Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
File:                     e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft (raw, json)
Hash identifier:          gkQ/KhN8Ou5g4eNg+SfkDQuLY7r6CAurjIkDJy2JIqo=
Subject key identifier:   E1:73:EB:F3:EA:D8:71:09:6D:DF:5C:36:CF:00:E5:E4:4D:70:C4:40
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Certificate issuer:       /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial:       019D08F995CDCCEA2519B767621F7FB12A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
Manifest number:          1435
Signing time:             Fri 20 Mar 2026 02:01:07 +0000
Manifest this update:     Fri 20 Mar 2026 02:01:07 +0000
Manifest next update:     Sat 21 Mar 2026 02:01:07 +0000
Files and hashes:         1: e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl (hash: /N+AQ978+AB+wCSR8hHiWA8p2N34xrVwUlFepjT98ac=)
                          2: okhAMfz0WaGGOHXHCGovIHlTyKw.roa (hash: 7Vnu9sTM6wsooj/f9YqOP0/u4l20pcaLe53Lq6zoivQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:08:f9:95:cd:cc:ea:25:19:b7:67:62:1f:7f:b1:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
        Validity
            Not Before: Mar 20 02:01:07 2026 GMT
            Not After : Mar 21 02:01:07 2026 GMT
        Subject: CN=e173ebf3ead871096ddf5c36cf00e5e44d70c440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:ce:cb:3a:00:3f:ce:80:c1:d4:15:81:ac:
                    31:f8:54:e0:fa:26:a2:a5:e4:c2:8e:6c:cd:6d:07:
                    01:ea:25:8c:8f:e8:08:22:17:d7:fd:4c:ba:d0:af:
                    a9:3b:42:36:4f:93:d9:bd:97:29:b7:1f:af:91:f5:
                    45:2f:d4:cc:3a:92:a9:4c:8e:e4:84:b9:c3:82:55:
                    13:07:e5:c0:fe:bf:f0:3d:54:c9:b2:4e:56:c8:d9:
                    58:be:36:b8:4d:ac:e3:8d:4b:f4:b7:b6:99:ad:c7:
                    ca:3f:85:a0:d7:de:f8:f7:56:fb:48:02:16:5f:74:
                    0a:c8:1a:bf:8a:81:c6:c8:fb:0c:db:3b:92:b5:aa:
                    d1:9a:cf:e8:88:e3:94:5c:38:08:d4:2b:d8:08:69:
                    27:74:6c:45:d2:66:ec:ae:b1:b8:49:a8:9f:b9:d7:
                    13:14:c0:b4:68:16:dd:22:05:a5:35:0e:bf:e2:f2:
                    43:d7:31:aa:4a:6e:82:f2:a0:2f:5a:7d:09:77:45:
                    aa:30:16:dd:e3:b6:d4:f2:a4:3a:d1:8c:6b:bf:48:
                    ed:61:9e:43:da:5f:05:b6:dd:76:04:4c:9a:e8:1a:
                    03:d9:67:35:b5:84:3a:15:41:6a:ed:cf:ac:26:88:
                    1b:4c:ba:5a:63:ff:e1:9e:fe:58:17:13:39:5e:cb:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:EB:F3:EA:D8:71:09:6D:DF:5C:36:CF:00:E5:E4:4D:70:C4:40
            X509v3 Authority Key Identifier:
                keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:27:42:40:e3:d8:5a:41:0a:84:29:c0:2c:f8:d1:3a:01:47:
         8b:0b:62:be:f0:38:dc:81:46:f4:74:16:b3:b5:1b:ec:6a:7d:
         c3:ae:49:03:4a:2c:78:8d:c6:46:d4:de:23:f3:91:d9:dc:40:
         c5:a6:1a:28:9f:7e:7b:01:d8:92:46:c1:2f:1d:d5:8e:15:e5:
         81:1b:32:34:26:43:6c:90:eb:e7:e9:90:32:4d:fe:6d:5c:76:
         6e:13:6e:05:0c:f5:33:f3:47:e3:54:ff:ff:d5:89:97:89:17:
         ac:95:9f:50:74:77:48:17:77:23:71:7b:eb:d2:ca:1e:e9:49:
         21:93:30:3a:7d:b1:ee:ae:3b:2e:4a:c3:c0:eb:90:b3:aa:09:
         36:09:82:66:d6:a2:41:c7:65:87:5f:df:c3:ac:e5:fb:38:a7:
         72:79:8e:5e:1c:d4:f8:49:65:b8:1b:49:6b:f9:a5:fd:5a:fa:
         47:05:e4:a5:f1:e2:9f:9f:63:40:ed:58:09:99:4f:51:60:7d:
         5d:b3:8a:ff:ce:15:aa:3f:88:94:db:ac:c4:57:bf:c3:30:3e:
         a6:9d:62:2a:53:4a:e6:a3:9d:62:44:97:32:ab:7e:65:5a:82:
         3a:04:c1:cb:84:a2:60:b5:08:24:01:ac:b0:7e:19:35:82:85:
         6d:60:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 08:29:19 2026 by rpki-client