Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
File:                     1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json)
Hash identifier:          mRqq7yBQbm0h5wM1uXSsrD/3fhYAHYKjBIXEya/Kd9Y=
Subject key identifier:   6E:E6:2B:3F:EA:1E:3A:C3:8B:28:1C:C2:1E:F9:60:D6:9A:4F:8E:67
Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7
Certificate issuer:       /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
Certificate serial:       019D39410167AB0B51B0672F5F833BF881DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
Manifest number:          0D5A
Signing time:             Sun 29 Mar 2026 11:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:54 +0000
Files and hashes:         1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: Weoa3+TgO+FutNsnDM0Bp3GGsNcBx/T7004FLJAWtZM=)
                          2: 28NIcQsoO9aYUkqz8eNuokXmz7k.roa (hash: Maz19xfHOeRc2yxXkK1eH+j110RWG6meSjGWmHuiuf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:01:67:ab:0b:51:b0:67:2f:5f:83:3b:f8:81:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
        Validity
            Not Before: Mar 29 11:00:54 2026 GMT
            Not After : Mar 30 11:00:54 2026 GMT
        Subject: CN=6ee62b3fea1e3ac38b281cc21ef960d69a4f8e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:bf:4d:6c:ca:e2:f9:cf:d5:20:c8:9a:79:
                    f6:0a:47:82:c6:cd:dd:aa:02:e2:f7:7d:b2:0f:1b:
                    fb:57:3e:2e:6c:bc:c3:68:71:d7:f8:25:9d:60:d2:
                    eb:37:67:73:83:8b:e1:ad:45:30:31:fc:f9:71:b2:
                    da:44:e8:f1:a7:8c:fb:76:64:02:89:98:05:e6:f3:
                    2f:88:e1:a5:5d:fc:a6:90:34:4f:48:b1:60:05:48:
                    5a:e9:66:ac:65:3b:a5:09:0a:88:13:3a:3e:3b:05:
                    2d:1d:94:1e:31:c6:36:e1:08:39:68:1c:ca:c0:78:
                    12:7a:67:c0:7f:01:4b:5a:8e:7e:00:d1:60:a5:07:
                    82:92:1a:7a:32:e8:49:40:1d:c2:ed:73:df:c5:cb:
                    4b:fc:35:46:a0:b2:2c:18:39:eb:1b:44:09:b2:bb:
                    84:d1:f7:e2:71:f5:a8:1b:ad:01:66:1c:ca:16:a3:
                    a5:f2:1d:4e:12:f5:3a:29:ce:b9:10:45:52:11:2f:
                    12:bb:10:e5:8e:ee:8a:ae:6d:37:55:32:b0:27:4e:
                    a0:0b:91:c5:9d:da:98:48:f3:97:c7:34:ca:93:ba:
                    3e:c3:01:75:05:12:83:d6:48:db:37:cb:22:0a:aa:
                    50:db:f0:5d:ca:98:00:98:f3:07:2d:59:06:64:a0:
                    7e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:2B:3F:EA:1E:3A:C3:8B:28:1C:C2:1E:F9:60:D6:9A:4F:8E:67
            X509v3 Authority Key Identifier:
                keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b2:bb:fd:45:34:c2:69:c2:23:fe:64:43:b2:72:ec:d7:04:
         d3:c9:f3:4b:a7:9a:3b:cf:68:f0:61:69:f2:32:04:a8:b6:27:
         39:cf:3b:bd:11:ac:a4:01:2e:03:68:eb:77:29:d9:9c:54:60:
         6d:c4:da:80:a2:2d:fd:8d:ce:a2:4e:ca:6d:08:c0:11:52:02:
         98:13:e4:e2:0c:8c:c8:5c:40:23:38:6b:33:87:79:56:d4:70:
         a9:99:89:c8:a1:d9:13:a9:20:ce:de:38:28:dd:d8:41:b2:32:
         38:e8:73:13:da:13:ba:89:a9:cf:f6:eb:4e:70:13:bf:d1:db:
         06:1d:13:00:b7:4f:3f:b4:6b:5f:7a:93:3c:b8:75:27:0c:61:
         ca:c0:d9:e8:9a:15:9d:2a:62:de:6f:ec:10:3e:7c:b9:1a:79:
         1a:2a:e0:c9:25:ce:41:aa:bb:bc:dc:84:67:a4:de:94:6d:8d:
         f0:22:41:44:02:1c:63:3f:97:be:68:27:90:c6:29:0b:c7:5e:
         ab:0d:fa:e0:04:bc:2a:14:6c:ca:30:9d:38:24:24:00:4b:81:
         74:7a:86:e7:fc:a3:66:ee:cf:fa:5c:88:de:58:de:53:4b:4e:
         1f:62:88:3f:d5:ec:2e:09:d9:72:42:a1:4b:5c:6a:8c:66:f3:
         e9:f9:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:46 2026 by rpki-client