    69:a4:db:79:a3:1e:93:e5:20:37:fc:c6:31:2f:86:
                    bf:e0:36:5a:d2:88:c5:5e:b3:6a:94:d3:89:b4:7b:
                    99:97:a3:4a:f0:f8:0f:1f:f6:e6:64:4f:f4:0a:c6:
                    9c:28:71:1e:f7:a7:4a:8d:1c:7c:f7:9d:e8:e9:26:
                    95:44:3d:2d:7b:6e:37:4f:49:bd:9f:1a:00:15:bf:
                    1d:e4:d7:1d:58:49:98:0c:91:1a:a9:64:e5:a3:5f:
                    2f:7a:1f:51:ef:17:56:08:d7:43:67:65:2f:6f:3c:
                    88:55:33:93:51:3b:fe:33:99:bb:58:7e:16:df:9e:
                    93:ff:73:a2:f5:a3:45:15:85:fd:70:d1:f6:dc:01:
                    30:80:8f:cc:22:b8:e3:92:0c:de:b2:1f:90:62:f8:
                    21:cc:fb:c7:98:d2:70:2e:08:67:16:7c:1b:22:19:
                    0a:7c:c4:18:5d:31:f2:0e:d2:a0:07:4c:a7:9c:f7:
                    13:3d:13:59:ff:7f:e0:2d:71:3d:3b:7f:fc:86:a7:
                    c5:4b:9d:df:7e:f8:47:4e:c1:b2:eb:ef:0a:08:67:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:83:C2:A9:84:A8:2B:E6:ED:89:DB:C6:F2:D8:F7:8C:45:71:72
            X509v3 Authority Key Identifier:
                keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9d:75:64:6b:0f:11:2d:7e:a1:0d:bc:ba:4a:cf:87:a2:89:
         b8:7a:b3:c5:07:ab:44:45:2a:23:a2:d1:46:16:f9:66:58:8c:
         87:71:46:c5:0a:ae:85:d7:a6:4d:f8:62:49:bc:72:72:ae:4c:
         96:5b:97:97:a1:ee:57:8f:96:30:1f:5b:2c:3f:cc:70:5d:95:
         87:84:e9:b0:d4:fc:e6:6b:76:10:b7:26:66:17:33:f2:0c:56:
         a0:6e:9e:e0:cc:44:93:a4:4f:81:0f:3d:1f:f4:d6:de:9b:50:
         d2:f3:18:c7:ce:5d:53:17:2f:bb:44:c9:a6:1a:f3:11:9b:88:
         19:4b:28:be:f2:c8:56:7e:37:77:34:38:16:d4:85:65:f5:1d:
         d2:97:2a:70:2b:79:18:be:1c:7f:02:0b:00:6c:06:96:29:77:
         4e:96:57:a7:dc:10:3c:79:f6:49:b8:e7:7d:5d:21:b1:22:33:
         83:f2:2b:72:6b:72:02:26:bb:bc:03:04:d7:43:0a:7d:c3:75:
         c6:08:35:9d:80:7a:94:6f:ff:1a:2c:8d:9a:d0:ae:da:d6:af:
         f5:d5:d4:b7:3a:7a:ce:d3:aa:af:e9:be:a1:9c:97:27:be:06:
         21:d1:45:f8:ac:01:23:bb:f6:b0:30:23:10:57:de:a2:e4:e1:
         06:73:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 01:15:21 2026 by rpki-client