Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
File:                     6dJyHy4r0BG4poYK0lcsQFwLVA8.mft (raw, json)
Hash identifier:          7vTV6OlNOE//bUYNietZGjN2AxZa3TgmRJxou0adtAo=
Subject key identifier:   33:9E:7C:7B:DD:D2:2C:F9:15:F1:B5:1B:05:73:65:58:06:B8:7B:34
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Certificate issuer:       /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial:       019D37C0446FFC63148AF7AF9E757B7C0C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 04:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:40 +0000
Files and hashes:         1: 6dJyHy4r0BG4poYK0lcsQFwLVA8.crl (hash: nLV1TEyp/o+6H/aa0WNQAYg4eVw83ZwtP4tc6YiS1+Y=)
                          2: 6uPro3I4XQupOy9XUhaf8FFcD20.roa (hash: YGfgfuZb7Ae8k9WT9ftvjVYfCbgCfrxqjdiypl1Yigg=)
                          3: LpO0hsOEcMHcdSPXsw1kOB0PVvE.roa (hash: 8FUnmkYO7X+R70r5Qjt/trvO3JLv/tCU91NZ2PZ0JyU=)
                          4: WundBlki0Rx5RItnWQJexSjiPdo.roa (hash: tn1Rdsti2DdLSurYdjl5heL1jrFbbaiHAu0gcaYWMGg=)
                          5: X1Ibpt7T4PrIzZZLBK_vRDfnO38.roa (hash: 3khXdYQ181uWA/VGOmOVgQwTl+Xx/QhGXUWVp/Jxm/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:44:6f:fc:63:14:8a:f7:af:9e:75:7b:7c:0c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
        Validity
            Not Before: Mar 29 04:00:40 2026 GMT
            Not After : Mar 30 04:00:40 2026 GMT
        Subject: CN=339e7c7bddd22cf915f1b51b0573655806b87b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:ed:9a:63:41:92:61:4f:c9:b4:34:9a:04:
                    5c:60:09:74:68:6c:91:db:5b:fd:bc:df:59:90:8b:
                    11:f2:74:92:a0:8f:a1:bd:57:23:c8:17:2f:d4:31:
                    71:9a:3b:d6:fa:d6:a4:92:9c:ef:92:86:16:46:77:
                    4b:06:bd:46:25:d3:20:84:a3:5d:98:43:b3:d3:ee:
                    6f:d6:b7:92:8d:91:50:c6:8d:51:04:63:bf:42:8b:
                    6a:5f:c0:75:94:a5:a0:c6:ca:18:c0:1c:94:3d:60:
                    5c:51:b2:d5:f6:c5:30:30:1d:26:37:99:af:ab:ad:
                    1e:3a:52:5c:56:4e:6d:4f:cf:8e:e2:86:e0:70:e7:
                    60:04:1d:b0:75:d5:b4:d1:97:fb:09:bf:4b:d8:5b:
                    2d:00:45:2f:c9:51:59:28:c4:1b:97:28:6e:a4:51:
                    95:9f:db:17:63:21:87:5a:1e:d5:f0:0f:80:f4:2f:
                    e7:13:45:bd:e6:d0:51:ee:83:b1:a3:0a:be:b0:9b:
                    b9:fe:bc:a8:15:a2:ef:3d:f9:d0:2e:71:20:f1:b9:
                    de:ac:48:01:d8:a5:bf:47:86:8d:95:78:02:39:38:
                    09:18:0f:ba:6c:19:39:5e:c2:cc:ce:b5:37:b7:fa:
                    99:6b:4f:8e:11:27:b6:76:04:44:16:67:7c:d5:1f:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9E:7C:7B:DD:D2:2C:F9:15:F1:B5:1B:05:73:65:58:06:B8:7B:34
            X509v3 Authority Key Identifier:
                keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:09:45:01:43:b4:c7:f8:46:be:99:5c:e1:db:21:5a:a9:
         48:e4:a8:37:50:8a:c4:06:05:d1:81:ee:06:90:16:0b:fe:bd:
         77:8e:0f:f1:ac:18:18:87:12:9e:c5:52:d0:a3:0f:c0:eb:e0:
         7a:04:f9:89:51:68:e0:5e:72:6f:d6:46:b7:fb:4b:84:f2:e6:
         8e:f1:71:a0:e3:da:13:a3:51:18:27:23:f6:c4:93:ba:b6:73:
         87:59:01:ac:46:04:01:cf:77:9d:2a:8b:5a:f8:03:d6:93:1c:
         9b:81:a3:b0:d4:ec:46:bd:5c:7f:f6:1a:98:79:c0:83:41:dd:
         7b:8d:8d:aa:d7:f8:c3:f0:d2:cb:b4:eb:77:e4:f4:4d:8d:fb:
         07:eb:19:cb:52:14:c6:9e:46:4d:93:af:4a:24:58:b0:c1:e5:
         29:e7:9a:29:b1:f5:e4:f7:c1:25:ca:1c:2b:f5:8c:dd:94:9f:
         da:f2:5f:0a:9b:5d:8c:e2:84:ff:6b:cb:96:51:89:65:80:36:
         31:a5:16:a7:b0:47:b7:9d:b3:15:fc:b8:ac:81:d7:e6:b2:5a:
         24:d8:8a:98:54:7e:c3:8d:e9:a9:4d:c2:2e:54:b9:d2:96:36:
         38:93:49:71:0f:07:5b:9b:6b:77:8b:01:b3:67:b0:00:de:0d:
         e3:5c:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:55 2026 by rpki-client