Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
File:                     6jKtyFac_LNedcfO_UbV7QDw4Cg.mft (raw, json)
Hash identifier:          JzEEk0MArFHGFuZHXGUSNhh2+sXoHIth0XZ281aWVqw=
Subject key identifier:   D7:B2:CC:6D:AF:CD:83:18:60:DB:F9:E1:2F:6E:9A:0C:82:3D:03:2C
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Certificate issuer:       /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial:       019D389C37C5A7BC3654C79078D6A67B4E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 08:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:54 +0000
Files and hashes:         1: 1-mhgOr8UYO7GuYZMQdGU10a95dM.roa (hash: Ir7kYJRWpIfOgbmkMX+1I275bxBDwz6TOD+jFnrVbks=)
                          2: 2vmkg2M-7uKyVhPKrCTSZDqOIR8.roa (hash: qDlzIQt4Ssriqd5eYUtQEFYM+azNejVu2eMaDtZq8hM=)
                          3: 6jKtyFac_LNedcfO_UbV7QDw4Cg.crl (hash: o1CJWbs/cAmVs30jZcj8bsmGbVkffRseUOv73jL4SQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:37:c5:a7:bc:36:54:c7:90:78:d6:a6:7b:4e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
        Validity
            Not Before: Mar 29 08:00:54 2026 GMT
            Not After : Mar 30 08:00:54 2026 GMT
        Subject: CN=d7b2cc6dafcd831860dbf9e12f6e9a0c823d032c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:76:01:48:eb:46:b7:55:72:28:ed:b8:34:
                    8e:97:52:a2:f5:87:f5:9b:10:3a:c1:d6:84:53:fe:
                    c1:7d:fd:91:73:35:3f:89:46:a5:c1:8f:ec:ee:85:
                    fe:fe:30:76:0a:44:90:f4:b4:ed:29:f8:52:d3:8f:
                    1e:f1:f8:5c:ed:03:02:a7:65:f1:9c:f8:b0:f7:7a:
                    a1:2c:b2:92:20:78:00:41:6d:83:9e:43:d7:74:58:
                    02:21:f8:05:17:03:22:a5:04:07:dc:ff:e4:0d:13:
                    72:b7:6d:59:01:24:46:fe:9a:e7:8c:7a:0d:b6:be:
                    b2:56:ef:9b:59:ca:a9:74:0b:72:be:11:61:5b:c8:
                    81:ca:97:77:ff:6d:0f:3f:50:b7:b9:ba:9f:8e:2b:
                    07:d7:5b:e9:c4:b7:99:0d:41:b8:80:d3:b7:5f:c4:
                    f9:d7:1e:26:ed:9c:09:3a:86:94:30:4b:3c:7e:b0:
                    35:3a:b2:dd:9f:89:5f:83:14:43:34:d7:80:d7:69:
                    f8:18:08:2d:bd:c9:9e:e8:ff:c2:44:44:a8:2c:95:
                    7f:f4:43:10:ad:74:27:52:50:c0:87:18:34:05:fb:
                    8f:15:bc:fa:8d:1a:de:36:7c:b7:8d:3f:a1:d1:37:
                    3b:f5:5a:ce:cb:a8:8d:b1:41:5c:3d:45:ea:7b:ad:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B2:CC:6D:AF:CD:83:18:60:DB:F9:E1:2F:6E:9A:0C:82:3D:03:2C
            X509v3 Authority Key Identifier:
                keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:7f:b8:1b:c2:2e:a3:97:3b:d3:43:64:5c:fb:f0:f7:6d:
         35:47:81:ab:58:02:98:9c:94:d5:2a:f9:c8:64:15:d8:5e:28:
         8e:fe:3c:44:02:c9:57:48:4a:c7:e6:ce:c8:78:a1:64:5f:a3:
         d2:d5:fd:c6:b5:d4:0f:cc:90:fd:61:f8:a3:28:71:a9:2c:e8:
         73:b5:b2:54:dd:1b:ad:7c:7d:70:e1:90:1e:87:40:f4:f1:70:
         89:21:21:5c:ca:f6:cb:b6:0c:c6:3e:78:ea:52:86:cb:49:2b:
         f4:ee:ca:d1:4d:91:1e:79:ec:9b:b3:13:84:21:4a:2a:7e:cb:
         19:ef:72:58:c1:ad:f9:42:15:90:ab:6c:04:08:3d:df:23:b3:
         40:11:f9:a7:4b:93:92:65:2d:77:48:64:82:f9:42:f6:59:2e:
         d3:8b:97:3f:07:ca:96:03:31:40:81:30:55:10:30:52:00:b2:
         33:88:aa:80:b3:2f:c1:6d:ca:58:36:af:59:e2:b1:a4:c2:6e:
         78:0c:b5:6f:da:89:67:91:0a:2c:33:88:82:df:f8:26:b0:5e:
         23:34:ca:50:fc:c9:01:7a:b5:ea:46:5e:9d:af:9d:11:8e:58:
         36:71:7f:8e:b3:55:5d:b6:13:1d:b7:4a:a7:da:e9:c8:83:dc:
         8a:c6:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:21 2026 by rpki-client