Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
File:                     6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft (raw, json)
Hash identifier:          Pv5W1mHHd78puH4+XCPhtVocgUfQDYVHPnfxqGB3TQw=
Subject key identifier:   40:76:D3:15:36:24:33:EF:CF:BB:AB:BC:54:5A:5C:E3:AC:78:49:06
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Certificate issuer:       /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial:       019CF4CE0CF3E5CBF888BE02C8E3A52F4199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
Manifest number:          1874
Signing time:             Mon 16 Mar 2026 04:01:10 +0000
Manifest this update:     Mon 16 Mar 2026 04:01:10 +0000
Manifest next update:     Tue 17 Mar 2026 04:01:10 +0000
Files and hashes:         1: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl (hash: 2Q7UdVybJ6pzfg/wCEyL3JP84gcqf73/rtP6vRbhILk=)
                          2: ACDdEn4AYkA1iN0Tv7VNNi1ph_8.roa (hash: 5PczZSshZ92tAD/Dmr7LjZwks5HlTmq1cr3JLmgkIS0=)
                          3: DJeaERHkmET5-eHHAlZRzWddnHY.roa (hash: xrunQdxCV1231jVsKRShGLTYC9bF1uR6vdQtrsPx3Dc=)
                          4: lVoRzP7F8WZTOZ0grphnLvRi06c.roa (hash: +HaisbuP4PIocMHsJ40Sfm8z0WX66HaPkcbHSBoy/oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f4:ce:0c:f3:e5:cb:f8:88:be:02:c8:e3:a5:2f:41:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf760c05773c15d73676450344668fefb723447
        Validity
            Not Before: Mar 16 04:01:10 2026 GMT
            Not After : Mar 17 04:01:10 2026 GMT
        Subject: CN=4076d315362433efcfbbabbc545a5ce3ac784906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:de:6f:37:ab:f6:d3:9b:7e:d2:79:cf:f8:
                    2f:82:f5:fc:cc:90:1c:df:38:3c:9f:d7:ed:a1:3d:
                    9f:a7:2f:a9:44:bd:0b:3d:c4:ee:17:0b:87:c2:c0:
                    e6:43:1d:5f:b7:25:d0:70:68:08:17:23:2f:43:b1:
                    40:ac:ab:c0:fd:a9:bc:89:ab:75:ea:52:70:53:57:
                    a9:05:4b:1a:42:0c:4a:f0:ad:98:f2:40:fa:21:42:
                    27:28:18:ea:a6:43:f4:bb:67:4f:0f:20:07:c9:78:
                    09:96:9e:01:ff:92:d2:b7:c7:4e:87:e7:34:07:fb:
                    8a:ec:84:39:92:66:48:4f:5a:bd:1a:78:b6:45:14:
                    10:52:7f:cf:09:c6:2a:cb:e5:db:8c:c7:1d:3b:0f:
                    54:b5:33:c6:db:cc:36:56:f4:3e:65:d9:76:da:bc:
                    8d:a7:02:49:12:31:09:90:05:11:5a:93:25:db:04:
                    cf:93:4c:7a:54:ca:53:8d:2c:6d:35:48:b8:9d:4d:
                    51:b3:68:55:0d:64:87:69:e9:11:b4:9c:a3:67:2a:
                    2e:01:92:ad:d4:f7:5f:1b:84:fa:98:69:d2:7a:88:
                    e4:9b:e4:6a:47:73:60:9f:d1:3e:b8:c9:e2:b5:a7:
                    e8:f6:0c:a1:4b:38:84:e2:bd:ab:b7:30:4b:cb:22:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:76:D3:15:36:24:33:EF:CF:BB:AB:BC:54:5A:5C:E3:AC:78:49:06
            X509v3 Authority Key Identifier:
                keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:a1:62:b3:b9:34:a7:e5:e8:fc:06:64:b7:7d:f6:4a:35:
         7b:fe:9b:1d:b3:64:d1:4e:84:7a:35:64:62:15:48:48:ba:f9:
         06:be:c6:11:33:e4:f9:ab:54:f0:03:75:b6:e3:e2:b7:dd:a3:
         b3:cd:1a:86:6f:a1:64:67:9b:6e:cd:27:8e:2e:0e:40:b6:e2:
         25:35:f4:21:53:36:a3:d6:2a:bb:eb:16:8b:4d:c3:e4:d1:45:
         51:43:ce:8a:9f:0e:39:5d:19:04:89:c0:f0:19:3b:56:b5:f4:
         0c:64:53:d2:79:fe:13:20:af:f6:10:56:5a:f8:f8:10:f6:21:
         bc:b7:61:d8:ca:5b:4d:4c:83:9f:ee:e2:c6:ff:9c:bc:51:b9:
         84:6e:10:60:85:6d:da:af:86:a9:0d:4a:53:e9:f6:a4:96:39:
         90:81:cc:2f:bf:e2:81:ad:2e:b0:a7:7f:dc:fd:79:2b:e5:a6:
         76:f4:4c:1f:08:84:d7:80:ef:07:3c:c0:41:54:1d:24:01:c3:
         9d:b1:9a:86:5e:79:a8:bd:51:19:72:e1:7b:d2:23:9a:4f:4f:
         a9:5d:3f:30:0d:9d:89:87:4b:92:59:78:5f:3a:58:bc:0c:a1:
         3a:6d:0a:73:90:9d:ad:d6:63:09:34:0a:51:b9:e8:c4:f5:fd:
         2b:ea:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:20:22 2026 by rpki-client