Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File:                     M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier:          mnWVtWW+eKeCfdZYTaCuBI6fIOOkugKTKkRHqvizIe8=
Subject key identifier:   F3:6B:C4:BE:09:4A:3E:88:BF:6F:0F:8E:52:C2:92:D1:1B:6D:5E:B3
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer:       /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial:       019CE5C87E05CE03081BCD2DF9664EA8CC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number:          17F6
Signing time:             Fri 13 Mar 2026 06:00:47 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:47 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:47 +0000
Files and hashes:         1: L1EgWlcecAT3ZJCSD7dsxRrS5gY.roa (hash: XjCdltafvkU+W0HTZ2Gpfs3P+GnUcAc+4fU6I9YL5EE=)
                          2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: AwnqL2tPmThUH0SJmiPepPfqhUCpTH7nG3HJFACHECk=)
                          3: dKuH0lj-FcvTEnVQ3b_1AAvtcwM.roa (hash: IdTgVOkZiNhxtZ6mU+Z1OJOU/QZ/1eAxm1oF//XLXhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:7e:05:ce:03:08:1b:cd:2d:f9:66:4e:a8:cc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
        Validity
            Not Before: Mar 13 06:00:47 2026 GMT
            Not After : Mar 14 06:00:47 2026 GMT
        Subject: CN=f36bc4be094a3e88bf6f0f8e52c292d11b6d5eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:14:78:78:c0:0e:4f:9e:ea:17:3d:2b:fa:
                    04:4b:e6:62:4e:1e:8d:13:87:32:8d:c3:b5:b3:6b:
                    20:44:51:5f:98:e7:1e:da:93:37:8b:27:d8:0f:7a:
                    7a:06:ac:86:b6:d1:cf:b0:f2:51:f5:2f:60:82:a7:
                    67:49:a3:60:30:9b:6d:6e:7b:55:42:78:c6:51:09:
                    51:ee:dd:ea:09:45:56:c3:68:3c:90:04:5f:85:60:
                    19:22:08:85:cb:ce:33:be:9a:76:32:72:60:df:c0:
                    28:f1:20:82:2c:16:ca:75:13:a5:3a:76:37:99:15:
                    4d:83:80:67:85:e0:65:ba:8c:d0:ab:a9:08:f0:59:
                    b1:8e:7b:23:d2:b7:d7:d6:3e:6a:5b:92:d1:10:c3:
                    d0:b6:44:64:9a:10:72:13:cc:76:cf:b2:28:61:78:
                    b7:d4:cd:bf:e5:fc:c8:da:79:ad:0d:e8:52:09:9f:
                    82:72:b5:5a:dd:6d:0b:dc:0b:38:a4:b8:9f:3d:c1:
                    5c:92:f0:e4:ce:54:b4:12:54:ed:a3:d5:e2:6f:31:
                    a6:15:d4:00:67:64:be:2d:80:80:68:f1:2f:af:2e:
                    25:cd:42:90:66:ac:a0:71:4f:89:1b:dc:e6:c5:24:
                    81:ca:7c:2f:a8:b4:1f:02:76:2d:4c:b5:19:2f:c3:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:C4:BE:09:4A:3E:88:BF:6F:0F:8E:52:C2:92:D1:1B:6D:5E:B3
            X509v3 Authority Key Identifier:
                keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:c0:1e:4b:5a:bd:4d:b4:ec:cc:9d:17:3a:c2:f0:ed:74:
         5d:36:af:e4:29:d3:02:2c:5c:61:0f:20:ca:f8:c3:78:23:ea:
         c3:f9:f2:ab:60:f1:c8:cb:cd:0d:0d:20:fd:fa:b8:13:a3:98:
         4d:31:81:e1:3d:71:cf:b4:35:f7:2d:dc:d9:d1:d5:f8:eb:a3:
         53:84:d6:b9:00:96:46:5b:ea:eb:e4:29:40:26:3a:9d:65:ab:
         14:51:3d:cd:3b:b5:1e:fe:2c:aa:7e:80:bf:f5:67:7b:bb:d0:
         90:67:f9:21:24:66:6c:30:fb:05:61:df:66:ee:73:b2:f1:0d:
         f3:c2:f7:65:fd:d4:d4:c6:dd:36:db:49:90:45:aa:a6:87:1e:
         73:a4:1b:4d:61:05:f5:00:8f:b3:49:f4:3d:6a:7f:11:27:b1:
         98:3d:66:28:6b:de:4f:27:50:4c:aa:9e:5a:ce:85:85:03:b9:
         85:44:ea:8c:ea:74:fb:9f:ec:0d:9e:d7:0b:fb:2f:e6:d6:ab:
         07:7b:e3:a9:ee:05:11:33:a8:ea:63:83:a7:0a:be:20:05:58:
         68:4d:96:67:8f:03:1f:e9:06:33:d5:40:e9:fe:46:da:ca:31:
         91:45:c8:82:1a:11:03:91:e0:46:08:7f:ae:9e:4a:38:32:93:
         0f:fa:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:08:24 2026 by rpki-client