Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          56b6uMFvSQC4lGY3tD/Z6fhbte7DWOzY/g2TgOTruhE=
Subject key identifier:   3F:63:D2:56:08:DA:FF:BE:EA:48:8C:28:64:F2:21:DA:26:37:27:48
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       019CEAEF3EF4CE8B926DE2782D13D3CED89D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          08BB
Signing time:             Sat 14 Mar 2026 06:01:13 +0000
Manifest this update:     Sat 14 Mar 2026 06:01:13 +0000
Manifest next update:     Sun 15 Mar 2026 06:01:13 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: LEapC032Ou1WuJg2TK6Yx/6Ie4PQpUfib37Actpwdes=)
                          2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:ef:3e:f4:ce:8b:92:6d:e2:78:2d:13:d3:ce:d8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Mar 14 06:01:13 2026 GMT
            Not After : Mar 15 06:01:13 2026 GMT
        Subject: CN=3f63d25608daffbeea488c2864f221da26372748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:8f:a6:cf:11:f1:18:c5:27:3b:43:68:ca:
                    d9:9e:0f:0f:a2:17:c8:d4:b6:c6:0d:a8:c8:bd:87:
                    88:26:b5:66:1e:4f:f8:db:c5:a1:76:ea:50:06:fc:
                    91:ef:1a:1b:d2:0d:ee:c4:96:22:9e:d7:53:d9:17:
                    fd:83:f0:e5:e2:c3:3e:e6:5c:d2:7b:ca:f6:be:67:
                    66:3a:ec:3f:8d:12:cc:49:36:19:fb:65:34:10:2d:
                    5a:1d:82:11:d7:f5:58:d5:ab:65:c8:f0:e0:0d:3e:
                    09:2d:09:5b:02:0f:ae:ce:cf:56:38:5b:9f:21:c6:
                    97:6f:b6:5f:1a:18:26:d8:27:a5:73:49:59:5d:43:
                    99:7e:53:46:11:f6:55:d5:8c:30:b0:77:d1:cd:44:
                    4b:e7:f0:52:b5:07:27:56:95:67:09:15:23:e6:79:
                    3f:86:59:f2:3d:d5:3b:df:3f:9c:0a:c8:e4:f3:67:
                    cc:19:37:2a:13:c7:4b:88:11:cf:53:07:3a:b7:55:
                    7a:7e:79:ee:21:a7:fc:ae:37:15:81:5b:1b:6e:76:
                    ab:1c:d2:f4:b5:60:bc:28:95:54:7f:e8:ba:3b:dc:
                    ae:df:8f:81:db:04:83:bd:68:88:ca:1a:a0:ea:ec:
                    39:d2:4b:0f:e8:49:cb:88:81:cb:39:79:36:14:92:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:63:D2:56:08:DA:FF:BE:EA:48:8C:28:64:F2:21:DA:26:37:27:48
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:87:a3:85:0e:36:59:ad:1b:7b:37:f2:fd:da:3a:21:24:55:
         b9:ef:e4:0d:b8:f4:6b:0f:50:23:18:e9:62:cd:31:60:86:5b:
         e3:e3:54:ae:16:4c:79:da:e1:37:f5:f9:5f:ca:8e:63:66:13:
         3e:cb:24:ec:b5:90:01:8d:f0:99:23:e9:19:fb:ca:81:b2:be:
         26:f6:16:ca:05:67:8e:94:2c:7f:8b:ae:f4:8d:40:c4:70:9c:
         8d:77:0e:2d:db:dd:99:0c:65:a1:4b:2a:1d:31:b3:86:fb:03:
         7a:94:3d:ab:2b:42:de:49:44:03:79:ce:1f:67:84:c5:d1:3a:
         57:f8:54:84:f6:91:0b:73:e1:f5:78:e2:67:2d:9d:33:e7:9e:
         4c:8c:a1:b1:fd:b4:7b:c1:82:85:e2:31:26:bf:a4:51:aa:45:
         f4:72:91:1b:a6:0d:14:98:a4:d8:49:87:d5:83:11:ef:93:fd:
         1d:e1:27:a7:52:2d:16:c9:66:78:11:d0:68:9f:52:a3:13:a4:
         14:eb:4b:c9:a1:c5:9e:d8:42:23:58:b8:e2:1e:79:29:f4:a0:
         74:cb:14:83:be:d7:20:0b:75:5a:02:5e:e9:25:fc:35:e1:b5:
         82:65:14:b7:2e:2d:f2:c7:26:41:2a:6e:b7:4b:c1:9c:c3:0c:
         fe:fd:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:48:44 2026 by rpki-client