Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          e5KcoSWYcaexYIB3jT9xJ8eD18Q9UFkIyHm39UqiYpE=
Subject key identifier:   7D:25:20:74:1F:06:3A:30:B7:D9:40:B9:7C:C3:13:41:6F:A6:87:22
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       019D37C0BC4ED48FD0BADCC6A9E9E618F892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:01:11 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:11 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:11 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: ahP1tgAEukCoh1ZyTptka5J+T53AwkBwImbmAJ1WbiA=)
                          2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:bc:4e:d4:8f:d0:ba:dc:c6:a9:e9:e6:18:f8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Mar 29 04:01:11 2026 GMT
            Not After : Mar 30 04:01:11 2026 GMT
        Subject: CN=7d2520741f063a30b7d940b97cc313416fa68722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:8a:ce:f7:47:db:78:5c:d2:ac:3c:02:bd:
                    2d:5b:43:5c:95:77:7a:2b:59:aa:35:5b:cf:28:e4:
                    0b:61:89:a2:14:af:be:e8:9a:f2:45:fc:d4:f0:87:
                    68:22:08:59:34:7d:49:9d:00:d6:53:db:bc:08:28:
                    33:22:44:d5:e5:ad:80:8d:9d:5c:e0:77:18:cf:da:
                    98:55:42:ec:1a:47:ef:c9:96:7a:dd:f0:d3:fd:57:
                    5b:90:09:e4:5e:74:10:1f:4a:d6:58:72:f2:04:16:
                    79:fe:89:ce:90:42:bc:b2:ff:5a:54:fa:71:76:a8:
                    57:78:d9:7e:ed:f4:14:8b:7d:88:cc:0c:69:e2:dd:
                    51:f5:60:96:2b:2c:26:d3:24:1a:61:96:fe:df:a0:
                    4e:27:c4:49:f6:82:1c:a8:1f:e9:c6:e9:71:5a:e2:
                    a2:80:f8:cd:db:10:e0:f4:2e:b1:95:93:ac:c7:9b:
                    21:aa:55:02:d9:29:51:54:6a:30:7d:99:72:a4:c0:
                    e2:fc:e6:5b:a6:3b:a2:79:69:9e:58:33:5a:19:49:
                    8f:f4:44:8b:31:da:1b:fa:23:5d:60:7d:90:54:4e:
                    b7:72:4d:c5:e2:fe:ae:f3:09:c2:83:a3:91:9f:62:
                    3f:9e:7b:69:c0:41:b0:aa:5e:2d:d3:23:a1:21:f0:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:20:74:1F:06:3A:30:B7:D9:40:B9:7C:C3:13:41:6F:A6:87:22
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:66:49:a7:fe:ca:36:37:75:ed:1c:ee:2c:fb:9c:b9:62:
         4c:6b:7c:5f:dc:7f:d3:e3:2d:f2:b3:e9:6e:00:fc:39:10:4d:
         47:cf:f0:49:37:b9:9e:40:d3:48:8b:b5:96:81:d5:2b:57:d9:
         cc:b4:d0:83:b8:88:f7:5f:0b:33:cc:fd:30:4f:99:60:b9:43:
         81:30:6c:b8:61:72:b6:7e:ca:38:3d:58:e7:86:cf:1a:96:c4:
         48:71:e3:78:3e:2e:07:58:29:5b:35:71:c8:2e:48:a5:08:f0:
         0c:00:12:e0:8c:f8:97:f2:8a:a5:e5:88:37:b0:61:46:44:32:
         98:12:b7:07:8a:db:6e:d9:79:53:fe:ce:8a:69:d2:b7:fc:e8:
         e2:91:05:77:51:4a:bf:bb:2e:33:1b:20:90:c8:81:59:02:7f:
         f8:d0:cf:06:58:5e:ca:a2:2c:56:23:c2:14:e8:5d:51:96:ee:
         5b:ca:ec:b4:01:c1:4b:5d:f6:fa:31:cc:43:e7:5e:f2:74:04:
         30:4f:ba:7d:4e:bd:89:c6:61:34:69:51:c1:f5:29:b3:94:25:
         37:eb:e6:7a:33:a0:2e:58:76:da:73:84:69:34:81:34:d2:7b:
         85:70:4e:3e:f3:4d:78:28:ec:0c:9c:53:f4:05:c0:1b:e8:63:
         f4:30:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:31 2026 by rpki-client